Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35332e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          QRajm0VgFoZW+m25SycH7hGEQnuGjtBwdn52YwN12y0=
Subject key identifier:   C4:09:81:49:EE:CA:F0:F3:D9:31:E4:46:CC:01:07:7A:4D:FA:C4:64
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       0DCCF6D978521E8FA0A18711C9E9BE04609843AF
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        177.91.53.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cc:f6:d9:78:52:1e:8f:a0:a1:87:11:c9:e9:be:04:60:98:43:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=C4098149EECAF0F3D931E446CC01077A4DFAC464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6a:9b:2c:9a:02:6f:87:3e:d0:7c:aa:05:b5:
                    a6:e3:69:33:5f:46:50:a6:ba:05:55:ed:1d:88:90:
                    3d:e2:1e:65:e8:bd:55:ae:6f:00:e0:89:48:21:b9:
                    cc:d2:3d:3c:fa:52:e7:26:c5:2b:76:f8:1e:f2:8c:
                    82:3f:16:0c:04:7d:72:87:f1:1f:f2:a4:bc:96:e9:
                    a3:cc:90:6b:2d:a8:9b:e4:c9:04:e2:a0:4a:28:0f:
                    fc:47:6d:43:b6:bf:53:ef:e4:7d:9b:66:92:e5:fe:
                    36:e2:bd:01:c5:93:46:78:2f:ff:0f:8f:ba:04:0b:
                    d9:53:0e:c4:88:63:0d:3c:fe:22:b8:a9:91:61:d8:
                    b3:6a:5a:db:9e:fb:65:86:e1:59:4e:0e:d8:0c:7c:
                    ff:68:f4:6d:1c:e9:d9:65:c0:c6:05:c0:7e:5b:85:
                    70:43:43:1d:b0:b5:38:8d:2c:17:ac:f2:b9:ba:1c:
                    5f:67:72:38:df:5f:fa:94:fc:9e:c0:dc:59:2e:d4:
                    c3:38:e1:82:15:6e:ce:66:c6:95:8e:29:70:99:de:
                    a9:59:dd:25:ae:a9:f6:6c:a3:18:14:a7:eb:c0:a3:
                    50:33:1c:15:f6:a1:84:c2:09:71:cb:db:aa:26:12:
                    b1:ba:41:00:e5:ac:5d:47:9c:58:27:c5:46:9c:03:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:81:49:EE:CA:F0:F3:D9:31:E4:46:CC:01:07:7A:4D:FA:C4:64
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35332e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:94:1e:f2:ca:dc:e2:8b:46:64:16:b1:eb:68:bb:74:4d:
         d2:a9:06:4a:4b:52:a8:e4:04:45:4c:be:ad:83:54:6a:80:1e:
         0a:1f:a4:20:74:7a:5b:28:68:ab:78:ea:3e:b4:0c:ec:1d:c1:
         16:e9:76:af:08:da:e9:bc:d1:0a:94:01:fe:0a:d2:7d:b0:5a:
         b7:b6:98:27:3a:a7:b9:c6:ca:e0:40:54:a0:86:52:4c:91:4f:
         5f:50:a4:5e:e2:79:52:37:5d:c9:b5:43:b5:c8:7d:7c:e8:c0:
         28:e4:04:64:96:6e:31:3f:bb:01:dc:79:cf:a0:c4:81:97:4f:
         a5:2d:91:15:19:43:e3:4c:f8:d1:d5:f2:a2:49:6b:7b:ce:67:
         41:12:76:8a:b9:2a:ca:dd:c5:e4:8b:0b:ce:f0:c3:1d:17:e9:
         63:a0:08:96:0b:bc:26:6f:d2:2c:3f:f3:13:b5:21:9e:43:f9:
         76:3f:21:02:10:98:8a:91:31:8b:c2:7b:ee:af:4e:7e:2b:fb:
         58:ad:4d:12:a3:9b:4a:a7:5d:11:a0:87:e3:e8:52:f4:77:00:
         e7:b9:e7:68:bf:2a:ce:4b:b4:0b:bb:9e:31:9d:14:c6:48:20:
         2c:b3:87:54:2b:31:a6:0d:65:7e:05:9c:bb:99:ce:98:03:f8:
         e4:8e:41:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDcz22XhSHo+goYcRyem+BGCYQ68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA4NUQ1MjNDMTlFQjY5QzVGMDg2QUY3ODQ4RTM0QUJG
QzFENjdBOTAeFw0yNDA2MjUxMjEzNTVaFw0yNTA2MjQxMjE4NTVaMDMxMTAvBgNV
BAMTKEM0MDk4MTQ5RUVDQUYwRjNEOTMxRTQ0NkNDMDEwNzdBNERGQUM0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUapssmgJvhz7QfKoFtabjaTNf
RlCmugVV7R2IkD3iHmXovVWubwDgiUghuczSPTz6UucmxSt2+B7yjII/FgwEfXKH
8R/ypLyW6aPMkGstqJvkyQTioEooD/xHbUO2v1Pv5H2bZpLl/jbivQHFk0Z4L/8P
j7oEC9lTDsSIYw08/iK4qZFh2LNqWtue+2WG4VlODtgMfP9o9G0c6dllwMYFwH5b
hXBDQx2wtTiNLBes8rm6HF9ncjjfX/qU/J7A3Fku1MM44YIVbs5mxpWOKXCZ3qlZ
3SWuqfZsoxgUp+vAo1AzHBX2oYTCCXHL26omErG6QQDlrF1HnFgnxUacA5URAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxAmBSe7K8PPZMeRGzAEHek36xGQwHwYDVR0j
BBgwFoAUAIXVI8GetpxfCGr3hI40q/wdZ6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8wMDg1RDUyM0MxOUVCNjlDNUYwODZBRjc4NDhFMzRBQkZDMUQ2N0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwODVENTIzQzE5RUI2OUM1
RjA4NkFGNzg0OEUzNEFCRkMxRDY3QTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNzM3MmUzOTMxMmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVs1MA0GCSqGSIb3DQEBCwUAA4IBAQBT8JQe8src
4otGZBax62i7dE3SqQZKS1Ko5ARFTL6tg1RqgB4KH6QgdHpbKGireOo+tAzsHcEW
6XavCNrpvNEKlAH+CtJ9sFq3tpgnOqe5xsrgQFSghlJMkU9fUKRe4nlSN13JtUO1
yH186MAo5ARklm4xP7sB3HnPoMSBl0+lLZEVGUPjTPjR1fKiSWt7zmdBEnaKuSrK
3cXkiwvO8MMdF+ljoAiWC7wmb9IsP/MTtSGeQ/l2PyECEJiKkTGLwnvur05+K/tY
rU0So5tKp10RoIfj6FL0dwDnuedovyrOS7QLu54xnRTGSCAss4dUKzGmDWV+BZy7
mc6YA/jkjkHu
-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org