Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa
File:                     3137372e35352e38382e302f32322d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          IVHYf3bXZLjXH8wUh1kOxCuRHBHMGjCiyvL4bVpZg4s=
Subject key identifier:   F5:F6:B7:39:62:69:60:88:32:4A:E9:43:6E:E4:A3:F9:DB:DF:E5:28
Certificate issuer:       /CN=7D7BB06C2053082F751F699C9902A6C960F1C1A8
Certificate serial:       688C86C31F98DCDA13194582BD8D86514B65F2DD
Authority key identifier: 7D:7B:B0:6C:20:53:08:2F:75:1F:69:9C:99:02:A6:C9:60:F1:C1:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D7BB06C2053082F751F699C9902A6C960F1C1A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa
Signing time:             Tue 30 Jul 2024 18:11:35 +0000
ROA not before:           Tue 30 Jul 2024 18:06:35 +0000
ROA not after:            Tue 29 Jul 2025 18:11:35 +0000
asID:                     263571
IP address blocks:        177.55.88.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8c:86:c3:1f:98:dc:da:13:19:45:82:bd:8d:86:51:4b:65:f2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7BB06C2053082F751F699C9902A6C960F1C1A8
        Validity
            Not Before: Jul 30 18:06:35 2024 GMT
            Not After : Jul 29 18:11:35 2025 GMT
        Subject: CN=F5F6B73962696088324AE9436EE4A3F9DBDFE528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:e9:a3:a0:b2:f1:ec:dc:52:57:c9:21:8d:
                    56:fe:2a:8f:47:52:e6:58:95:c1:ff:8a:1a:6a:12:
                    c7:4e:dc:fb:de:b5:d7:34:c0:39:c9:25:5e:25:56:
                    96:84:98:de:a0:41:23:27:37:7e:ac:99:89:bc:7e:
                    68:f3:92:dd:e3:d6:17:36:df:09:29:c8:c8:6b:31:
                    36:0c:3a:5c:1e:f5:35:58:34:c1:56:2c:3c:eb:22:
                    f4:94:1d:4d:fa:64:0c:0e:e6:9c:2e:cb:2b:ff:2e:
                    e9:60:13:63:17:09:85:93:c6:8b:b0:51:d2:b1:2d:
                    73:aa:cc:d2:3d:b2:8f:5c:e3:85:ba:8a:5b:54:41:
                    59:47:6e:0d:ae:7b:e7:29:39:e0:6c:d5:7b:45:3e:
                    51:ea:52:e2:76:6b:03:ca:82:25:b2:48:73:37:28:
                    95:b7:a3:a4:83:05:38:e9:14:f1:e4:cc:a0:e4:aa:
                    ae:e2:9f:f4:c5:2d:d6:eb:9c:aa:62:77:05:1a:ea:
                    eb:d1:be:c5:e4:16:27:37:d8:5a:49:a4:1b:68:be:
                    c7:45:64:67:13:4a:a6:5b:46:37:59:6c:e7:c7:9f:
                    fd:50:44:69:d9:e7:be:c4:93:6b:d9:27:14:cf:66:
                    02:3b:38:90:b8:ab:a3:97:96:84:d8:e4:4c:a3:44:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:B7:39:62:69:60:88:32:4A:E9:43:6E:E4:A3:F9:DB:DF:E5:28
            X509v3 Authority Key Identifier:
                keyid:7D:7B:B0:6C:20:53:08:2F:75:1F:69:9C:99:02:A6:C9:60:F1:C1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/7D7BB06C2053082F751F699C9902A6C960F1C1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D7BB06C2053082F751F699C9902A6C960F1C1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38382e302f32322d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:d9:47:da:ee:e4:c3:49:09:38:bc:27:44:dc:03:af:c6:2b:
         6c:b6:0f:3d:3e:fb:3f:d5:af:45:51:d1:32:fd:04:2f:a5:33:
         90:92:38:b6:9e:12:b2:d8:54:9e:b7:4c:86:c6:d3:8f:2f:35:
         67:fc:c3:b0:d5:94:16:20:ee:76:cb:62:0e:f7:04:7b:a2:af:
         dc:d4:c1:34:a5:5f:02:c6:7a:ff:3f:55:5b:6d:13:82:a6:53:
         40:f6:ee:69:2f:33:30:e2:fb:a2:37:55:29:4e:43:a8:eb:7d:
         cd:c7:48:23:cc:c6:9a:85:56:97:c8:87:73:9f:b7:a4:0a:e0:
         49:54:cc:67:4d:d2:bb:62:97:75:e0:d8:ac:f7:ac:af:9e:8a:
         0d:74:64:63:a8:cd:d7:57:73:9d:da:3e:c8:61:7d:09:fa:2c:
         73:b7:a1:a9:ab:48:43:4a:3b:05:0d:63:82:2e:34:35:59:7e:
         7f:f8:89:38:a3:53:80:93:e9:d6:51:15:ab:d8:14:29:2e:68:
         52:db:f1:21:55:66:24:af:a1:f0:63:d9:d2:5b:6b:96:31:e6:
         5e:26:dd:27:29:4d:e8:40:b9:b1:63:e4:e9:e4:de:c3:10:87:
         71:ef:7f:28:4a:3f:a4:10:9f:57:ce:81:4f:47:56:5d:f9:95:
         66:59:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 16:33:10 2024 by rpki-client on console-ams.rpki-client.org