Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235332e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          FTAOXxE/eAq4tIIeHKLAJoB77cBECp0S2mkGC8vLmIE=
Subject key identifier:   5F:17:21:17:FC:B1:C0:6B:00:79:B7:A6:C9:BE:68:EB:B3:01:98:0C
Certificate issuer:       /CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
Certificate serial:       78DA2900FF2BB015E155B4E73AE1D8C8B7BE9B5F
Authority key identifier: EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa
Signing time:             Wed 03 Jul 2024 17:34:41 +0000
ROA not before:           Wed 03 Jul 2024 17:29:41 +0000
ROA not after:            Wed 02 Jul 2025 17:34:41 +0000
asID:                     52556
IP address blocks:        177.85.253.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:da:29:00:ff:2b:b0:15:e1:55:b4:e7:3a:e1:d8:c8:b7:be:9b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2037C39904E1F64A8252CC14D3C08F8F7863B2
        Validity
            Not Before: Jul  3 17:29:41 2024 GMT
            Not After : Jul  2 17:34:41 2025 GMT
        Subject: CN=5F172117FCB1C06B0079B7A6C9BE68EBB301980C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:26:47:7b:32:df:3b:00:07:d7:c5:32:93:ab:
                    10:13:4c:be:ed:85:b9:6d:1f:16:32:9b:b8:85:89:
                    67:dc:58:9e:43:34:a0:ef:33:aa:4a:f1:03:b4:8d:
                    6e:8d:c8:87:51:ad:f9:f1:2f:54:0e:17:3a:e7:37:
                    41:90:da:a4:e5:65:da:e1:df:34:82:32:93:66:f4:
                    b5:40:9c:5a:28:d9:af:79:6a:08:ba:45:6c:f1:d4:
                    c6:88:34:51:f5:d7:da:18:d0:01:d5:48:ee:84:07:
                    52:61:33:08:dd:6c:94:b9:d1:11:42:24:a2:5d:64:
                    25:51:80:12:df:38:71:13:48:f0:a8:3e:6e:0d:b4:
                    91:10:4f:65:cd:38:96:f8:1c:31:03:54:51:6f:87:
                    a0:7a:0d:dd:72:b5:82:f4:99:e4:5b:2c:7c:f1:ce:
                    cb:98:c8:39:65:7f:a8:97:e7:e4:2f:4e:e9:1d:56:
                    d1:59:37:d3:74:7a:58:9e:94:10:26:62:31:41:e4:
                    63:3c:69:d6:3f:d8:4f:0f:b7:09:cf:9b:d2:63:43:
                    e6:79:dc:25:a9:47:1d:ec:35:22:1e:05:e2:e1:0d:
                    f7:24:62:1a:11:4e:13:28:8d:54:27:e8:f5:24:a9:
                    6d:cc:60:64:e4:a4:d9:16:0e:8b:f1:27:51:0a:ab:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:17:21:17:FC:B1:C0:6B:00:79:B7:A6:C9:BE:68:EB:B3:01:98:0C
            X509v3 Authority Key Identifier:
                keyid:EB:20:37:C3:99:04:E1:F6:4A:82:52:CC:14:D3:C0:8F:8F:78:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2037C39904E1F64A8252CC14D3C08F8F7863B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235332e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:50:14:25:8d:8b:12:7a:bb:a1:13:5a:33:38:4e:ba:d3:cc:
         96:49:75:f1:8c:40:89:97:72:26:fa:ff:5d:ad:ca:0b:ff:7d:
         72:33:44:2a:13:4a:9c:f0:99:c3:0d:5b:c7:ee:4e:3e:b8:de:
         c9:0a:35:61:9d:34:d0:78:79:72:d2:ed:50:49:7f:a6:a4:95:
         bb:31:72:43:a6:8f:8a:cf:90:cb:16:cd:34:ec:21:83:4e:74:
         d6:2e:7d:ea:55:20:54:53:60:6a:a1:f4:a3:f8:bb:25:ab:00:
         80:e0:78:b8:21:56:59:d6:38:1e:f6:9c:8c:fb:9a:60:b8:7e:
         b4:9f:32:31:d4:33:3e:3c:2d:bc:70:e5:60:11:b8:f0:64:6a:
         ff:fb:0b:12:d3:a5:dc:40:e4:aa:1e:4b:f7:54:98:99:aa:1b:
         33:74:22:16:2e:78:98:80:52:c1:a5:7e:f9:98:7f:fd:51:e2:
         01:7c:ce:18:c8:0d:30:2a:dd:27:15:61:65:ba:38:89:b3:bd:
         44:a5:75:34:86:a4:e1:c4:74:dc:a6:99:8e:43:5c:90:dd:9c:
         28:e7:06:28:6d:29:e8:df:10:bf:84:0d:31:ad:bf:7d:0a:df:
         c7:3b:31:48:a7:da:df:62:26:69:0f:0d:b1:59:9a:85:60:23:
         33:b5:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 00:15:31 2024 by rpki-client on console-ams.rpki-client.org