Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35342e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          bxIesTLq4OcONlumFsOXDtm5fbcPof2ZwIq5nuS0AlU=
Subject key identifier:   0D:E4:90:D7:77:A6:40:8E:E8:81:47:D1:F9:A9:46:FA:66:93:A5:69
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       1E88A16C325924F755043AE3E369BC309227235E
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        177.91.54.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:88:a1:6c:32:59:24:f7:55:04:3a:e3:e3:69:bc:30:92:27:23:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=0DE490D777A6408EE88147D1F9A946FA6693A569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:5f:77:77:32:e4:f3:b7:53:88:9c:4c:a7:
                    94:58:0b:98:57:b5:c6:d7:40:2e:64:ae:d7:1f:4b:
                    b4:63:a8:04:23:93:63:ee:6a:3f:dc:45:16:5b:cb:
                    d9:31:0a:63:e1:84:5f:21:41:c6:d5:2e:b7:46:55:
                    b4:99:55:7f:bf:a5:ab:ee:36:19:2d:b9:0e:1c:24:
                    9f:87:64:42:2a:80:79:6c:cc:9d:af:eb:cb:b3:30:
                    42:f7:93:92:6b:95:59:b9:72:db:07:07:93:07:93:
                    75:97:1a:b1:d6:d1:7f:66:f0:cb:06:b9:a6:2f:37:
                    22:5b:d2:71:f5:01:cc:0c:5d:0f:aa:3f:cf:34:31:
                    70:73:8c:5a:c4:8f:cb:99:62:d6:71:0f:42:7e:60:
                    86:2e:61:6e:2c:bd:af:63:9f:24:1e:c0:f7:b9:54:
                    83:f1:d5:16:88:e2:17:20:7c:e4:85:bd:de:e9:43:
                    11:bf:71:18:a6:dd:97:27:7a:22:03:55:43:3a:c9:
                    8f:b2:f1:88:64:c4:d4:7a:8f:e2:3d:ce:fc:38:72:
                    7c:51:15:81:31:84:91:4a:e2:6b:b7:62:26:d8:74:
                    fb:79:93:12:d1:65:66:8d:6e:69:8c:93:5f:a2:27:
                    65:f1:6d:f9:68:74:bc:d1:23:77:03:f6:5a:a6:3e:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:90:D7:77:A6:40:8E:E8:81:47:D1:F9:A9:46:FA:66:93:A5:69
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35342e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:eb:19:a4:31:71:ea:9b:7a:42:a4:68:24:26:64:41:d0:
         5c:26:31:96:0c:3a:0d:6e:9a:76:c2:25:bf:91:1c:d6:fb:7c:
         71:d6:22:3e:67:6b:18:4d:d9:e1:d8:5a:f7:20:ce:50:19:23:
         f2:11:46:5a:06:70:12:ae:d5:e6:9c:ae:85:84:e9:da:49:7e:
         54:86:64:9f:4e:83:6d:10:61:04:dd:49:a4:d1:b9:59:69:76:
         83:53:b3:54:7b:fc:ab:13:4c:8a:7c:9e:67:62:de:19:3c:6d:
         a2:4e:33:39:32:92:12:99:e3:d9:e4:23:ca:45:5d:92:4f:04:
         6a:70:4e:21:29:74:70:9a:1b:f7:65:46:92:67:10:68:1e:98:
         a0:dc:7a:ab:73:82:06:ea:81:aa:37:6c:d2:f9:bb:3a:16:8f:
         c9:9d:38:f2:61:b7:03:c7:bb:f7:e1:77:31:97:c2:bd:01:92:
         a6:9e:6a:fa:95:c0:97:3e:c4:8d:39:4f:b6:44:fb:c4:fd:02:
         2f:d1:fa:ac:53:94:9f:70:d0:15:cd:37:3f:74:c6:3b:12:cd:
         00:88:35:af:e8:e8:b9:3d:9d:45:8d:35:b7:2f:3e:eb:38:a8:
         cb:4d:50:b3:b9:9a:c4:7b:7d:42:ab:54:43:bc:7c:57:ae:97:
         c6:fd:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org