Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa
File:                     3137372e38342e3233382e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier:          ytp4pjOYrCjOekNnkpc1akIPL7pk/fFiOyXbB3VQ5/Y=
Subject key identifier:   34:DA:C8:F0:D3:88:18:30:49:71:EF:4A:B2:BE:DE:C0:FF:06:8A:29
Certificate issuer:       /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial:       43A3FB5098E0589C6403ECE6E4E381347B533F30
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa
Signing time:             Wed 10 Apr 2024 13:37:01 +0000
ROA not before:           Wed 10 Apr 2024 13:32:01 +0000
ROA not after:            Wed 09 Apr 2025 13:37:01 +0000
asID:                     61689
IP address blocks:        177.84.238.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a3:fb:50:98:e0:58:9c:64:03:ec:e6:e4:e3:81:34:7b:53:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
        Validity
            Not Before: Apr 10 13:32:01 2024 GMT
            Not After : Apr  9 13:37:01 2025 GMT
        Subject: CN=34DAC8F0D38818304971EF4AB2BEDEC0FF068A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:5e:de:20:e3:b1:62:d5:69:73:4c:7f:62:
                    2f:d0:26:04:4a:f3:eb:92:18:3c:0c:ba:0f:99:01:
                    5d:55:b8:ee:f1:4a:7a:64:7d:83:3b:ca:7b:96:0a:
                    3b:03:c1:04:9c:ab:fc:6d:af:24:0d:bc:b4:8f:d6:
                    8a:d7:4e:78:23:1d:15:2d:0f:00:61:d5:81:23:80:
                    c1:63:9e:27:50:02:78:17:e2:9e:8e:11:be:f5:83:
                    27:8c:30:27:f4:32:4a:83:71:3b:ea:87:75:3a:88:
                    83:ee:6a:3d:0d:e4:67:11:60:18:c1:30:2b:a9:b1:
                    4e:1e:bc:18:ef:a2:98:92:d7:8e:49:7e:0b:1b:f0:
                    c9:87:9d:4c:67:97:f4:4f:66:3c:34:f5:f2:f3:f1:
                    71:30:48:93:47:c7:4a:c6:9c:97:19:03:13:5c:9f:
                    81:44:9a:ff:46:05:f7:ce:ea:45:bd:f0:97:bc:83:
                    e9:c5:fe:45:4d:29:1d:76:4b:8e:d1:3a:0f:31:7d:
                    6c:e8:ea:8c:5e:e9:ee:8b:45:c7:e8:ea:ba:b1:67:
                    d4:96:a3:d7:0e:51:93:be:30:b4:f9:45:c4:05:91:
                    43:ce:2d:9c:c3:45:1b:30:11:4b:97:64:21:2b:0f:
                    a8:66:f3:62:83:25:7d:6c:69:d0:c9:2c:c1:55:1a:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:C8:F0:D3:88:18:30:49:71:EF:4A:B2:BE:DE:C0:FF:06:8A:29
            X509v3 Authority Key Identifier:
                keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3137372e38342e3233382e302f32332d3234203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:8c:f5:41:b7:90:04:08:87:c1:23:59:6c:b4:93:d3:1e:
         13:29:56:86:d2:6d:a6:9f:06:f5:86:38:bd:1f:b0:64:48:df:
         13:a9:56:dd:2a:1a:94:1a:05:25:48:d4:b9:66:54:8a:bc:73:
         7c:21:8c:19:b0:9d:a5:64:24:99:a2:d0:99:3d:e7:70:15:0d:
         dc:ff:26:b1:5e:d8:a5:86:eb:97:07:6f:10:8e:03:e3:56:e3:
         70:eb:3b:ca:00:c9:34:a6:33:22:3c:2d:ef:41:76:97:36:50:
         d6:df:94:35:b5:7b:03:8e:f6:ce:81:68:70:56:53:10:99:4c:
         65:0e:07:9e:f3:9a:3e:60:5a:e6:57:67:88:48:00:81:1f:59:
         00:63:d8:35:d6:32:d2:60:03:0e:48:3f:17:b9:4b:34:5e:c1:
         70:a8:66:93:32:b8:6e:0c:62:f1:61:c8:d9:19:d0:7b:fe:f0:
         fd:9e:b6:93:eb:15:6e:67:b0:ea:9d:a0:7b:8f:58:a5:d7:47:
         b2:47:3b:17:33:82:68:4b:68:5e:c7:03:ba:3b:ad:ca:cf:bd:
         c6:5b:3d:5f:3a:45:c4:d1:f8:7b:88:85:9f:03:f7:d4:7a:28:
         eb:a8:d7:ca:71:c2:94:31:78:d4:1f:2c:7f:8d:c4:ea:d6:3a:
         b1:43:7c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:03 2024 by rpki-client on console-ams.rpki-client.org