Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35302e302f32342d3234203d3e20323730383638.roa
File:                     3137372e32332e35302e302f32342d3234203d3e20323730383638.roa (raw, json)
Hash identifier:          I5ZTHsRyT6slZ1dN5H2tvE+ueCCIcCBJQ3GK4nRgS6E=
Subject key identifier:   A9:B0:BD:BA:D0:7F:DD:F6:09:B5:B0:D8:0B:0D:84:F5:DD:1A:2B:D8
Certificate issuer:       /CN=B9565814EEE07F40E147986C257744795A8CFC01
Certificate serial:       479874282B5357ACFD8BDE3F42F13A1E082402B0
Authority key identifier: B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35302e302f32342d3234203d3e20323730383638.roa
Signing time:             Wed 03 Apr 2024 21:39:28 +0000
ROA not before:           Wed 03 Apr 2024 21:34:28 +0000
ROA not after:            Wed 02 Apr 2025 21:39:28 +0000
asID:                     270868
IP address blocks:        177.23.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:98:74:28:2b:53:57:ac:fd:8b:de:3f:42:f1:3a:1e:08:24:02:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9565814EEE07F40E147986C257744795A8CFC01
        Validity
            Not Before: Apr  3 21:34:28 2024 GMT
            Not After : Apr  2 21:39:28 2025 GMT
        Subject: CN=A9B0BDBAD07FDDF609B5B0D80B0D84F5DD1A2BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:be:b7:27:ab:56:5f:88:84:99:18:15:a1:
                    04:93:89:70:41:f6:56:9a:35:5e:f2:e6:7f:df:15:
                    86:36:8f:49:1b:a8:a3:8c:1c:02:e4:2d:2e:c1:0a:
                    dd:5a:3e:06:c2:4d:00:2a:f7:e3:52:b2:6b:1e:2b:
                    1f:81:ba:2e:a4:ce:25:6d:d8:94:00:ea:8d:e3:f6:
                    0f:ef:cc:35:e7:8f:e3:1b:92:be:31:df:60:9d:33:
                    c2:ba:dd:27:bf:67:1e:0d:1c:25:5a:61:72:a0:7e:
                    fe:e8:99:fc:f1:29:fc:4a:f7:e7:d8:9c:cd:0c:ab:
                    bf:4d:04:4e:7a:6b:1f:90:7b:7b:a6:2b:8e:70:28:
                    87:87:6e:b0:a2:0a:2e:f8:17:9d:97:99:22:8d:ef:
                    97:1f:79:bb:0d:5a:a5:e9:38:37:4b:a7:2c:b9:db:
                    0e:9d:c7:d7:45:2b:9c:ba:d4:de:9f:f1:72:64:f4:
                    f8:4f:5a:f3:5f:e9:d5:e6:ea:bf:a4:8f:ea:6b:75:
                    3d:88:60:92:50:4a:32:2a:05:8d:da:3d:2f:15:ef:
                    07:c7:b9:4e:db:af:81:fb:ee:9c:41:a2:2e:08:08:
                    e5:0a:74:9f:45:51:e6:a4:46:e1:a7:dc:28:21:8b:
                    d3:50:e7:7e:d9:e1:f9:e8:f9:75:4b:2e:3e:c1:cf:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:BD:BA:D0:7F:DD:F6:09:B5:B0:D8:0B:0D:84:F5:DD:1A:2B:D8
            X509v3 Authority Key Identifier:
                keyid:B9:56:58:14:EE:E0:7F:40:E1:47:98:6C:25:77:44:79:5A:8C:FC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/B9565814EEE07F40E147986C257744795A8CFC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9565814EEE07F40E147986C257744795A8CFC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmftA7EtjcgXHom492micBmcKey5oijk6VqpGiKX4zSW/1/3137372e32332e35302e302f32342d3234203d3e20323730383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:b2:45:f4:97:fc:e1:0b:90:dc:f0:51:be:6c:78:41:dc:
