Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3233203d3e203238353837.roa
File:                     3137372e3132382e3138382e302f32332d3233203d3e203238353837.roa (raw, json)
Hash identifier:          VhP/8jltCmiPDBWbb+tdCb8wkB+EDofOpIz4kEMc3Ms=
Subject key identifier:   65:B9:1D:56:C0:EE:2B:83:BE:06:6A:05:3E:53:53:B2:98:1C:65:98
Certificate issuer:       /CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
Certificate serial:       03E98BA581CCEFDED0D228D2C1C5FE0FA0CC4C55
Authority key identifier: AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3233203d3e203238353837.roa
Signing time:             Fri 26 Jul 2024 22:08:53 +0000
ROA not before:           Fri 26 Jul 2024 22:03:53 +0000
ROA not after:            Fri 25 Jul 2025 22:08:53 +0000
asID:                     28587
IP address blocks:        177.128.188.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e9:8b:a5:81:cc:ef:de:d0:d2:28:d2:c1:c5:fe:0f:a0:cc:4c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCC0F5DCF06D085FDFED520EB02F87054728167
        Validity
            Not Before: Jul 26 22:03:53 2024 GMT
            Not After : Jul 25 22:08:53 2025 GMT
        Subject: CN=65B91D56C0EE2B83BE066A053E5353B2981C6598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:91:7a:8d:5f:53:a3:85:9b:de:c0:2d:e5:
                    8e:f8:b6:aa:2a:7e:17:d9:fc:0d:33:42:a5:3a:d4:
                    b4:a5:ff:22:dc:f1:03:1a:03:3f:72:1e:47:21:33:
                    77:26:b2:9e:96:75:30:17:39:52:41:53:ef:5c:b5:
                    ee:c1:a3:37:cd:29:9c:9a:cc:d6:c9:49:11:19:32:
                    7f:e0:f2:e2:53:69:0e:45:ee:0e:99:6a:8a:a8:34:
                    2b:cd:b7:ae:4a:b7:c5:86:24:af:d4:3d:d3:cb:e7:
                    72:ac:10:48:57:41:8f:9b:27:6f:44:51:35:3f:4e:
                    0d:15:7e:2e:20:fa:1e:2a:42:55:51:a5:aa:b5:5c:
                    29:93:e0:e7:08:5d:b8:fc:17:81:39:53:07:03:aa:
                    09:c9:4e:7d:ba:55:40:da:de:db:3c:b8:ce:75:22:
                    15:04:d5:d2:68:1c:7d:4e:ce:c1:df:c6:12:0c:34:
                    eb:59:0f:12:7c:08:53:c4:33:e3:db:42:40:b5:c6:
                    6e:21:0f:72:03:5e:57:ae:98:92:ee:96:c2:a6:fc:
                    31:5a:f1:82:8b:38:56:d3:72:a7:f7:b9:19:cf:00:
                    db:b7:8d:36:79:04:de:3a:37:fe:c2:70:ca:e1:fe:
                    53:c2:86:48:ad:7e:3c:03:dc:95:8c:33:4f:b0:61:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:1D:56:C0:EE:2B:83:BE:06:6A:05:3E:53:53:B2:98:1C:65:98
            X509v3 Authority Key Identifier:
                keyid:AC:CC:0F:5D:CF:06:D0:85:FD:FE:D5:20:EB:02:F8:70:54:72:81:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/ACCC0F5DCF06D085FDFED520EB02F87054728167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACCC0F5DCF06D085FDFED520EB02F87054728167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G2JFepXc39huqPctd8yq1RkdwepuX5pFBZFTYG9xS25/0/3137372e3132382e3138382e302f32332d3233203d3e203238353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:53:da:fc:28:ba:e1:71:93:06:89:cb:0e:d7:02:d6:e4:b0:
         44:14:ea:6c:d5:1d:f2:41:e7:22:3d:9d:dc:bc:fc:02:21:ac:
         9d:6c:a8:ab:e8:01:d7:68:3a:66:ea:a6:b9:6f:72:bd:e9:37:
         ec:0a:bf:c3:78:69:ec:d1:28:81:cd:c4:ed:ba:a4:69:b0:b1:
         1e:04:9f:d9:51:a0:e0:6f:fe:ee:76:89:e8:55:61:8a:a4:99:
         09:25:6c:50:2f:80:fa:49:0b:36:fe:e2:6a:c5:f2:4e:32:7b:
         1a:6d:b2:2c:c6:98:ad:78:1f:f7:75:4c:3d:b0:84:33:cb:76:
         61:5a:34:a4:4f:da:26:7a:a8:4d:13:68:b6:ee:d5:71:d5:f2:
         82:66:53:ce:f6:7d:fa:fa:90:d6:d5:34:0a:b1:9b:4f:84:b5:
         91:3c:a4:70:be:19:35:96:6f:89:f0:ff:b4:62:07:a6:cd:1b:
         17:2b:05:83:89:4b:ca:dd:d3:5b:73:51:8c:84:89:dc:1f:7f:
         5b:7b:52:92:e8:1f:57:23:07:c8:07:ce:89:6b:de:d3:a7:f9:
         04:dc:e4:27:64:a2:fd:8b:d6:e4:32:8b:65:f3:0a:6d:81:47:
         45:c3:d0:45:55:ea:ea:97:e8:48:e3:8a:5a:27:6d:42:fc:d3:
         20:8b:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 06:22:27 2024 by rpki-client on console-fra.rpki-client.org