Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
File:                     3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa (raw, json)
Hash identifier:          Z75LBsIwhtNa9yCtL3MZuyFRxfsMRwOC4KHnawtMe6M=
Subject key identifier:   8D:F0:40:9F:CB:DC:E6:C0:5A:F3:3B:BC:0C:F7:28:50:B2:7B:50:54
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       624745A8BB0BD7A30D9FC4FE28BB7B03B7CB4EB8
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:27 +0000
ROA not before:           Fri 26 Jul 2024 22:03:27 +0000
ROA not after:            Fri 25 Jul 2025 22:08:27 +0000
asID:                     28587
IP address blocks:        177.128.185.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:47:45:a8:bb:0b:d7:a3:0d:9f:c4:fe:28:bb:7b:03:b7:cb:4e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:27 2024 GMT
            Not After : Jul 25 22:08:27 2025 GMT
        Subject: CN=8DF0409FCBDCE6C05AF33BBC0CF72850B27B5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:b8:53:66:50:2d:7d:86:b7:8a:13:dd:bb:
                    49:c0:c8:c7:bd:c0:b7:c9:fa:fa:e9:e3:c4:dc:6a:
                    9a:99:e3:f0:b7:74:87:23:e3:6e:4e:d3:d0:c5:6f:
                    12:04:f3:4b:5c:c9:69:d3:17:df:c1:dd:78:f6:03:
                    63:e3:9e:fe:b7:92:c3:78:c8:a1:e2:33:e4:d8:62:
                    2d:dc:dd:7d:ce:01:7b:22:c3:83:f6:1e:80:e0:be:
                    81:aa:bf:8a:ca:d1:da:a3:be:46:41:18:3d:79:e0:
                    02:7a:a8:84:0f:53:dd:d2:7a:8c:f9:4c:86:ce:8d:
                    9a:ea:c1:f1:47:68:0d:5d:c5:90:29:39:2e:eb:47:
                    35:aa:7c:c5:82:7b:7e:44:1d:04:11:11:68:d2:47:
                    7f:87:79:df:10:4c:99:6a:53:7b:8c:0e:95:16:53:
                    fd:f3:0c:a0:b7:e5:2c:b5:93:81:80:55:9c:60:f9:
                    2a:dc:52:8c:0e:b7:d4:b7:c4:ed:30:1d:3d:dc:8f:
                    6e:4b:60:c8:90:3e:d5:f0:3f:79:42:92:c2:17:bf:
                    d7:39:76:c3:c3:0f:c5:29:94:7b:96:63:c5:56:0f:
                    72:05:cf:26:f5:84:8f:fb:0d:97:22:f7:ca:95:d1:
                    66:a2:ca:c2:c5:54:14:21:cd:70:99:0c:00:4b:79:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:40:9F:CB:DC:E6:C0:5A:F3:3B:BC:0C:F7:28:50:B2:7B:50:54
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138352e302f32342d3234203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:be:70:2c:8c:d1:8d:23:4f:2a:ac:1e:c1:38:4d:64:f1:
         2e:cc:fb:12:43:7d:dd:77:55:5e:9b:46:43:e7:02:b8:70:3a:
         74:81:d3:53:a5:ea:b3:a9:a0:03:e6:0b:27:5b:f3:5e:ad:8e:
