Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          AEDVXoI56nknZfiZo2FR6s7A9u4p8aa9mTTr5TjnyYs=
Subject key identifier:   6E:EE:84:DD:72:97:F8:B1:84:F8:94:3F:58:20:1A:25:02:F4:FD:B7
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       1F2BF1BCFA08A936857AD790410F037411E01408
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:54 +0000
ROA not before:           Thu 19 Sep 2024 14:06:54 +0000
ROA not after:            Thu 18 Sep 2025 14:11:54 +0000
asID:                     262494
IP address blocks:        177.66.116.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2b:f1:bc:fa:08:a9:36:85:7a:d7:90:41:0f:03:74:11:e0:14:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:54 2024 GMT
            Not After : Sep 18 14:11:54 2025 GMT
        Subject: CN=6EEE84DD7297F8B184F8943F58201A2502F4FDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:33:e2:91:33:1b:79:01:f6:48:82:a1:48:
                    1b:1a:eb:97:60:77:43:15:80:0f:4f:c4:21:4c:66:
                    10:23:f9:b5:0f:45:4f:7b:94:e2:22:b8:19:f9:e6:
                    5e:c9:09:6c:32:92:9e:6f:3e:5d:e7:73:f8:78:51:
                    07:35:52:96:15:9a:34:23:43:f9:9b:0b:58:ed:e2:
                    0e:c8:49:d5:94:46:06:e6:86:c1:1d:91:00:0c:3e:
                    f9:87:1f:c7:d3:8f:ea:4f:e0:8c:bb:13:fd:38:0b:
                    5a:af:dd:6c:63:6b:7a:3d:86:bd:d9:4b:aa:74:89:
                    d0:98:38:b4:be:91:32:e2:ef:ae:58:76:24:b3:05:
                    47:0a:9a:5f:e0:c3:f1:35:12:af:f7:98:15:c0:33:
                    f8:fa:0a:75:a7:ae:b6:d0:b7:bc:83:9c:48:e8:f0:
                    04:65:ef:df:7e:c8:29:1d:af:b0:e4:95:47:b3:71:
                    74:ed:ca:c1:07:4e:17:3d:86:13:43:da:13:56:91:
                    7b:58:72:33:1b:95:7c:3a:5f:ce:fb:87:50:ed:b9:
                    8c:df:04:6f:8c:55:35:9f:88:5c:8c:b1:62:65:49:
                    c7:28:5d:b1:66:9b:32:f4:72:76:ce:c0:05:a1:02:
                    f8:8b:4a:63:b2:0e:73:07:4c:97:d0:10:03:07:54:
                    5c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:84:DD:72:97:F8:B1:84:F8:94:3F:58:20:1A:25:02:F4:FD:B7
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:a9:f1:a3:0b:0d:90:42:6f:93:ec:68:f6:3d:f0:d6:a7:e6:
         cc:41:e3:c6:00:d1:57:4c:2e:1b:4f:9b:cd:8e:a9:a3:db:e7:
         c8:46:7b:12:46:ee:6a:ec:ba:1b:51:cf:eb:64:56:17:05:1d:
         0a:5e:c7:31:82:d7:5a:2e:c9:cd:8a:f7:40:e8:75:fc:5f:8a:
         81:a1:5e:a4:97:1b:03:e1:d8:df:5c:63:b3:7f:f0:e7:52:52:
         68:ff:d3:7e:11:b1:9f:5b:79:8b:e7:8c:0c:eb:4c:44:3a:cb:
         7d:ff:6d:5d:c1:36:e0:60:44:f2:81:5a:0c:f6:48:16:45:92:
         0c:31:b7:d8:44:8f:b8:54:ab:2e:1c:33:47:10:47:b1:8a:10:
         2b:46:54:51:12:72:0d:fc:32:eb:2d:52:d9:44:62:18:b9:2c:
         a2:80:67:33:e4:f4:d6:8c:78:7e:bb:37:3f:f2:45:bd:44:cd:
         66:78:27:b7:c7:61:28:f1:01:09:aa:d4:11:60:8a:16:71:f7:
         b4:22:56:f1:a9:91:0e:dd:67:21:8c:2e:b9:3a:b4:d9:40:4c:
         93:d7:06:42:bf:2f:eb:0a:d4:19:a1:5c:17:67:e1:07:c2:ec:
         4b:f8:1a:22:52:53:83:43:ad:28:51:c2:ac:e3:80:2f:6d:6b:
         1c:34:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org