         32:0a:73:4b:5a:f2:79:03:8b:b6:c0:cc:a8:f6:f2:e8:98:4b:
         d6:ba:f0:01:40:56:ba:42:77:65:97:cb:0b:34:15:ce:05:7b:
         51:09:51:34:c2:40:50:00:b6:77:d8:01:49:0b:59:d9:cf:cb:
         8d:d0:5e:87:85:e2:43:a9:13:37:79:2e:b9:ea:dd:b0:5d:36:
         86:31:b6:0a:34:90:3e:e3:e0:b4:ba:a8:e6:2e:32:0c:72:1b:
         be:d0:0a:98:d2:12:0b:72:0b:d9:42:36:96:1e:dc:3d:29:9d:
         61:df:f3:2c:26:18:cf:40:cf:27:6d:57:eb:80:1b:16:1f:87:
         aa:9b:05:ba:0b:8b:06:92:7a:6a:a5:d9:08:79:68:5f:a1:e6:
         e6:89:90:8d:67:71:67:42:b5:f9:e0:97:59:6b:b1:b9:2e:0e:
         0e:17:64:8d:6d:ff:bc:97:12:b8:2f:f4:a6:b6:30:b3:5f:75:
         72:59:1a:53:b5:2e:9e:ec:a7:9f:ba:f4:46:73:95:ab:49:a9:
         97:5f:e0:75:9a:41:2e:0d:a0:ef:3f:ef:03:e0:02:ee:cd:a0:
         33:a3:0e:5c:e9:61:17:0e:b9:8c:16:d9:7b:d0:41:00:ae:47:
         9e:93:79:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR5h0KCtTV6z9i94/QvE6HggkArAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjk1NjU4MTRFRUUwN0Y0MEUxNDc5ODZDMjU3NzQ0Nzk1
QThDRkMwMTAeFw0yNDA0MDMyMTM0MjhaFw0yNTA0MDIyMTM5MjhaMDMxMTAvBgNV
BAMTKEE5QjBCREJBRDA3RkRERjYwOUI1QjBEODBCMEQ4NEY1REQxQTJCRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbL63J6tWX4iEmRgVoQSTiXBB
9laaNV7y5n/fFYY2j0kbqKOMHALkLS7BCt1aPgbCTQAq9+NSsmseKx+Bui6kziVt
2JQA6o3j9g/vzDXnj+Mbkr4x32CdM8K63Se/Zx4NHCVaYXKgfv7omfzxKfxK9+fY
nM0Mq79NBE56ax+Qe3umK45wKIeHbrCiCi74F52XmSKN75cfebsNWqXpODdLpyy5
2w6dx9dFK5y61N6f8XJk9PhPWvNf6dXm6r+kj+prdT2IYJJQSjIqBY3aPS8V7wfH
uU7br4H77pxBoi4ICOUKdJ9FUeakRuGn3Cghi9NQ537Z4fno+XVLLj7Bz0/RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqbC9utB/3fYJtbDYCw2E9d0aK9gwHwYDVR0j
BBgwFoAUuVZYFO7gf0DhR5hsJXdEeVqM/AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1mdEE3RXRqY2dYSG9tNDkybWljQm1jS2V5NW9pams2VnFwR2lLWDR6
U1cvMS9COTU2NTgxNEVFRTA3RjQwRTE0Nzk4NkMyNTc3NDQ3OTVBOENGQzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5NTY1ODE0RUVFMDdGNDBF
MTQ3OTg2QzI1Nzc0NDc5NUE4Q0ZDMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htZnRBN0V0amNnWEhvbTQ5Mm1pY0JtY0tleTVvaWprNlZxcEdpS1g0elNXLzEv
MzEzNzM3MmUzMjMzMmUzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsRcyMA0GCSqGSIb3DQEBCwUAA4IBAQBvZbJF9Jf8
4QuQ3PBRvmx4QdwyCnNLWvJ5A4u2wMyo9vLomEvWuvABQFa6Qndll8sLNBXOBXtR
CVE0wkBQALZ32AFJC1nZz8uN0F6HheJDqRM3eS656t2wXTaGMbYKNJA+4+C0uqjm
LjIMchu+0AqY0hILcgvZQjaWHtw9KZ1h3/MsJhjPQM8nbVfrgBsWH4eqmwW6C4sG
knpqpdkIeWhfoebmiZCNZ3FnQrX54JdZa7G5Lg4OF2SNbf+8lxK4L/SmtjCzX3Vy
WRpTtS6e7KefuvRGc5WrSamXX+B1mkEuDaDvP+8D4ALuzaAzow5c6WEXDrmMFtl7
0EEArkeek3mz
-----END CERTIFICATE-----
Generated at Sun Aug 25 15:10:18 2024 by rpki-client on console-ams.rpki-client.org