Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
File:                     3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (raw, json)
Hash identifier:          U5rq+FcbZiNrQdJ/EJzqd8YnQLTChfHx5zonvPD3LKM=
Subject key identifier:   E2:2F:D5:8C:CB:15:CB:97:66:D2:01:4E:BA:2F:E9:DC:D3:71:E1:2F
Certificate issuer:       /CN=93AA409873588A897219AA9BBC5D2F7353819FFD
Certificate serial:       4827B08750AC8DDC9A86D9D9ADE8D035BB563E5F
Authority key identifier: 93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
Signing time:             Thu 04 Apr 2024 08:00:22 +0000
ROA not before:           Thu 04 Apr 2024 07:55:22 +0000
ROA not after:            Thu 03 Apr 2025 08:00:22 +0000
asID:                     52677
IP address blocks:        177.66.204.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:27:b0:87:50:ac:8d:dc:9a:86:d9:d9:ad:e8:d0:35:bb:56:3e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93AA409873588A897219AA9BBC5D2F7353819FFD
        Validity
            Not Before: Apr  4 07:55:22 2024 GMT
            Not After : Apr  3 08:00:22 2025 GMT
        Subject: CN=E22FD58CCB15CB9766D2014EBA2FE9DCD371E12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0e:6f:b0:bf:bc:6f:6a:3c:21:31:d9:0d:ee:
                    89:26:eb:74:c0:0f:2c:fa:be:00:91:c6:10:61:ba:
                    8c:d3:80:8f:dc:b0:7b:da:6d:17:d8:2f:8f:e3:69:
                    7b:d2:8a:5c:7c:aa:b0:99:77:18:a8:e5:2b:a2:f8:
                    db:60:a1:8e:02:c6:44:fb:ee:9a:f2:5c:57:c4:42:
                    ae:dc:3f:66:12:3e:72:93:2d:bc:d5:a3:39:bd:37:
                    56:cf:d7:1f:63:39:2e:64:12:fe:a6:e3:5d:35:32:
                    2f:02:7a:a4:66:b9:fa:44:bb:1e:2b:f1:c9:b2:4d:
                    21:69:ab:a1:3d:d4:1d:a9:60:9f:62:fd:07:2e:d4:
                    4a:d4:11:c8:a8:b7:22:79:00:ba:94:6b:0f:52:63:
                    a5:07:2c:d6:4c:03:9c:79:cf:de:a5:b8:cb:cd:86:
                    f9:12:3e:37:70:b9:ef:3c:71:b7:b2:d6:bd:df:8e:
                    ad:62:72:7a:89:65:5f:20:0a:2a:08:b1:c1:91:87:
                    be:6e:2e:4c:4c:c0:d7:67:be:a5:c8:2f:59:54:4c:
                    d8:e6:cd:81:7d:b9:32:cb:96:3e:81:cd:94:45:8b:
                    23:ab:a8:b3:0c:d1:68:fa:e5:0e:6b:9e:d8:51:21:
                    f7:f6:b0:ee:e9:f0:02:93:54:fb:46:f8:95:23:3e:
                    e6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2F:D5:8C:CB:15:CB:97:66:D2:01:4E:BA:2F:E9:DC:D3:71:E1:2F
            X509v3 Authority Key Identifier:
                keyid:93:AA:40:98:73:58:8A:89:72:19:AA:9B:BC:5D:2F:73:53:81:9F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/93AA409873588A897219AA9BBC5D2F7353819FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/93AA409873588A897219AA9BBC5D2F7353819FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/2/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:19:f1:d3:e4:cc:04:21:00:8d:05:66:06:6e:9c:0c:3c:
         a1:1c:44:74:3f:a8:22:ae:e1:0f:e9:ad:7c:89:10:fb:8f:12:
         eb:ac:83:70:0e:d5:9b:3d:69:88:00:28:b3:8c:fa:00:1a:b7:
         22:29:81:5b:41:c2:01:8e:ff:9d:de:73:02:2a:53:99:44:79:
         a3:45:f0:e0:e0:de:eb:46:ae:c3:a3:79:0e:18:a3:a2:76:a8:
         15:f7:eb:18:4d:26:9d:bb:75:72:25:0a:47:83:44:d6:99:19:
         71:6a:e9:65:49:66:86:90:63:61:14:4f:82:4e:52:81:c7:60:
         27:59:5e:e5:81:e1:b7:fd:97:98:2a:9a:fb:8a:4f:e3:37:d9:
         3b:87:5c:9c:78:23:a8:69:e3:d8:a5:ec:d4:70:80:44:08:ea:
         b9:5a:e9:b1:02:e3:ae:d2:fb:5d:60:18:db:11:2a:b1:e9:01:
         95:37:1f:f2:14:22:31:32:ce:eb:12:24:0e:e1:7e:2a:52:74:
         09:9b:61:b1:00:a1:a9:97:38:95:48:98:de:33:83:71:b3:32:
         2e:aa:c9:e8:02:ce:a8:52:d3:c2:ad:6a:d6:67:d9:7c:9c:c4:
         d5:3a:f9:0c:1b:57:63:ea:07:0a:0b:31:22:4d:2c:0c:82:57:
         06:06:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 16:54:13 2024 by rpki-client on console-fra.rpki-client.org