Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa
File:                     3137372e38352e3235302e302f32332d3233203d3e203532353536.roa (raw, json)
Hash identifier:          RCHejHS/Hw9rdMMXvPWWZAY06dhjppQxBQToj6hVURk=
Subject key identifier:   D4:08:C5:19:9A:D2:DE:F8:4F:2D:19:DA:FF:17:04:5E:84:97:6B:7C
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       036A4A2A0D584096C433BA33D968CDA55BA9549A
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:35 +0000
ROA not before:           Wed 03 Jul 2024 17:29:35 +0000
ROA not after:            Wed 02 Jul 2025 17:34:35 +0000
asID:                     52556
IP address blocks:        177.85.250.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:4a:2a:0d:58:40:96:c4:33:ba:33:d9:68:cd:a5:5b:a9:54:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:35 2024 GMT
            Not After : Jul  2 17:34:35 2025 GMT
        Subject: CN=D408C5199AD2DEF84F2D19DAFF17045E84976B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:60:34:3e:c1:18:4c:29:8b:23:84:89:86:
                    d0:04:88:db:61:9a:a7:56:7f:9b:f0:1c:92:97:ee:
                    b0:dd:07:2e:4f:86:2b:64:9a:88:74:74:f4:fd:1f:
                    10:63:9e:a7:24:b8:3e:2b:76:6b:d5:ae:3c:ed:31:
                    5d:71:77:28:17:6e:c5:6f:2c:0a:1a:b4:5c:6d:ed:
                    9c:5e:f3:62:de:07:e7:28:69:f6:99:05:eb:be:5f:
                    58:66:a9:88:64:6e:0f:5c:81:5d:6d:31:33:1a:d1:
                    11:47:0e:91:5a:3f:de:a8:63:cd:21:7a:a3:36:2c:
                    a3:d6:1f:08:e2:40:f6:2c:7d:88:0b:f9:ca:b3:21:
                    4a:7d:36:ec:52:ec:89:6d:5e:37:1f:72:2b:84:40:
                    29:9f:77:53:fb:9a:6b:d3:4e:ef:47:2c:03:61:8e:
                    b1:10:96:ae:f6:bd:0c:0a:09:05:f7:51:e2:58:e0:
                    51:c6:aa:0a:5c:34:59:e0:fe:27:9e:0e:b1:d8:9f:
                    af:4e:4d:c1:b5:16:8e:d0:c9:19:c8:ac:93:c2:46:
                    3f:a0:19:dd:bc:00:89:c1:f8:4e:ef:2b:bb:37:da:
                    18:71:e2:e4:06:ec:5f:d3:f1:55:c9:50:ad:ff:85:
                    68:d7:9e:5e:d5:2e:dd:cc:40:8a:f8:65:53:b9:fe:
                    18:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:C5:19:9A:D2:DE:F8:4F:2D:19:DA:FF:17:04:5E:84:97:6B:7C
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235302e302f32332d3233203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:7e:80:fc:cc:c1:17:0b:b3:8a:c5:7a:36:ca:67:61:92:bf:
         3f:ac:66:44:3b:10:5b:6f:a1:70:79:3e:76:f0:08:22:b2:e5:
         9e:cc:a5:ef:08:3a:e7:af:72:80:1a:f2:04:e0:2e:1f:20:a0:
         d5:e1:31:b2:9c:6c:44:0a:8b:71:58:60:cd:95:28:2f:a6:21:
         ff:ae:31:98:f9:49:c9:3d:9e:55:30:a4:05:e3:1b:40:91:91:
         54:b7:9b:24:3b:c1:b7:27:00:89:3e:e9:af:d4:b5:e2:d3:a7:
         b7:b7:a9:a5:a8:4d:af:12:d7:d6:9e:b4:a8:99:1e:64:02:f1:
         93:c3:93:cd:b7:af:5c:3d:49:aa:d7:e7:0a:55:8e:0a:d2:41:
         b8:81:09:16:db:bf:d6:be:cb:ef:99:51:ae:d7:c1:a2:57:9b:
         bf:6c:50:25:43:33:0d:07:b9:86:cc:e3:24:1a:52:bb:31:ce:
         e5:88:79:4c:1e:13:e5:40:e3:38:db:89:fc:b8:34:8c:eb:3f:
         a1:9f:8c:36:a0:9a:be:09:9c:0c:01:80:7c:d4:7e:62:3b:7e:
         a7:1f:7c:73:f2:e8:b0:44:e1:34:a0:ba:c7:8c:2f:51:62:8a:
         0d:52:3e:ab:3d:bb:f7:01:7c:23:43:91:52:c8:cf:c7:a4:4b:
         fb:eb:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:17:38 2024 by rpki-client on console-fra.rpki-client.org