Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32342d3234203d3e20323633353733.roa
File:                     3137372e3138342e3231362e302f32342d3234203d3e20323633353733.roa (raw, json)
Hash identifier:          DKexjZH1ruO948G7zb+LiBsQoaXy/d4BBWeF0w0ehio=
Subject key identifier:   70:D4:55:D2:B0:5E:A8:14:0A:A8:8C:B1:07:C4:2E:44:2F:01:47:46
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       4B72E424ED9B63D1668BC56F9590EE202569D010
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32342d3234203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:21:28 +0000
ROA not before:           Wed 12 Jul 2023 14:16:28 +0000
ROA not after:            Wed 10 Jul 2024 14:21:28 +0000
asID:                     263573
IP address blocks:        177.184.216.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:72:e4:24:ed:9b:63:d1:66:8b:c5:6f:95:90:ee:20:25:69:d0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:16:28 2023 GMT
            Not After : Jul 10 14:21:28 2024 GMT
        Subject: CN=70D455D2B05EA8140AA88CB107C42E442F014746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8d:b2:21:aa:7a:31:fb:d6:e5:05:6d:e9:d2:
                    c5:d3:43:d9:d5:db:2a:19:23:d1:68:12:8e:2b:7d:
                    d9:2a:da:9c:f6:7b:b1:47:77:b7:43:d9:a0:da:83:
                    a8:82:f4:ee:42:89:76:ea:5b:a3:8c:67:9d:f1:b2:
                    b9:4f:41:58:33:38:46:ac:f6:7a:0c:61:92:88:87:
                    69:fa:ff:a3:82:88:52:a4:d1:4f:dc:cb:bd:e9:b7:
                    f6:2e:e0:f3:74:f9:92:02:ef:d3:66:54:fb:e0:17:
                    d3:86:96:04:be:8e:db:98:e2:94:87:6f:bc:26:d2:
                    21:23:ef:2b:e4:44:b3:72:5a:a3:3b:36:73:d6:30:
                    ae:09:94:9f:07:8f:b4:51:ae:ee:f2:de:5a:38:47:
                    fb:7b:de:ea:d9:a0:8e:62:ab:ee:05:71:c7:bc:00:
                    65:a9:44:4d:f1:34:6d:d2:8c:2a:a3:ce:90:90:45:
                    c9:ad:c7:55:30:58:dc:ca:b5:b4:f7:ea:ac:d4:ab:
                    99:98:bf:ad:72:03:64:16:ea:32:1c:5b:4a:5a:c7:
                    ae:ec:5f:e2:47:8c:3b:c6:d6:c6:db:22:a4:bc:63:
                    b4:1a:ea:1a:49:db:52:08:72:40:84:2f:d6:04:76:
                    9b:a5:61:14:51:96:14:e2:4d:89:4c:86:af:50:88:
                    63:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D4:55:D2:B0:5E:A8:14:0A:A8:8C:B1:07:C4:2E:44:2F:01:47:46
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32342d3234203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:f5:f1:1e:20:64:92:c8:de:12:c6:3f:d2:f9:ee:a5:e6:
         ff:1e:16:f8:56:3d:4d:d9:2c:f5:20:85:be:10:73:a9:d0:69:
         e0:03:65:e4:aa:04:9d:99:8b:4b:40:d8:2f:ce:26:0e:e2:f0:
         1b:04:12:4e:80:7d:8b:e2:fc:73:4b:88:6c:61:cf:06:a3:02:
         9f:03:f9:44:aa:80:9b:b7:40:b6:b0:a4:bc:33:e6:89:01:24:
         50:95:c3:a3:a4:fe:0f:bc:c9:25:5b:33:06:dd:02:f4:4e:b3:
         50:b6:98:8a:7b:45:91:00:2e:90:d1:ac:97:d7:68:d5:76:ad:
         83:07:36:51:c7:17:7d:ac:67:a1:37:40:df:83:4a:d4:ce:d5:
         e1:78:c5:fd:cc:22:16:1e:8a:ba:0c:d5:d7:e2:91:d9:f4:18:
         a7:6c:1f:8f:f7:b9:56:d0:41:c4:4b:d5:a7:e1:f8:ff:07:20:
         27:41:6a:7a:43:2e:ed:20:6a:b1:4e:dc:1c:b1:d3:2c:d0:d7:
         a8:7f:18:47:67:76:ea:4f:93:73:9e:6c:c8:b9:b6:65:c2:e1:
         32:30:0c:42:70:f8:52:fa:21:6b:99:95:26:87:90:e9:84:14:
         03:b7:13:54:75:30:a8:27:43:5e:99:df:0a:66:6f:bc:07:ad:
         40:b2:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:23 2023 by rpki-client on console-ams.rpki-client.org