Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          Mo6q1oUV/Cwi/BJE/N3t2LWBKonPf83aDQ6utuwIvnM=
Subject key identifier:   76:60:D8:FF:16:4B:CF:86:ED:41:8B:B2:C6:C6:1A:45:EF:0F:6C:E2
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       34ED5D5FC52A14990F39B365E439755BE02A3937
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:57 +0000
ROA not before:           Tue 25 Jun 2024 12:13:57 +0000
ROA not after:            Tue 24 Jun 2025 12:18:57 +0000
asID:                     262503
IP address blocks:        177.66.192.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ed:5d:5f:c5:2a:14:99:0f:39:b3:65:e4:39:75:5b:e0:2a:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:57 2024 GMT
            Not After : Jun 24 12:18:57 2025 GMT
        Subject: CN=7660D8FF164BCF86ED418BB2C6C61A45EF0F6CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:da:55:a8:89:24:a9:ee:21:75:04:6a:87:
                    1f:e6:8f:e9:29:05:c4:ba:00:4c:90:79:31:d2:24:
                    64:6a:78:5b:78:79:b0:14:a6:b3:51:c0:f9:8d:fc:
                    b2:d7:69:2c:b3:bb:10:85:96:9e:ae:e6:19:fa:36:
                    97:e1:43:1b:90:4a:d9:63:dd:1a:8a:7a:a7:d9:d4:
                    5b:87:7a:a8:81:5f:3c:67:64:80:ed:f1:cb:20:f2:
                    f8:1e:2e:d5:a6:8f:70:c7:a7:f6:e1:90:be:70:95:
                    55:2a:74:50:3c:aa:00:0d:d4:7b:9f:28:6c:c9:b4:
                    ad:b1:10:f5:10:a4:05:c7:74:ed:0c:80:30:94:95:
                    0e:10:93:31:63:30:7c:ca:5b:36:4b:5f:22:74:a9:
                    b0:e5:7e:06:dc:c7:0e:f5:c8:0a:96:34:8a:af:38:
                    d5:f5:0a:d3:4f:06:f1:36:d2:9b:80:66:96:08:84:
                    65:e5:e2:90:49:e5:c0:fb:7a:de:04:67:30:11:3f:
                    d5:52:25:55:1c:88:0c:2b:99:4d:20:5e:74:e6:eb:
                    75:59:91:55:a5:41:ab:f7:a7:2a:7e:c6:fc:44:5f:
                    f2:bd:4c:b3:f3:26:56:89:c2:9d:dc:fb:f6:fe:c5:
                    33:9a:fe:52:e8:f7:70:92:0a:90:bc:77:d7:dd:d6:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:60:D8:FF:16:4B:CF:86:ED:41:8B:B2:C6:C6:1A:45:EF:0F:6C:E2
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:8f:f7:28:dd:cb:30:a7:61:e8:33:0b:58:00:84:ef:ad:f2:
         da:70:45:03:49:74:74:5b:8f:5f:64:3e:a5:19:98:16:f5:27:
         a1:0b:59:10:ec:78:3a:db:ca:8e:47:27:0e:d1:48:18:5f:e9:
         88:02:a9:f8:54:f1:8d:69:66:19:b3:23:71:58:a4:76:65:51:
         95:3a:d4:60:d4:c9:00:94:f4:e0:bc:f6:2c:99:6c:39:88:49:
         f2:15:87:e7:a5:28:14:1c:9f:49:db:34:bf:ce:5e:4f:4c:77:
         da:c2:82:6c:6a:4f:6f:07:a7:0b:c5:f2:ef:c2:51:a0:dc:81:
         d9:40:13:35:18:2f:f8:3c:04:27:e5:46:52:d8:7b:32:34:6a:
         12:b6:e1:29:eb:6a:6a:64:b9:c5:14:57:e7:8d:e6:57:28:83:
         37:b1:99:af:fc:87:cb:53:8d:e3:65:fc:99:0b:ce:d1:20:0c:
         ff:ef:3f:ff:8a:4b:2a:e8:af:dd:ea:3c:6f:77:ef:46:7b:b9:
         89:59:d8:39:14:93:99:32:8c:5a:30:d2:1a:c6:fd:1e:0b:6f:
         ce:f8:55:b0:e1:1b:3b:b7:cd:25:51:3c:f4:48:a1:9d:6a:40:
         83:ed:22:04:1c:b5:0e:74:64:c8:6a:71:7f:0e:d2:71:f3:da:
         21:83:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org