Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32342d3234203d3e20323632343934.roa
File:                     3137372e36362e3131322e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          iT/nlrHkJDQ6sF8DY6oJyHssO0Vq/+i1ddHJBUsoBPI=
Subject key identifier:   6B:05:22:F7:6C:C6:45:C1:7C:5B:8B:F8:6E:93:9A:FF:49:62:04:78
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       34EE831AFB22E554F05BEFA48CD38CF3AD81E30A
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:55 +0000
ROA not before:           Thu 19 Sep 2024 14:06:55 +0000
ROA not after:            Thu 18 Sep 2025 14:11:55 +0000
asID:                     262494
IP address blocks:        177.66.112.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ee:83:1a:fb:22:e5:54:f0:5b:ef:a4:8c:d3:8c:f3:ad:81:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:55 2024 GMT
            Not After : Sep 18 14:11:55 2025 GMT
        Subject: CN=6B0522F76CC645C17C5B8BF86E939AFF49620478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:5c:13:a5:9a:0e:97:9e:cf:75:62:93:29:
                    06:63:70:b1:25:3b:26:e3:be:76:27:c5:e4:e4:f6:
                    8e:ea:d5:e8:54:22:fd:49:d8:51:39:16:60:36:78:
                    bb:6b:f1:b6:84:16:04:48:e9:9d:43:d6:95:4e:4c:
                    71:f9:2a:ea:6b:df:dc:be:e2:9d:3c:15:3b:30:3a:
                    8e:60:39:a7:46:5a:ef:33:b5:39:10:cc:e1:b7:44:
                    be:bd:52:97:6a:97:46:82:48:ec:ac:77:88:1f:c2:
                    36:f4:01:e8:cd:06:56:99:07:8c:09:d8:c7:c3:7a:
                    2f:94:8d:77:a5:e4:23:22:79:5e:ff:86:f8:15:6c:
                    21:24:71:56:23:83:c5:23:20:fa:93:13:dd:99:11:
                    63:1a:22:c9:01:09:d9:b5:3f:a8:75:9f:07:b5:85:
                    a0:06:68:c5:4a:b8:ef:51:1d:e5:41:15:87:26:11:
                    46:56:14:dd:e6:fb:5c:8c:ac:f0:26:00:90:f9:f8:
                    44:f6:ac:05:bf:0f:b3:d4:f4:27:84:ae:33:b0:97:
                    48:ab:53:3a:c3:51:09:9e:e6:dc:ce:f2:23:cd:da:
                    47:85:f2:42:31:bd:41:55:1a:14:16:f5:72:e1:45:
                    f9:ab:a2:7c:eb:16:cf:f1:37:3a:0b:d2:9b:05:29:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:22:F7:6C:C6:45:C1:7C:5B:8B:F8:6E:93:9A:FF:49:62:04:78
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131322e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:67:da:82:6e:f4:3b:4f:10:15:0d:1a:26:fd:d6:82:d2:
         60:71:34:6f:00:4a:21:28:2b:21:86:5f:f5:d6:b1:84:5b:a6:
         31:47:b5:9f:1a:fa:cd:5b:16:95:f1:3e:8f:b5:ba:fd:4b:b6:
         e0:fc:83:03:14:c2:4c:ae:f8:e5:44:a8:ef:de:88:d3:22:5c:
         d5:b7:68:73:fb:34:43:58:53:21:d9:94:ca:b5:d6:ee:c2:86:
         c5:58:09:14:2d:04:6b:3b:8b:5e:8c:ff:51:4f:f7:25:8a:31:
         37:44:a2:8a:2a:55:cc:2e:b8:3c:e7:9b:71:6e:76:6e:02:0a:
         25:1a:ec:83:35:a6:d4:38:c4:41:0b:37:7d:b4:dd:a1:1f:f4:
         83:24:0c:da:77:90:9f:97:5a:2e:87:80:2d:7d:64:1c:31:d5:
         29:0a:e5:35:85:de:1c:94:8f:58:1f:1c:2d:45:b5:77:cf:82:
         6b:bb:e2:f4:5f:de:2a:7f:18:4a:ed:90:e6:73:88:83:0e:db:
         c3:dd:38:c9:8f:61:f6:d7:68:cb:32:c7:ca:19:40:ee:42:ef:
         81:cf:ba:6a:19:61:5a:db:ce:5d:8e:bc:8f:92:22:5c:6b:1c:
         1a:6c:5e:8d:78:db:34:a9:6c:14:92:46:0b:2a:e3:4f:d3:49:
         8d:70:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org