Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35322e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          CqTlG6g0GYoTIugbbJFTmjIdJciYaTpx5A0b3ITFCwM=
Subject key identifier:   65:82:36:C0:D8:5C:FA:FF:87:23:92:AA:B5:1A:96:4F:D7:0B:2A:81
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       528758871C8E5BC642990C7390C43C14A62E1207
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        177.91.52.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:87:58:87:1c:8e:5b:c6:42:99:0c:73:90:c4:3c:14:a6:2e:12:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=658236C0D85CFAFF872392AAB51A964FD70B2A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:2b:bb:4b:37:ab:ed:40:03:4a:64:7b:a0:
                    1c:ec:09:36:ae:2e:0d:22:bf:64:50:a3:6f:a0:fb:
                    8d:43:22:e9:48:18:20:da:66:db:77:50:aa:02:6b:
                    87:48:be:09:45:7d:1c:04:98:c0:9b:c5:8b:e6:be:
                    05:23:3c:24:f7:02:21:9b:8b:5e:6f:58:5c:89:c5:
                    8a:93:6c:d8:96:c4:06:26:80:7f:a6:a3:bb:98:c6:
                    db:72:c9:25:13:76:93:25:4c:e5:d8:91:ea:3d:03:
                    2d:3d:29:45:c0:7e:f1:0e:8c:f5:bd:91:b8:5c:03:
                    8b:c9:c2:c9:94:f3:d1:31:09:c2:6a:6b:87:df:f9:
                    52:b0:b0:c5:1c:9d:01:d0:13:a0:f9:1f:42:e4:c5:
                    f5:f6:35:e8:e7:ce:6c:32:3d:a9:be:85:67:bb:21:
                    54:d8:e2:29:3e:00:40:93:1f:18:d7:f4:b8:61:24:
                    01:6d:e6:78:d0:8a:69:fd:fd:35:73:b0:d6:f4:11:
                    53:06:aa:38:db:80:b8:51:bc:38:3f:09:33:fe:9c:
                    39:f4:9c:66:a3:9d:4f:d8:a2:79:11:0e:77:41:59:
                    8a:91:8a:88:69:ff:13:74:b4:28:0b:31:75:13:6f:
                    4d:b6:12:60:02:0e:d2:a6:ec:ac:d1:6f:49:52:01:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:82:36:C0:D8:5C:FA:FF:87:23:92:AA:B5:1A:96:4F:D7:0B:2A:81
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35322e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:16:07:ec:ef:42:ba:76:66:74:c7:d6:db:d3:e2:bf:f6:7a:
         93:6a:ea:c9:7c:e1:c8:79:93:39:4e:bc:4c:d7:3c:d2:a3:e2:
         f3:79:8a:00:65:72:ea:e6:1f:fe:d4:51:f8:27:2b:06:17:35:
         2c:4f:74:9e:a2:f0:b4:a3:16:0b:a7:5c:35:5a:eb:2f:54:db:
         51:6e:27:88:ac:87:70:c2:b6:10:1b:8a:34:88:20:22:33:e8:
         c1:79:8f:24:f8:a2:ef:39:89:19:58:ef:b4:bc:42:a7:9d:39:
         68:b9:bc:bd:93:1b:af:c4:3b:c5:47:b2:a9:3f:44:81:0b:50:
         f6:31:b1:b0:09:20:e2:49:ca:5c:09:2a:db:98:91:3e:06:8f:
         2e:0e:72:bb:dc:69:63:fc:5f:ff:f3:58:6a:95:8a:4c:3a:09:
         f0:b1:7b:0c:04:d3:54:2e:10:26:69:76:7e:be:74:9c:23:9e:
         c9:be:5c:32:bb:3f:20:66:b6:fd:ae:c1:cc:3c:75:ad:6c:b3:
         b3:08:59:c2:b1:60:70:6b:16:2a:2a:58:cf:55:1d:b9:08:1b:
         e0:5e:52:3c:22:2e:a6:81:f0:99:09:8f:ca:2b:c1:57:18:88:
         9e:ee:be:1b:f3:98:7d:8b:2d:df:1e:ad:9b:57:30:70:a7:98:
         80:06:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org