Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3234382e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          WflnFuK9Eh+MTgiB9jpbvmYGOY93S7c8EHk5rf4eS44=
Subject key identifier:   5B:B2:37:AB:1B:4F:A3:87:EE:86:D9:1B:2D:F0:8F:AF:61:F9:F8:EC
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       29D8B1872828CF3A35BC0C3C3BADEA029081613E
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:30 +0000
ROA not before:           Wed 03 Jul 2024 17:29:30 +0000
ROA not after:            Wed 02 Jul 2025 17:34:30 +0000
asID:                     52556
IP address blocks:        177.85.248.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d8:b1:87:28:28:cf:3a:35:bc:0c:3c:3b:ad:ea:02:90:81:61:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:30 2024 GMT
            Not After : Jul  2 17:34:30 2025 GMT
        Subject: CN=5BB237AB1B4FA387EE86D91B2DF08FAF61F9F8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:bb:c9:97:30:26:49:63:c8:2f:d9:ef:b6:
                    d9:14:e9:ff:98:af:63:7c:b8:4d:65:b1:86:f4:1c:
                    07:01:15:87:ab:3e:7a:34:78:b3:a3:ed:33:9a:27:
                    2d:df:5c:ae:ba:f5:af:df:0f:90:00:27:ea:2e:9a:
                    78:bf:d2:eb:5c:47:f0:fa:e0:43:b2:c2:99:a3:22:
                    ae:4a:d0:be:86:79:24:3c:22:d9:6d:a8:e4:1c:1e:
                    fb:fd:bf:5f:43:b2:6a:e5:a1:81:8d:c7:c1:50:ad:
                    63:78:b2:36:09:51:42:c3:53:61:60:ea:ef:62:2d:
                    4e:77:66:18:7d:f8:42:b0:59:dc:c4:11:3a:17:74:
                    61:ed:61:08:ee:59:28:52:18:f1:47:8a:47:b6:7b:
                    7a:26:04:c2:de:bf:cb:64:33:bc:0e:54:92:48:63:
                    f7:bf:10:f4:e7:ea:f0:df:4f:63:bd:bf:0d:1b:e3:
                    fa:7d:c9:9d:c8:84:39:d3:88:85:b1:33:e2:7f:72:
                    d3:0f:e3:6c:24:e8:c3:c8:31:40:43:29:86:45:8a:
                    3d:24:f8:77:c8:b8:4c:fe:88:51:da:be:c2:fc:10:
                    51:6d:77:19:c1:e6:00:5b:f1:b3:8e:6f:59:ea:73:
                    4b:8b:88:6d:f7:1b:62:f4:db:23:61:bc:47:2c:79:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:37:AB:1B:4F:A3:87:EE:86:D9:1B:2D:F0:8F:AF:61:F9:F8:EC
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3234382e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:53:7e:a0:6f:17:13:03:de:f3:0f:a9:d1:52:67:74:0d:
         76:82:fd:ab:f4:1d:b9:02:ba:44:73:c7:3a:23:f1:bc:f1:76:
         b8:a1:e0:25:e3:4a:24:88:c4:2e:04:cb:9e:79:aa:6a:2b:7d:
         8e:7a:24:50:41:27:4b:a0:cd:38:0e:b8:7a:d1:d8:54:91:16:
         7b:01:97:26:2a:24:98:2e:0c:40:db:3b:5b:4b:b3:9d:f0:a1:
         02:1d:c9:9d:a1:d8:f3:5f:7e:83:ac:80:dd:27:40:55:02:30:
         11:59:91:70:92:f8:cc:d1:be:31:bc:41:8b:d9:9f:98:43:57:
         80:b2:25:f8:3d:eb:c0:e5:91:46:20:01:a8:05:91:0f:16:5a:
         73:7b:92:0c:b2:9e:a7:82:4f:d8:41:a9:74:82:b2:91:e6:e9:
         58:70:5f:3f:a6:c7:cf:21:df:4e:a9:a1:c1:96:be:79:5c:c5:
         a8:9d:0b:66:35:11:db:09:0d:45:f0:8f:9a:85:22:e5:71:63:
         ec:54:8c:7c:6f:0f:d1:68:0e:c2:1d:1d:01:95:a2:e6:33:bd:
         50:62:57:a6:a0:31:59:ea:5d:da:a6:5f:bb:75:d3:f6:7c:fb:
         10:fb:c7:80:53:f0:45:8c:38:39:2e:d6:af:b7:86:19:14:1d:
         15:af:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:15:31 2024 by rpki-client on console-ams.rpki-client.org