Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          T4thypYUk6a9QX9dIqAX51UpdjXALzjuHNliFk2PrBA=
Subject key identifier:   DB:4B:A3:FF:D0:E3:68:79:BF:7C:DC:44:8F:6E:4C:A2:AA:7D:2E:F2
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       04E981BBFF70CD97A1523BB18A1C9E49D7E824D1
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        177.66.192.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e9:81:bb:ff:70:cd:97:a1:52:3b:b1:8a:1c:9e:49:d7:e8:24:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=DB4BA3FFD0E36879BF7CDC448F6E4CA2AA7D2EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:f9:18:af:06:85:e2:cf:20:af:5f:08:21:
                    6b:69:e7:d4:b9:38:a8:21:a6:13:47:3e:42:20:a9:
                    64:d2:aa:f6:eb:47:00:e5:67:cc:3d:ca:0f:8c:54:
                    89:b2:56:16:6d:a3:01:ee:78:a2:16:75:84:f0:90:
                    9c:4e:91:ce:57:74:31:b9:04:48:82:af:c5:f8:5f:
                    91:2e:2a:ea:33:f3:fa:1b:14:09:63:5e:2b:63:ce:
                    90:36:7e:aa:33:39:2c:6b:d2:f6:ca:50:8f:35:16:
                    79:66:66:01:3f:7c:9d:6b:c7:38:21:db:5b:1e:8c:
                    11:ef:df:08:f3:a4:f5:4d:47:31:9c:89:83:aa:c2:
                    d4:d2:66:8b:6f:7b:04:1e:19:11:d1:71:c5:eb:94:
                    8c:4e:d6:f3:47:68:1c:06:b6:ff:17:05:4b:f2:36:
                    9a:f3:9a:d2:c3:65:22:1e:f6:c3:67:71:57:45:1a:
                    b1:54:91:1c:c9:b7:38:01:c8:b6:9b:8d:07:59:de:
                    e0:92:33:51:fb:e5:d2:83:cb:93:79:5f:5a:f8:ae:
                    5a:58:81:67:01:a9:f2:f7:1d:34:99:7b:18:8b:92:
                    50:7a:f9:24:3f:7a:b0:0c:8c:73:b5:ca:90:ae:66:
                    71:f7:18:c4:08:36:1b:63:0a:51:40:fe:e3:1f:55:
                    65:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:A3:FF:D0:E3:68:79:BF:7C:DC:44:8F:6E:4C:A2:AA:7D:2E:F2
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:01:f3:9e:1c:cf:c0:08:e4:8b:60:ab:26:9d:05:0c:25:
         a7:f5:e3:53:35:eb:b3:dc:41:7b:b8:2b:f2:ec:d1:d4:31:13:
         e4:4e:b9:83:b3:94:5a:68:9b:bb:59:fe:5b:fa:54:ab:76:7e:
         51:6d:c0:78:3a:5d:25:68:ce:82:22:34:af:e7:05:4d:5b:82:
         43:b7:3a:d8:af:4e:44:f0:2c:2c:6b:8f:f4:a5:27:77:39:21:
         75:6a:51:ef:92:06:a3:b2:20:f7:57:94:6b:5c:ed:36:8c:4c:
         29:a1:2f:00:64:47:c5:a7:6f:a7:ce:cb:92:89:4c:e9:f3:80:
         3e:6a:8e:bd:eb:1d:58:0b:5c:49:d7:fa:6a:e9:8e:0b:49:2f:
         c3:df:59:5f:e2:f2:d6:ff:20:bb:9a:af:4b:54:02:09:df:b2:
         7d:fd:f8:21:d8:01:ad:d5:e0:c8:3d:25:64:b5:52:fc:fa:31:
         f3:ff:16:6f:25:1e:1f:23:88:90:26:69:ad:70:bc:0c:e2:21:
         68:80:5d:53:6e:49:0b:21:1a:e2:fe:d6:27:2f:05:df:90:4f:
         51:bd:e9:f6:0d:33:0c:ae:b3:81:30:0d:cb:d5:df:71:d2:2c:
         f5:89:08:69:af:cd:47:3f:28:ec:0c:c4:e3:5e:fe:e7:d6:9d:
         86:8f:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org