Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          CDHTcFHvpayZrTOJSBtf124BDUlYjNaIDy5C62gLBWw=
Subject key identifier:   A7:AB:DF:64:0A:31:11:A2:3C:54:C0:2B:17:63:01:15:6A:9A:14:FE
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       753D76A60A27264254D7B1E355138B908B75B803
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        177.66.192.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:76:a6:0a:27:26:42:54:d7:b1:e3:55:13:8b:90:8b:75:b8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=A7ABDF640A3111A23C54C02B176301156A9A14FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:82:9d:49:fa:18:88:05:1f:df:85:d8:d5:
                    52:64:20:5d:ba:8e:56:50:f6:0c:e9:c8:bb:8a:41:
                    9f:be:95:9e:f3:35:de:28:b9:de:c4:48:1f:4f:2a:
                    cb:3d:32:92:e7:55:c4:7d:6e:e0:cd:af:5c:57:45:
                    97:39:66:cf:c9:cb:de:32:55:4a:3d:ea:ff:cb:47:
                    5c:18:be:2e:18:a1:db:5c:b8:a0:62:a1:f9:4f:2e:
                    7c:1d:2f:86:03:d5:17:6b:99:95:b2:71:c6:5c:51:
                    8d:78:2b:c9:42:26:ce:20:ba:26:04:66:73:0d:b5:
                    7a:09:97:94:7c:a9:e1:b2:01:c1:46:59:34:d4:55:
                    71:2c:9f:25:35:51:80:22:ad:1e:b2:44:52:8b:43:
                    fd:48:4d:e2:55:d9:74:fb:03:1a:61:54:f9:3a:c6:
                    59:36:e5:74:8e:f0:b5:a2:ab:6e:a4:2e:84:89:5f:
                    82:bf:43:91:a3:be:be:be:a4:11:a6:ed:58:7e:4e:
                    01:9b:16:c9:ac:21:65:25:cb:6e:8a:b3:49:84:6b:
                    4c:0f:fc:c6:91:3d:f3:e8:c3:34:d5:46:8a:a3:6e:
                    f1:60:13:dd:32:bc:71:75:54:05:1c:1a:17:09:3b:
                    32:e7:b0:cc:ba:a7:6e:8a:1e:ab:99:de:ce:01:63:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:DF:64:0A:31:11:A2:3C:54:C0:2B:17:63:01:15:6A:9A:14:FE
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:59:b2:83:b3:3d:c0:1c:c6:e0:ec:ef:39:9c:f6:47:c3:
         5a:a3:55:45:61:4e:50:0a:31:a5:41:f2:16:6e:3a:40:31:c9:
         0c:96:1f:00:c7:d3:36:ae:7b:6b:98:04:30:e7:21:e3:ad:f5:
         66:63:ee:22:c9:fa:b0:2f:8e:69:50:f0:47:9a:28:d8:43:d1:
         0e:2e:ec:dc:0c:d7:99:48:c3:e2:8b:07:cc:0d:cd:25:67:67:
         ea:c0:f0:fa:12:c5:32:ef:ab:d0:89:89:c6:21:43:6d:bf:c7:
         96:a3:c9:c7:77:6b:b6:92:20:04:7d:66:a2:35:78:a5:92:93:
         70:52:97:fc:f9:23:4d:a4:60:ed:6c:7a:29:85:c5:e5:34:2e:
         48:64:00:60:0d:20:dc:c8:d7:1e:38:e3:93:01:7d:1d:48:4c:
         71:2a:4d:55:a6:17:1c:6a:1e:6d:79:df:14:51:db:9b:8f:1d:
         f1:ae:3d:9e:fb:20:89:b6:56:33:98:63:bf:8d:85:b4:e9:c1:
         70:0a:2b:b2:b4:58:60:fb:f6:6a:98:ce:11:1e:da:85:51:51:
         da:46:34:dc:2f:ee:a6:ee:1d:74:e5:a6:84:e3:b9:b4:27:17:
         2f:b8:e6:85:02:9f:3b:26:4a:88:d8:bc:7a:93:5c:66:de:4a:
         b6:09:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org