Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa
File:                     3137372e39312e38302e302f32312d3231203d3e20323633343333.roa (raw, json)
Hash identifier:          3Y1lWlNuuhyQU6Em49UCCYVATR06KyqYQGRBx0veFw8=
Subject key identifier:   D0:D7:CF:87:37:AD:78:99:D3:C7:0E:71:D3:79:51:3D:7B:92:B4:DB
Certificate issuer:       /CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
Certificate serial:       71B78B3EBAF49239CAB41F3D499E1E4C4B7D4028
Authority key identifier: 67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa
Signing time:             Tue 25 Jun 2024 00:33:48 +0000
ROA not before:           Tue 25 Jun 2024 00:28:48 +0000
ROA not after:            Tue 24 Jun 2025 00:33:48 +0000
asID:                     263433
IP address blocks:        177.91.80.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b7:8b:3e:ba:f4:92:39:ca:b4:1f:3d:49:9e:1e:4c:4b:7d:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D877A4E50B3ECFE3C59259F9F24C748712CA67
        Validity
            Not Before: Jun 25 00:28:48 2024 GMT
            Not After : Jun 24 00:33:48 2025 GMT
        Subject: CN=D0D7CF8737AD7899D3C70E71D379513D7B92B4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:12:db:aa:ea:43:f1:cb:4f:d2:48:0a:2f:
                    5f:c1:14:8b:eb:f7:e6:bf:91:27:d1:62:ea:09:04:
                    c1:3c:36:64:d6:2d:25:d0:6a:f0:58:a8:ab:04:f3:
                    2b:62:79:dd:ae:92:6a:1e:9b:1c:2b:5a:a8:69:d9:
                    f2:ca:5c:7a:9b:de:8c:42:25:f7:dd:c3:f9:ab:4a:
                    67:2a:68:31:4b:d8:87:2a:55:9d:03:97:0d:32:ec:
                    c1:fc:3b:2e:5c:8f:e0:92:da:5a:d1:12:94:1d:51:
                    bc:4e:37:9f:4a:28:b7:cc:ce:b3:00:16:6a:f4:9d:
                    b1:5b:40:70:c8:41:12:62:b2:1f:2b:e5:72:d1:e9:
                    f4:b3:47:e3:30:1d:02:40:7a:fd:13:b9:b3:4f:ba:
                    e7:eb:ab:b1:03:8f:3c:28:95:f3:e0:22:94:cc:7a:
                    56:31:b0:dd:8d:f9:c2:28:45:4a:b8:ea:66:0f:e5:
                    7c:fb:0e:eb:72:da:7e:32:66:5b:85:c1:80:62:08:
                    89:37:71:72:fb:a7:58:bc:76:39:da:2e:dd:14:18:
                    96:05:51:fe:bf:45:02:b8:e3:05:f3:33:33:7b:c0:
                    9a:31:d9:e6:02:a2:ae:e3:db:3b:cf:c0:73:88:4b:
                    a6:dd:78:1c:53:af:87:73:96:fe:34:2b:bf:9e:b7:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:CF:87:37:AD:78:99:D3:C7:0E:71:D3:79:51:3D:7B:92:B4:DB
            X509v3 Authority Key Identifier:
                keyid:67:D8:77:A4:E5:0B:3E:CF:E3:C5:92:59:F9:F2:4C:74:87:12:CA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/67D877A4E50B3ECFE3C59259F9F24C748712CA67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67D877A4E50B3ECFE3C59259F9F24C748712CA67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:b6:4b:4c:07:0b:81:c2:0d:ac:d1:e5:3b:7e:21:bc:e5:
         6c:de:42:6f:63:b7:6c:36:48:d1:d2:1d:f0:d3:e8:23:dc:af:
         64:db:d7:9b:a7:36:39:fd:b2:65:57:bc:1a:10:af:54:53:dc:
         39:13:5b:2f:5f:85:0e:16:93:aa:60:85:80:55:8e:a8:15:1b:
         31:db:b3:ae:4e:8d:e6:c8:d6:33:4b:d4:f5:19:0d:90:5a:66:
         8c:b0:1b:d0:ad:d5:a9:d3:b5:d2:97:74:62:3b:fa:c5:2c:f2:
         38:45:96:27:fb:83:06:15:31:7a:af:03:dc:8c:55:c8:d6:28:
         b0:81:b3:dd:cd:e3:8e:ec:91:1f:33:0d:2d:95:37:61:fa:ab:
         5a:a4:93:c0:3b:99:ea:47:a7:b1:a2:8c:99:96:aa:de:4b:2a:
         b3:96:b8:ef:f1:3e:69:39:91:83:df:9e:0f:35:b3:a6:83:24:
         6e:2a:3c:ca:55:75:6f:89:1d:80:21:ce:6a:11:98:40:bb:cc:
         9f:ce:d1:03:9b:08:3a:f4:4c:29:31:a5:cf:10:79:e9:7f:29:
         3f:f4:ed:5e:b3:af:18:34:4f:13:a1:58:72:07:56:80:97:82:
         36:88:41:d6:d4:a9:90:9c:aa:16:dc:c2:e5:82:65:28:d7:06:
         0d:4f:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 07:36:07 2024 by rpki-client on console-ams.rpki-client.org