Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e20323633353538.roa
File:                     3137372e38352e3235322e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          OkLVFUfwuQK5X+g4qUSh2M7ZQoXhYxYKh1wkUN9ooHA=
Subject key identifier:   B8:BE:3A:68:9A:AA:C2:85:90:B3:72:20:69:48:D0:02:75:21:BC:2B
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       7B80F13F0A8ECEE72D7496A3A0A629CB5B36C1F6
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e20323633353538.roa
Signing time:             Wed 03 Jul 2024 17:34:58 +0000
ROA not before:           Wed 03 Jul 2024 17:29:58 +0000
ROA not after:            Wed 02 Jul 2025 17:34:58 +0000
asID:                     263558
IP address blocks:        177.85.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:80:f1:3f:0a:8e:ce:e7:2d:74:96:a3:a0:a6:29:cb:5b:36:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:58 2024 GMT
            Not After : Jul  2 17:34:58 2025 GMT
        Subject: CN=B8BE3A689AAAC28590B372206948D0027521BC2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:e8:63:15:fb:bb:cd:45:36:e5:fc:9b:a0:
                    b3:1b:4d:34:7a:e2:df:6b:1d:27:03:01:60:9e:ec:
                    c3:51:d3:c8:e5:b4:19:51:bb:f3:f4:da:fc:9a:44:
                    b5:d2:f6:16:b1:8c:b6:ec:82:5a:82:b7:57:86:0f:
                    43:53:de:47:97:d8:db:6b:f1:f2:eb:7e:cc:1a:5a:
                    5b:32:89:52:4d:56:f6:1c:ed:70:28:5a:2c:c5:29:
                    71:f4:2d:76:eb:0b:60:a8:15:48:f2:4b:4f:8f:86:
                    cb:07:0d:ea:bd:0a:45:e5:84:3a:90:35:30:36:ee:
                    a5:8d:57:be:e2:9d:87:9a:a9:a0:90:82:09:0d:87:
                    89:39:fb:24:cc:0e:25:57:54:6c:b6:d5:39:71:f6:
                    41:c5:25:d8:41:b4:08:1c:8c:94:44:ee:35:f2:7b:
                    a6:73:67:22:ef:5d:58:28:09:29:78:d3:cf:06:c4:
                    5f:dd:75:58:48:e2:ee:b6:ef:99:3e:6a:fa:9d:93:
                    3e:64:49:ef:ea:3f:c7:87:2a:3f:c9:5c:d0:52:b0:
                    92:22:cb:54:ff:e0:94:e8:b4:33:cd:68:2b:58:2c:
                    37:ef:42:1a:4b:9d:17:99:86:42:d7:7c:27:dd:8a:
                    9c:a4:55:8f:53:8c:85:db:ad:f2:79:76:eb:b2:70:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BE:3A:68:9A:AA:C2:85:90:B3:72:20:69:48:D0:02:75:21:BC:2B
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:db:cb:20:c6:59:f4:81:d2:4e:a8:ea:90:16:8c:46:d8:c1:
         f6:c1:50:24:29:42:85:ec:00:fb:26:54:e5:69:0d:ac:20:4e:
         fc:fb:fb:58:37:31:8d:1d:fe:8c:52:c3:71:9f:87:4c:82:22:
         b0:4e:ed:18:b0:60:44:23:36:5f:99:bf:61:1d:ec:5f:47:c5:
         96:42:44:e0:32:75:78:e5:34:6f:d6:2f:db:1d:99:c8:f0:f5:
         95:06:08:2f:f8:a1:db:fd:df:ae:36:42:57:07:37:66:6a:bf:
         88:14:a5:0a:bc:2c:40:5b:78:4e:ab:ac:0e:c6:51:dc:7a:ca:
         e1:5c:1a:1b:45:e3:49:27:81:62:6b:32:1e:74:b8:37:7b:13:
         6b:49:75:30:7a:7c:8d:9d:2b:93:4f:1a:f7:54:79:8f:cd:c0:
         ff:0e:63:0d:72:65:ed:19:2b:a5:56:64:5c:71:ef:c3:fc:b3:
         a0:6d:b6:5a:a6:78:b0:e5:fb:50:23:25:ab:c1:de:0b:26:a4:
         62:18:f3:ae:59:57:02:ce:dd:56:9b:84:26:6c:e2:4b:67:2d:
         f3:91:16:d3:d3:3d:70:c1:30:05:de:73:d8:d0:1d:42:1a:66:
         16:3e:cf:fa:1e:81:c7:33:18:89:5b:4f:49:fd:0b:76:20:e8:
         ae:fb:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:15:31 2024 by rpki-client on console-ams.rpki-client.org