Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3231203d3e20323636313630.roa
File:                     3137372e38352e38302e302f32312d3231203d3e20323636313630.roa (raw, json)
Hash identifier:          be1wnnwHZI1NS99s9vqFBH6fdkhZyUULMvpZrxX8RjQ=
Subject key identifier:   CB:00:1F:9B:BA:4C:2A:86:25:C3:EA:12:BA:C5:61:B3:4A:8E:C2:08
Certificate issuer:       /CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
Certificate serial:       2D0A224D5431DD46523B0CE3BA534209C50F0B93
Authority key identifier: 51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3231203d3e20323636313630.roa
Signing time:             Mon 29 Jul 2024 16:01:18 +0000
ROA not before:           Mon 29 Jul 2024 15:56:18 +0000
ROA not after:            Mon 28 Jul 2025 16:01:18 +0000
asID:                     266160
IP address blocks:        177.85.80.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0a:22:4d:54:31:dd:46:52:3b:0c:e3:ba:53:42:09:c5:0f:0b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
        Validity
            Not Before: Jul 29 15:56:18 2024 GMT
            Not After : Jul 28 16:01:18 2025 GMT
        Subject: CN=CB001F9BBA4C2A8625C3EA12BAC561B34A8EC208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:b8:54:1d:c2:a6:6b:97:38:c9:a9:93:d4:
                    ca:97:47:98:e2:ed:47:8d:26:0b:9b:df:5f:dd:97:
                    e4:77:b9:09:46:4b:ec:b9:31:8e:63:96:33:38:69:
                    1a:9d:25:6e:31:57:70:07:e8:a0:3f:58:34:4d:9d:
                    62:79:36:a8:28:62:39:6c:26:9a:fb:9e:15:63:28:
                    59:0b:85:dc:eb:b0:82:29:57:de:25:15:e3:48:f4:
                    9f:de:a3:2b:61:03:cb:13:9c:a1:ac:3b:c0:46:0c:
                    96:96:ee:f3:91:21:5b:61:44:7b:ac:8d:f0:5b:7a:
                    25:89:10:76:e1:90:da:23:d2:38:f9:cc:0e:aa:c3:
                    06:78:dc:56:ce:81:94:d2:b1:f7:a7:f3:a5:5b:9d:
                    6f:1f:be:95:72:2f:6b:07:dd:89:d3:e5:6e:63:dd:
                    39:18:66:0a:5b:76:b8:d2:c3:ec:88:1b:b2:e5:e2:
                    b2:ca:e9:e9:60:73:8c:c3:81:de:41:a2:5d:40:88:
                    ac:f1:1e:f6:6d:8e:a4:6f:bd:52:dc:b0:eb:e8:33:
                    8a:30:2b:8d:a1:8a:27:c8:8e:c8:b6:56:3e:b3:a5:
                    cf:f9:a2:cd:19:9f:92:7e:b7:c9:6e:2f:62:67:30:
                    af:1c:15:70:e4:4b:14:8c:a0:95:81:f2:a5:ec:76:
                    83:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:1F:9B:BA:4C:2A:86:25:C3:EA:12:BA:C5:61:B3:4A:8E:C2:08
            X509v3 Authority Key Identifier:
                keyid:51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/514E4DA72AE5239524C79C4BF5A78B447815F2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38302e302f32312d3231203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:26:f8:3b:20:28:b4:33:5c:05:a1:8b:0c:30:7f:5a:87:
         0e:a5:98:b1:5a:ce:8f:c6:84:8c:7f:5c:b8:8a:fd:9e:20:b4:
         be:35:c8:1b:f6:7b:29:98:6e:ce:00:5d:0c:38:2c:f5:58:8f:
         d2:25:93:c8:6b:d2:73:3e:87:fa:86:dd:ea:cc:c8:ee:13:9b:
         06:96:eb:13:30:4f:86:3b:c2:c8:ce:bc:00:48:9e:5d:f4:00:
         57:2e:c5:ca:a7:d6:18:2d:de:8b:80:69:fb:a4:c5:5c:30:79:
         3e:b6:66:ce:8f:e7:14:24:d9:db:ab:c9:6f:29:23:b9:83:21:
         ad:a4:d2:37:a3:0f:cd:7f:94:7c:f4:86:55:51:2b:c9:51:0e:
         9a:5a:c6:03:1c:20:e9:42:bd:35:e5:dc:ef:35:5a:5b:6d:80:
         fe:a0:29:d5:5b:66:ba:ae:73:5b:79:07:74:a9:fd:2c:6f:3f:
         ad:02:fe:3a:82:84:ef:02:bc:44:97:5f:0b:e6:c7:f4:46:ed:
         a2:f4:0c:ad:91:fd:ca:90:81:18:b7:2d:e6:f3:d8:1c:73:be:
         cc:3a:6b:5b:5e:3f:ad:0c:d1:84:68:05:4c:0a:79:29:53:86:
         34:00:37:23:89:18:ec:61:0d:79:3b:bc:f4:a4:d2:04:7f:3e:
         49:84:4c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 20:21:28 2024 by rpki-client on console-ams.rpki-client.org