Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa
File:                     3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          po86hoFDlKX4oowyHDCaG0z/TqfndjkX65DdEaZ2yAA=
Subject key identifier:   04:C5:DF:18:88:CB:7D:07:56:40:14:C7:F8:1D:86:CD:C1:83:94:31
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       4839C45705DC31221EB11FE9AED47044CBB519B3
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        177.66.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:c4:57:05:dc:31:22:1e:b1:1f:e9:ae:d4:70:44:cb:b5:19:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=04C5DF1888CB7D07564014C7F81D86CDC1839431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:40:2d:c4:1b:3e:88:f6:86:67:b6:0d:f1:
                    f9:95:06:81:ea:af:40:02:56:ad:72:f5:d6:ed:55:
                    04:25:4f:55:79:1f:ad:0c:35:5e:68:ed:93:b1:86:
                    43:5e:48:1e:0a:84:8f:3f:24:1c:99:00:b4:0b:d0:
                    9c:c2:e7:c5:fc:9a:ba:26:54:d5:6e:98:67:4e:69:
                    de:30:df:36:2e:57:b5:6f:5f:d4:d6:2a:fa:6e:7a:
                    d9:dc:42:a8:c8:b9:35:73:db:a8:74:bd:b5:d9:64:
                    60:91:73:8a:85:1c:27:98:f6:f4:6e:d3:24:f4:aa:
                    09:57:dd:47:bd:85:5c:75:4a:c0:17:ba:59:d3:82:
                    99:37:f1:da:09:2f:28:e2:7f:e0:30:f0:49:0b:24:
                    ba:85:ce:2c:f8:53:0a:31:ca:8a:89:87:1b:0c:a3:
                    e7:20:54:b4:da:2e:96:f8:7b:08:62:89:0f:e0:d2:
                    c1:1c:46:71:41:bc:4a:e6:5d:bc:05:09:a9:98:91:
                    a3:d2:5e:83:14:a3:8a:04:40:02:68:85:da:97:9d:
                    b8:ff:ee:cd:a4:1e:b6:e8:a9:db:10:4b:16:32:ce:
                    61:bb:40:75:25:8f:57:c3:75:2d:2b:6a:2d:fe:57:
                    43:90:ca:27:97:72:e6:4b:51:eb:01:45:ab:8f:23:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:DF:18:88:CB:7D:07:56:40:14:C7:F8:1D:86:CD:C1:83:94:31
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139332e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:08:6f:29:89:4c:a8:41:9d:7c:88:c1:d0:af:e8:ea:13:f1:
         8c:ca:d8:af:53:c9:9c:a2:a8:a5:71:eb:e3:3e:a8:86:96:f6:
         83:0f:59:d0:bf:1b:76:a4:08:f4:c8:5f:b3:1c:3f:ac:b4:4f:
         54:9a:0d:3a:e0:92:54:e9:a8:fa:27:3c:70:a7:8f:8d:11:67:
         e1:05:5b:02:a6:57:55:f0:e0:81:2f:4a:86:04:a5:c4:7a:cc:
         a9:ab:c1:26:b5:06:b2:02:77:0e:8c:44:e1:32:30:e2:8a:d4:
         b0:50:f9:ac:f0:e6:1e:4a:bd:f2:bb:db:16:5d:01:04:5d:2e:
         d3:79:dd:e0:c7:ab:a5:d4:ad:51:cd:d4:95:b3:f9:09:dc:53:
         08:23:ff:f0:89:68:bb:f8:8a:67:14:5a:95:a0:0f:53:52:f6:
         7b:36:14:e5:b7:67:2a:56:d3:b2:bd:a9:5e:f6:38:87:52:a2:
         03:98:f0:9a:af:63:85:7d:3e:4e:4c:f1:68:74:ab:d7:7c:a7:
         1a:7d:0d:77:8d:92:59:20:27:bc:b2:fa:57:9c:cf:05:54:48:
         33:0d:25:b9:f7:9e:55:7f:67:76:de:25:24:7f:4a:39:d3:cf:
         cf:1f:4b:bc:49:c1:55:93:a8:9b:f4:be:3b:c6:64:54:be:7c:
         02:f0:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org