Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
File:                     3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa (raw, json)
Hash identifier:          cbNG1pQarGkjt9qTu5GFRCeAFPaBybudcBou3n+DrgE=
Subject key identifier:   60:08:BA:F4:18:A4:85:54:0C:A7:50:F5:CD:0F:FE:1B:5F:05:E8:59
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       60A3F054506CB658050E3CEE4D798A7D8EE5CAAF
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:47 +0000
ROA not before:           Thu 19 Sep 2024 14:06:47 +0000
ROA not after:            Thu 18 Sep 2025 14:11:47 +0000
asID:                     262494
IP address blocks:        177.66.116.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a3:f0:54:50:6c:b6:58:05:0e:3c:ee:4d:79:8a:7d:8e:e5:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:47 2024 GMT
            Not After : Sep 18 14:11:47 2025 GMT
        Subject: CN=6008BAF418A485540CA750F5CD0FFE1B5F05E859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:72:a1:29:c2:ed:6e:b1:32:f1:43:53:ca:
                    06:e9:fa:60:5f:bc:50:81:f4:be:c6:e4:c8:00:4d:
                    af:06:a8:ec:86:c3:7f:c4:8d:1e:de:18:cb:f2:67:
                    38:3a:25:c0:36:43:b5:0e:42:34:c9:49:ee:29:0e:
                    00:21:c2:d6:06:3a:57:b6:dc:09:59:af:cc:be:b1:
                    59:56:e1:54:12:88:94:ca:35:ee:9f:03:86:69:ce:
                    87:8e:3d:90:4a:c8:80:7b:55:c9:a1:0e:5d:80:03:
                    43:46:35:c7:26:a5:91:f5:f6:08:e9:f7:44:b3:3f:
                    eb:8f:fa:21:22:f3:ea:95:a7:82:1a:9a:8c:c0:05:
                    3a:15:fa:40:ae:78:2a:0f:c7:c0:01:fb:ec:b2:72:
                    28:e7:a9:ea:76:03:dd:82:46:e1:67:4e:1f:e2:59:
                    73:fc:01:a6:44:a2:4a:d8:ed:eb:6b:cb:b7:95:ca:
                    4d:1a:7d:36:a8:6b:74:09:a4:07:7d:92:13:a7:e5:
                    81:56:2d:a7:07:41:dc:76:80:50:e4:e6:1c:c8:f1:
                    1d:cb:c9:87:cd:4f:6b:3a:53:80:4b:4b:3b:e1:b4:
                    51:a3:8d:48:e4:d6:17:cf:47:ab:9e:6e:10:02:d5:
                    1a:fb:a0:0a:74:0c:27:01:78:3a:de:9b:5d:b1:7e:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:BA:F4:18:A4:85:54:0C:A7:50:F5:CD:0F:FE:1B:5F:05:E8:59
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137372e36362e3131362e302f32332d3233203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:02:21:3b:e0:6e:20:f5:21:8c:bc:b2:ee:23:17:a7:83:7c:
         bd:a6:69:19:e0:6c:ab:db:c0:20:af:14:b8:9b:8b:19:c1:57:
         f2:6a:26:0e:77:b0:34:0d:4f:99:2c:23:d0:b8:61:73:b4:7b:
         84:ea:97:04:dd:ee:7d:39:2d:53:e0:c6:a0:e8:0f:8b:8b:21:
         03:11:88:c7:fe:7f:4c:97:03:83:10:73:aa:93:3e:8a:27:ee:
         3b:45:7b:6d:e4:0d:92:b0:80:ab:ba:e9:63:15:dc:3c:6f:b4:
         49:21:19:79:a6:65:3c:0c:b1:64:18:b4:96:fb:dc:8e:5b:e4:
         42:fe:bc:fc:ee:75:d5:17:f7:fd:1e:22:74:cc:60:97:94:1d:
         59:56:8d:cd:60:3f:fe:eb:db:e3:ef:d2:85:d2:9c:3b:de:f7:
         dd:ca:30:84:f9:96:ee:4c:d5:92:53:02:a1:57:22:a4:f2:11:
         bd:28:6b:0d:a6:3d:94:d6:0d:4b:d9:18:5b:ac:ee:18:34:91:
         48:ec:a9:c6:a7:d4:4d:a5:1e:c5:2d:3d:f8:02:67:47:42:5e:
         f8:cb:1e:1e:3b:cc:76:01:c6:3b:24:f2:46:fa:70:54:c0:8a:
         c3:12:2a:f0:b4:79:fe:0a:fc:40:fa:49:9b:51:0e:aa:fc:bb:
         55:bb:e6:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYKPwVFBstlgFDjzuTXmKfY7lyq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NDdaFw0yNTA5MTgxNDExNDdaMDMxMTAvBgNV
BAMTKDYwMDhCQUY0MThBNDg1NTQwQ0E3NTBGNUNEMEZGRTFCNUYwNUU4NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuHKhKcLtbrEy8UNTygbp+mBf
vFCB9L7G5MgATa8GqOyGw3/EjR7eGMvyZzg6JcA2Q7UOQjTJSe4pDgAhwtYGOle2
3AlZr8y+sVlW4VQSiJTKNe6fA4ZpzoeOPZBKyIB7VcmhDl2AA0NGNccmpZH19gjp
90SzP+uP+iEi8+qVp4IamozABToV+kCueCoPx8AB++yycijnqep2A92CRuFnTh/i
WXP8AaZEokrY7etry7eVyk0afTaoa3QJpAd9khOn5YFWLacHQdx2gFDk5hzI8R3L
yYfNT2s6U4BLSzvhtFGjjUjk1hfPR6uebhAC1Rr7oAp0DCcBeDrem12xfoWpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYAi69BikhVQMp1D1zQ/+G18F6FkwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzEzNzM3MmUzNjM2MmUzMTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxQnQwDQYJKoZIhvcNAQELBQADggEBABYCITvg
biD1IYy8su4jF6eDfL2maRngbKvbwCCvFLibixnBV/JqJg53sDQNT5ksI9C4YXO0
e4TqlwTd7n05LVPgxqDoD4uLIQMRiMf+f0yXA4MQc6qTPoon7jtFe23kDZKwgKu6
6WMV3DxvtEkhGXmmZTwMsWQYtJb73I5b5EL+vPzuddUX9/0eInTMYJeUHVlWjc1g
P/7r2+Pv0oXSnDve993KMIT5lu5M1ZJTAqFXIqTyEb0oaw2mPZTWDUvZGFus7hg0
kUjsqcan1E2lHsUtPfgCZ0dCXvjLHh47zHYBxjsk8kb6cFTAisMSKvC0ef4K/ED6
SZtRDqr8u1W75i0=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org