         4e:77:f1:d0:f8:9f:1e:5e:6d:c7:28:82:2d:ec:2e:87:2a:97:
         ef:f0:48:9f:d4:85:0c:01:ec:c2:c5:00:aa:70:73:01:19:37:
         52:04:34:13:a0:b7:ee:70:ab:79:9d:d6:04:c2:7b:1c:6e:41:
         40:96:f9:50:97:4a:ea:3e:98:91:37:9e:fa:ed:a6:c2:1a:76:
         ba:f9:85:ed:3f:95:7c:51:61:0a:a7:f6:d1:5b:b8:7f:79:67:
         90:82:f6:1e:0d:b4:e8:61:7e:36:db:d0:77:64:6d:41:a0:db:
         89:47:9e:8c:af:e8:e0:b8:df:d7:3d:31:f2:54:b5:07:a6:ee:
         3e:e3:d7:b9:a1:a6:a7:2a:77:f0:a3:ca:98:7b:38:ae:90:2f:
         6c:86:71:53:77:8f:43:92:97:a4:15:37:e9:4b:93:e4:bc:ca:
         eb:47:f7:ac:1f:33:db:51:b7:f7:fc:98:ce:07:a9:b4:fa:4d:
         cf:7c:b1:13:13:49:8f:ae:41:7f:3e:9a:eb:e6:ab:51:83:fd:
         0b:b7:ab:94
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYkdFqLsL16MNn8T+KLt7A7fLTrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNDQzBGNURDRjA2RDA4NUZERkVENTIwRUIwMkY4NzA1
NDcyODE2NzAeFw0yNDA3MjYyMjAzMjdaFw0yNTA3MjUyMjA4MjdaMDMxMTAvBgNV
BAMTKDhERjA0MDlGQ0JEQ0U2QzA1QUYzM0JCQzBDRjcyODUwQjI3QjUwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bLhTZlAtfYa3ihPdu0nAyMe9
wLfJ+vrp48TcapqZ4/C3dIcj425O09DFbxIE80tcyWnTF9/B3Xj2A2Pjnv63ksN4
yKHiM+TYYi3c3X3OAXsiw4P2HoDgvoGqv4rK0dqjvkZBGD154AJ6qIQPU93Seoz5
TIbOjZrqwfFHaA1dxZApOS7rRzWqfMWCe35EHQQREWjSR3+Hed8QTJlqU3uMDpUW
U/3zDKC35Sy1k4GAVZxg+SrcUowOt9S3xO0wHT3cj25LYMiQPtXwP3lCksIXv9c5
dsPDD8UplHuWY8VWD3IFzyb1hI/7DZci98qV0WaiysLFVBQhzXCZDABLeYO5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjfBAn8vc5sBa8zu8DPcoULJ7UFQwHwYDVR0j
BBgwFoAUrMwPXc8G0IX9/tUg6wL4cFRygWcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0cySkZlcFhjMzlodXFQY3RkOHlxMVJrZHdlcHVYNXBGQlpGVFlHOXhT
MjUvMC9BQ0NDMEY1RENGMDZEMDg1RkRGRUQ1MjBFQjAyRjg3MDU0NzI4MTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQ0MwRjVEQ0YwNkQwODVG
REZFRDUyMEVCMDJGODcwNTQ3MjgxNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHMkpGZXBYYzM5aHVxUGN0ZDh5cTFSa2R3ZXB1WDVwRkJaRlRZRzl4UzI1LzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgLkwDQYJKoZIhvcNAQELBQADggEBAG0nvnAs
jNGNI08qrB7BOE1k8S7M+xJDfd13VV6bRkPnArhwOnSB01Ol6rOpoAPmCydb816t
jk538dD4nx5ebccogi3sLocql+/wSJ/UhQwB7MLFAKpwcwEZN1IENBOgt+5wq3md
1gTCexxuQUCW+VCXSuo+mJE3nvrtpsIadrr5he0/lXxRYQqn9tFbuH95Z5CC9h4N
tOhhfjbb0HdkbUGg24lHnoyv6OC439c9MfJUtQem7j7j17mhpqcqd/Cjyph7OK6Q
L2yGcVN3j0OSl6QVN+lLk+S8yutH96wfM9tRt/f8mM4HqbT6Tc98sRMTSY+uQX8+
muvmq1GD/Qu3q5Q=
-----END CERTIFICATE-----
Generated at Sat Aug 10 07:44:21 2024 by rpki-client on console-ams.rpki-client.org