Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235322e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          TGpQ+JvSh/h68LyevCTZuvnjtWnVL4fvpn4Wm/b+Kuc=
Subject key identifier:   9E:3B:8F:10:DE:10:67:DA:D0:14:55:B5:5A:86:C0:4E:1B:DA:6F:03
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       2D81A984F77F2659C4F80CE234AD17881DE726D1
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:38 +0000
ROA not before:           Wed 03 Jul 2024 17:29:38 +0000
ROA not after:            Wed 02 Jul 2025 17:34:38 +0000
asID:                     52556
IP address blocks:        177.85.252.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:81:a9:84:f7:7f:26:59:c4:f8:0c:e2:34:ad:17:88:1d:e7:26:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:38 2024 GMT
            Not After : Jul  2 17:34:38 2025 GMT
        Subject: CN=9E3B8F10DE1067DAD01455B55A86C04E1BDA6F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:af:26:a4:28:c7:21:72:ff:33:e6:93:01:
                    88:8f:68:24:3f:f1:53:f5:ba:8d:80:06:60:d5:52:
                    54:f1:e8:8c:fe:94:99:08:ff:6b:bc:a2:ce:f3:87:
                    0e:24:d0:fa:ce:ec:ef:54:fb:14:31:ae:9a:19:3d:
                    be:f3:56:88:fe:9f:2c:c4:27:f6:30:86:23:aa:2e:
                    4e:4f:ca:4c:59:17:e4:f5:82:54:b7:6d:2f:6c:42:
                    8b:d8:69:60:70:dd:e7:75:ec:eb:df:e4:b8:b3:9b:
                    4a:5e:98:45:f1:4a:50:4b:0b:d6:32:ff:ae:37:75:
                    2c:88:0e:01:f0:84:0e:3a:ee:ff:4d:ac:c2:e2:86:
                    35:d8:06:d2:7f:54:ce:4a:83:ef:5f:c5:19:2c:81:
                    74:67:b1:cc:d7:57:b5:36:58:00:31:65:0b:b2:66:
                    a4:74:42:97:f6:81:5d:07:aa:24:cb:ff:24:4c:96:
                    9c:36:05:62:dd:01:aa:4c:55:49:7e:c0:53:1f:9d:
                    b4:f9:4c:22:66:44:c5:12:a6:52:53:c4:5a:28:4b:
                    4e:94:b2:cc:8b:ca:2c:55:6f:fd:3d:7d:1d:67:8b:
                    46:2a:9e:32:00:9d:cd:a8:63:1a:7e:bd:f4:db:05:
                    ff:23:8d:b6:82:a8:7d:86:af:a8:28:54:f9:db:b6:
                    b1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3B:8F:10:DE:10:67:DA:D0:14:55:B5:5A:86:C0:4E:1B:DA:6F:03
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235322e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:ec:ee:fa:f3:8a:80:6d:c3:08:88:bd:69:e8:9e:06:be:
         6d:90:54:b3:e5:e0:af:8b:32:36:58:b8:a6:25:01:bb:a5:5f:
         e8:c0:05:3d:22:8a:bb:b0:f9:a0:a4:4c:91:3c:d1:15:99:df:
         4c:f4:89:ca:cb:13:81:75:b5:3b:5f:06:a6:1b:24:89:f9:ec:
         01:c9:b5:1e:6f:e1:78:75:95:ad:fb:ca:98:16:fe:1b:50:1e:
         39:30:6f:cf:cf:3e:b9:58:52:04:90:e8:8b:76:71:1e:c7:80:
         2f:a0:3c:b6:ea:ec:54:83:51:5b:e0:ca:a7:5e:70:80:24:ba:
         84:1e:21:d9:28:bd:59:ce:91:b5:4b:04:eb:b3:3e:e7:9e:44:
         9f:34:96:c0:30:df:c2:26:a9:5a:c2:bc:9e:18:8a:d4:8f:63:
         33:33:ac:ac:7a:b1:f7:f6:83:f3:43:d8:1c:fd:e0:77:98:09:
         9a:67:58:13:aa:67:3a:98:58:c7:3e:fe:62:65:e7:7a:b3:5d:
         f1:57:d4:0a:5d:09:33:87:c1:ac:21:e9:f4:6c:a2:80:bb:28:
         35:d7:83:9a:b3:24:c9:83:ea:25:24:b2:9c:0b:3e:30:82:c4:
         fb:84:54:78:0d:2f:c2:c5:b5:53:90:9d:86:02:3a:b9:35:db:
         2e:e8:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:17:38 2024 by rpki-client on console-fra.rpki-client.org