Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/3137372e382e36342e302f32322d3332203d3e20323632383333.roa
File:                     3137372e382e36342e302f32322d3332203d3e20323632383333.roa (raw, json)
Hash identifier:          N3Pe42uYotDeE8w0ucK/3NKdG+8bsV+ZXKedcAgb+DQ=
Subject key identifier:   2E:70:57:9A:54:85:54:FA:18:85:89:33:5E:E2:F9:31:7B:95:72:A9
Certificate issuer:       /CN=43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77
Certificate serial:       6A8D158741462B72BD49A70DC6070838762F43B4
Authority key identifier: 43:86:1D:E4:D9:EB:4A:4A:65:C2:BE:7F:D7:F8:8E:0F:CD:C3:CB:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/3137372e382e36342e302f32322d3332203d3e20323632383333.roa
Signing time:             Wed 03 Apr 2024 21:00:19 +0000
ROA not before:           Wed 03 Apr 2024 20:55:19 +0000
ROA not after:            Wed 02 Apr 2025 21:00:19 +0000
asID:                     262833
IP address blocks:        177.8.64.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8d:15:87:41:46:2b:72:bd:49:a7:0d:c6:07:08:38:76:2f:43:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77
        Validity
            Not Before: Apr  3 20:55:19 2024 GMT
            Not After : Apr  2 21:00:19 2025 GMT
        Subject: CN=2E70579A548554FA188589335EE2F9317B9572A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:b5:76:f9:ef:6d:0f:62:d7:20:3e:9b:56:
                    0e:e0:29:af:6e:4b:6a:fb:d1:f8:81:1a:ce:61:42:
                    37:17:9d:5c:2e:88:16:ef:08:19:f6:05:b6:f2:ab:
                    24:31:62:fb:75:12:b4:12:d5:2b:ac:92:93:57:30:
                    0d:f7:4f:7f:8b:30:46:fc:70:08:7a:0a:32:16:85:
                    03:66:ea:48:01:ae:40:e6:d2:b9:f7:a0:fe:bf:6f:
                    51:b3:95:22:ba:d6:4f:5a:82:41:fa:b9:87:07:89:
                    4b:88:3c:4e:44:3c:53:2f:d7:8d:f9:ae:8d:c7:ae:
                    a2:80:e3:4a:37:48:2d:89:19:8e:19:8f:e1:c8:b6:
                    2b:fe:d3:05:0d:fb:98:93:83:3c:46:98:94:4e:ca:
                    a8:61:e7:7e:77:fa:07:1e:27:68:28:bc:61:64:9f:
                    f7:d8:e1:ac:63:4b:b0:97:05:d8:b4:04:0f:48:60:
                    b9:48:2a:df:c5:04:9b:05:4e:a2:b9:14:76:93:a6:
                    d8:3f:e9:e7:13:f8:55:ef:d6:e7:83:9f:80:cd:5f:
                    50:20:af:e6:63:78:ee:18:9f:fa:72:68:40:77:0a:
                    8a:13:31:57:e0:73:9c:d8:da:87:ab:9f:93:49:d3:
                    c8:5b:06:03:03:e5:93:d0:94:75:79:27:9d:94:58:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:57:9A:54:85:54:FA:18:85:89:33:5E:E2:F9:31:7B:95:72:A9
            X509v3 Authority Key Identifier:
                keyid:43:86:1D:E4:D9:EB:4A:4A:65:C2:BE:7F:D7:F8:8E:0F:CD:C3:CB:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43861DE4D9EB4A4A65C2BE7FD7F88E0FCDC3CB77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hix8FdCsfzzH3Rgc7aoN4eFLWTFBEqpnqc8PNquGWj4/2/3137372e382e36342e302f32322d3332203d3e20323632383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:5b:d8:83:bd:45:9f:65:7f:cd:0d:29:ad:03:37:31:f0:81:
         aa:3a:32:a1:9c:11:b8:3b:6a:17:ec:b3:37:25:05:58:c2:e3:
         6e:dd:1a:2a:47:62:c7:87:04:e4:5e:4b:ee:f9:eb:7b:48:93:
         78:9d:0e:ca:76:77:25:c2:63:32:10:5d:ca:88:f9:2b:16:d8:
         27:68:da:93:8b:4f:af:c0:54:01:5e:01:bc:c3:e0:79:51:27:
         a9:f9:47:6a:d9:9d:47:39:41:e4:dc:61:05:4b:bc:74:ca:2c:
         1d:32:e6:f8:fc:b8:9d:ec:a2:5d:fc:77:34:e3:b9:3d:eb:69:
         3e:22:46:a1:6a:7c:28:38:25:ee:49:99:0b:19:24:12:20:11:
         9d:53:2e:94:3f:3e:d5:76:86:87:61:70:83:d3:cc:7e:c4:c9:
         dd:76:56:19:34:73:c6:17:29:fe:cb:33:51:3a:31:ab:0c:22:
         e0:cb:75:79:5d:17:c3:ec:c1:03:2d:9d:b0:85:ef:69:4d:d8:
         b0:76:45:7c:b3:17:e4:31:a1:78:5f:35:35:6a:9c:dc:29:96:
         48:04:93:73:73:4b:59:5c:52:cb:70:6d:86:df:37:f7:52:08:
         83:53:41:53:80:81:71:f5:83:e1:d0:96:78:65:3d:bd:ff:2e:
         ac:ac:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 16:39:58 2024 by rpki-client on console-ams.rpki-client.org