Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa
File:                     3137372e38352e38342e302f32322d3232203d3e20323636313630.roa (raw, json)
Hash identifier:          ulPZNGIhPf6e4mu0kMcptURLyA269PbqvX6MAj/lqy0=
Subject key identifier:   98:DE:7D:C2:71:D7:79:AE:10:ED:77:5F:D6:47:66:B8:3E:C1:BD:37
Certificate issuer:       /CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
Certificate serial:       789C29B49425E239F4EFE777CA4F73531DA40368
Authority key identifier: 51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa
Signing time:             Mon 29 Jul 2024 16:01:18 +0000
ROA not before:           Mon 29 Jul 2024 15:56:18 +0000
ROA not after:            Mon 28 Jul 2025 16:01:18 +0000
asID:                     266160
IP address blocks:        177.85.84.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9c:29:b4:94:25:e2:39:f4:ef:e7:77:ca:4f:73:53:1d:a4:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514E4DA72AE5239524C79C4BF5A78B447815F2B7
        Validity
            Not Before: Jul 29 15:56:18 2024 GMT
            Not After : Jul 28 16:01:18 2025 GMT
        Subject: CN=98DE7DC271D779AE10ED775FD64766B83EC1BD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:19:59:6a:0b:ef:64:13:29:c0:b2:05:3b:
                    b5:ca:57:a8:95:f9:ad:68:1a:62:2f:24:b7:78:10:
                    be:75:a2:5a:10:71:6d:ef:67:e4:8d:e9:50:63:29:
                    8e:7c:61:da:89:bf:c4:8e:99:55:77:40:03:11:11:
                    e6:10:20:0f:6e:34:31:92:7b:a7:2b:ee:d6:36:cc:
                    63:85:95:a7:0d:9b:e2:37:53:85:e1:9f:0a:b8:0b:
                    a8:48:24:f2:13:0f:32:21:d0:79:cb:cd:06:de:17:
                    ca:67:fb:a2:1b:ee:be:51:cf:29:29:3e:74:65:f7:
                    99:cc:d2:8e:f4:3d:28:f9:86:c1:f8:f1:13:d7:e0:
                    29:41:f4:5b:7e:85:80:bc:7c:eb:de:7e:e1:75:a0:
                    0b:2b:93:4c:8e:06:af:51:2d:84:1f:ca:45:a0:86:
                    69:cb:86:1c:59:b4:60:f5:63:b1:41:07:3b:68:04:
                    3a:ef:aa:6c:cb:d5:8e:b6:f2:1b:98:9a:64:77:7f:
                    e2:d2:39:52:fb:e6:f1:7e:c1:2b:f6:87:e9:d1:1e:
                    b4:64:a1:ee:bb:d1:57:44:82:f7:e0:81:c3:5e:e4:
                    e4:ad:ed:06:2a:34:06:f3:75:57:ff:cc:1e:4f:e7:
                    06:7e:d6:9d:4d:fd:79:dd:d6:be:d4:7a:29:09:01:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DE:7D:C2:71:D7:79:AE:10:ED:77:5F:D6:47:66:B8:3E:C1:BD:37
            X509v3 Authority Key Identifier:
                keyid:51:4E:4D:A7:2A:E5:23:95:24:C7:9C:4B:F5:A7:8B:44:78:15:F2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/514E4DA72AE5239524C79C4BF5A78B447815F2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/514E4DA72AE5239524C79C4BF5A78B447815F2B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7geb8eRsy4t7wVg5oaHzdr3myWFiVcWVKZCR3ReU18Et/0/3137372e38352e38342e302f32322d3232203d3e20323636313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:0f:0d:32:ce:ff:13:d2:ec:70:1b:d8:48:6c:25:db:20:
         2e:45:da:f8:9e:c4:9b:d8:17:9c:62:03:04:87:ca:d9:a2:78:
         f3:75:38:0c:bc:6c:9f:f8:3f:b6:71:cd:c7:95:eb:b3:f6:27:
         50:9b:04:6e:27:a4:73:e8:81:a3:fc:2c:60:9b:b3:9c:06:48:
         ee:c0:26:d0:4c:4e:32:7c:17:50:ac:55:2a:ea:f5:63:e7:a9:
         7f:c3:32:a6:aa:f3:95:81:83:d9:16:5a:55:dc:32:5a:6e:29:
         f1:c9:b6:2a:8f:e4:bd:bf:d9:b7:9a:5c:34:73:81:6b:fc:5e:
         ae:31:ea:7c:51:a1:0e:01:02:fd:4d:9b:3b:ad:3c:34:eb:db:
         80:f6:6e:3d:89:f0:45:e1:1c:e0:81:1e:59:70:54:74:8b:8a:
         f1:ec:26:18:50:5a:b0:c6:80:7a:ce:ae:cc:ce:7d:ef:dd:62:
         32:38:30:57:92:c8:8a:e2:ae:f1:df:c0:4f:2c:01:9a:f4:3f:
         84:bb:c7:7a:55:a9:1a:03:ce:f0:72:2f:b1:3f:5f:94:63:56:
         4f:04:f1:65:ea:92:61:5b:4e:33:84:6a:57:d4:a7:2b:02:9e:
         49:95:53:79:a5:18:f6:60:b6:3c:b9:10:85:ba:68:2c:a2:9f:
         d2:6d:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 17:49:37 2024 by rpki-client on console-fra.rpki-client.org