Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa
File:                     3137372e382e31362e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          Evw3OSMiXjNcGABAgzgw5Hqm2F2k4dv9CFzdFYWryFg=
Subject key identifier:   DE:36:FD:60:A1:94:77:DC:47:95:0A:89:29:D3:8C:CE:38:03:E7:1B
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       450F8635563B5B1DC7D47C1524A13E7B03E585F9
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:02:53 +0000
ROA not before:           Mon 12 Aug 2024 19:57:53 +0000
ROA not after:            Mon 11 Aug 2025 20:02:53 +0000
asID:                     28360
IP address blocks:        177.8.16.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:0f:86:35:56:3b:5b:1d:c7:d4:7c:15:24:a1:3e:7b:03:e5:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 19:57:53 2024 GMT
            Not After : Aug 11 20:02:53 2025 GMT
        Subject: CN=DE36FD60A19477DC47950A8929D38CCE3803E71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:77:1d:42:a0:f7:28:63:d7:5c:1e:c1:58:
                    a1:a5:78:d5:30:84:5e:74:aa:10:a1:90:46:6a:c0:
                    d2:d8:6e:f0:b4:65:5f:92:22:83:12:cb:bc:bc:c1:
                    17:90:43:97:40:8c:9b:6a:40:62:75:61:7d:74:c8:
                    df:bb:5d:b6:30:a4:77:d6:c0:19:81:2c:d0:47:89:
                    71:9d:96:af:6a:30:0c:d0:ab:ad:42:b2:eb:80:78:
                    87:8a:df:9e:7f:e0:be:c6:ea:57:aa:df:e4:b2:4f:
                    25:42:ef:54:6d:e6:cc:3a:c0:6f:1a:c2:ac:e2:9d:
                    8f:98:ff:22:12:5f:6a:b8:14:89:6a:0c:00:dd:90:
                    91:83:14:a3:aa:96:ce:b1:e7:0e:c6:f9:fe:72:02:
                    12:72:c4:c5:c3:7a:c7:82:2a:a2:66:c2:b7:5c:0f:
                    06:34:39:e2:dc:51:3d:8b:52:67:90:88:5a:d8:fa:
                    a4:9e:7c:8e:08:03:e5:60:1a:09:cf:66:08:f4:d7:
                    12:bb:99:42:19:93:39:04:5b:30:e7:74:9f:e5:ae:
                    2d:56:87:5d:c2:18:28:de:5f:6b:25:46:e1:c4:f7:
                    0f:8c:30:c2:73:a6:c0:6d:bb:19:68:26:e1:ba:2a:
                    8a:08:ab:22:38:83:13:1d:d6:ff:f0:3a:d5:37:2f:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:36:FD:60:A1:94:77:DC:47:95:0A:89:29:D3:8C:CE:38:03:E7:1B
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3137372e382e31362e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:95:6b:80:7b:00:73:6c:a4:82:a2:91:87:5c:16:ea:a0:78:
         80:ea:78:98:c5:50:1c:8f:6e:f2:1e:a7:23:26:d4:d6:a8:a6:
         65:02:c0:1f:21:1a:d2:fe:d4:39:0a:0f:ba:2a:5b:25:be:c9:
         59:1a:38:5c:92:46:d7:20:91:61:7c:da:40:bd:b6:af:73:ae:
         50:c7:a3:b7:44:83:ca:0d:7c:ff:5e:74:bf:b2:74:ac:c1:16:
         f0:ac:86:e2:26:58:f4:27:10:a8:6c:8b:e9:af:c0:82:a0:48:
         fb:84:39:79:11:51:33:3d:07:ee:6a:cd:83:7b:8b:c4:b1:a6:
         e8:94:5a:8d:5e:63:0e:ed:cd:3d:5d:ae:df:5c:c2:f7:fe:04:
         31:e5:8e:85:32:31:4e:66:56:4a:9d:0f:fa:e7:f8:12:76:02:
         64:d2:9f:44:28:c2:ce:10:58:ee:72:68:c4:5e:8d:63:69:09:
         40:f4:ec:41:86:12:30:34:5f:94:59:41:b9:4f:c7:66:67:83:
         2e:0c:08:2f:09:05:f3:b1:72:63:3c:17:f7:b7:bf:dd:96:b9:
         92:8e:c1:c2:63:14:11:22:0b:6b:ba:87:08:36:09:f1:ad:d7:
         28:72:28:02:e9:03:6f:65:12:66:fc:8e:2b:36:04:08:4b:72:
         a3:ae:3c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:51 2024 by rpki-client on console-fra.rpki-client.org