Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa
File:                     3137372e38342e3233362e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          rRdfvOyMYpBr3+95tMbX3tDiJKOqhFQcngStsAojxQ8=
Subject key identifier:   0C:8C:D6:6D:1D:9A:7A:F4:90:88:39:28:B7:F3:2C:A5:A7:EB:0E:80
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       67847079ACE25ABC3CBFD65376F278D524672C6C
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:36:04 +0000
ROA not before:           Wed 10 Apr 2024 13:31:04 +0000
ROA not after:            Wed 09 Apr 2025 13:36:04 +0000
asID:                     61689
IP address blocks:        177.84.236.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:84:70:79:ac:e2:5a:bc:3c:bf:d6:53:76:f2:78:d5:24:67:2c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Apr 10 13:31:04 2024 GMT
            Not After : Apr  9 13:36:04 2025 GMT
        Subject: CN=0C8CD66D1D9A7AF490883928B7F32CA5A7EB0E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:d6:a4:85:25:20:91:66:6a:d1:14:4a:b7:
                    6a:67:25:b3:54:3d:f6:73:ec:09:32:4f:ca:dd:5b:
                    79:f2:73:c2:ca:d3:6e:7f:80:d6:ca:4c:72:52:f6:
                    00:27:ce:bf:68:5e:73:1d:e6:63:9c:aa:a4:f6:8f:
                    72:66:cf:f7:d4:c3:72:4f:4a:f6:d9:b1:cf:b2:6e:
                    c8:83:4a:b3:d9:7a:c5:bd:c4:67:54:6a:cd:33:e4:
                    9f:bb:ad:92:59:ee:4a:26:eb:cf:d1:60:22:ad:1b:
                    9e:95:65:ad:d9:3e:f8:ad:76:3c:a5:7a:14:e0:1f:
                    b7:b3:6b:71:11:b8:86:60:ab:3a:2e:11:be:e4:61:
                    02:69:8c:fa:d1:fa:ab:18:a4:3e:52:29:4f:ec:96:
                    f8:19:78:c8:94:a3:8a:0c:d4:fe:37:10:c8:d4:6f:
                    0d:8f:c5:ab:f1:6e:e5:97:ca:c7:21:c8:55:74:8c:
                    da:cb:6e:f4:8f:90:23:9c:42:24:23:82:22:08:a4:
                    38:2f:59:12:ee:c0:22:98:08:3f:09:20:38:42:a8:
                    d3:47:50:a3:23:87:c7:34:5d:b5:28:95:4c:26:2e:
                    34:ff:0b:0f:75:72:d8:ed:24:cb:2e:ef:e0:c0:d8:
                    55:a6:42:4a:21:8c:cb:0e:d4:22:9c:fe:51:b7:9d:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:D6:6D:1D:9A:7A:F4:90:88:39:28:B7:F3:2C:A5:A7:EB:0E:80
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233362e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:40:4c:d3:22:51:73:29:b5:14:18:db:70:f1:1d:8b:c5:
         72:02:22:25:c0:2f:6a:38:a3:d1:4f:cb:01:a6:27:26:45:75:
         93:e7:bf:bd:b0:32:f5:de:01:12:fd:da:70:ae:0a:14:a7:af:
         5f:23:ca:81:1d:8a:da:5e:c3:99:a0:2f:85:f4:e4:86:3c:01:
         2a:ae:02:65:b9:15:8b:a9:6d:a7:e7:c7:cd:c1:12:ab:35:a6:
         51:3b:dc:bf:99:f0:c4:49:33:92:9c:97:61:55:b3:6d:fb:ab:
         1b:bc:d5:11:16:2c:52:05:13:5d:de:04:3e:59:50:a1:e7:63:
         1d:cd:5f:e4:34:7d:67:ed:ca:3c:ab:6b:25:c8:94:57:43:97:
         98:fc:9f:5d:6c:bc:56:c2:68:4f:a7:04:6e:bc:ba:91:31:d3:
         6f:b1:e8:fe:86:5a:25:ba:91:29:6d:7d:61:5b:4d:0a:5e:10:
         7b:1d:06:73:6b:09:b5:43:3a:4e:93:19:10:b2:48:2f:a8:b7:
         73:df:26:eb:38:a0:ae:89:2a:ef:d3:9d:a1:cd:12:cd:2f:5d:
         d5:d2:03:94:02:51:a1:68:80:06:b5:bb:43:03:06:61:3a:4e:
         3d:a4:c3:ec:0d:e0:26:c0:49:dd:56:fc:78:3d:ab:70:b8:80:
         c6:ff:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:55 2024 by rpki-client on console-fra.rpki-client.org