Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa
File:                     3137372e39312e35352e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          Xh4shMHR7GBAEjn1bXvuguLG77O6YjPQilvUZATHAY8=
Subject key identifier:   1E:31:05:78:3F:ED:04:73:C3:A3:98:8D:E1:A8:7A:E2:47:C9:F2:91
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       170B23F147D602DF2797A59E20008305F44DA07C
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:54 +0000
ROA not before:           Tue 25 Jun 2024 12:13:54 +0000
ROA not after:            Tue 24 Jun 2025 12:18:54 +0000
asID:                     262503
IP address blocks:        177.91.55.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:0b:23:f1:47:d6:02:df:27:97:a5:9e:20:00:83:05:f4:4d:a0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:54 2024 GMT
            Not After : Jun 24 12:18:54 2025 GMT
        Subject: CN=1E3105783FED0473C3A3988DE1A87AE247C9F291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:e8:86:8a:64:de:ab:aa:b0:00:ca:1a:9b:
                    2b:a7:5f:42:36:7a:00:f3:d3:1f:c1:e7:b9:04:e8:
                    84:53:30:e7:8d:06:b8:f9:6e:0a:1d:1d:c0:24:99:
                    e9:81:99:cf:d6:39:1f:97:b2:94:bc:65:28:e2:38:
                    dd:0e:4b:a0:38:e3:2d:d8:e1:c8:38:3c:13:93:6d:
                    0d:dd:3f:82:40:f3:30:e8:a9:73:1c:ca:0f:1d:99:
                    65:4a:b4:3a:04:3a:ee:9c:65:31:bc:12:ed:71:15:
                    6b:9e:62:ce:43:7b:eb:17:b2:d0:78:da:83:50:e2:
                    79:23:8d:ac:56:27:90:94:d5:49:5b:c8:3f:50:df:
                    52:43:f4:af:c7:3f:97:80:7b:fb:6c:5d:9b:85:f4:
                    10:20:8a:00:71:a4:a6:39:6f:8b:3d:71:59:e4:08:
                    61:2f:79:17:d2:08:9f:9f:31:ab:7b:c9:9e:7e:a8:
                    bf:7a:8d:69:e4:d7:c3:7a:c7:b5:0a:ae:a9:05:a1:
                    34:6d:5c:97:f4:0c:73:39:d8:da:f8:9e:2d:8a:93:
                    2f:0b:79:b0:0b:40:92:bd:30:35:6e:39:c4:90:78:
                    77:ac:6e:73:99:e9:2a:06:85:b0:3f:d7:0c:1f:2c:
                    8b:92:51:6b:3b:92:2c:da:83:80:89:71:b3:31:93:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:31:05:78:3F:ED:04:73:C3:A3:98:8D:E1:A8:7A:E2:47:C9:F2:91
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e39312e35352e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:50:ca:73:39:65:95:7c:1f:e8:b4:d9:4c:ae:48:8f:fd:34:
         a3:7d:4d:8e:f2:34:33:27:38:fb:eb:cb:67:c4:6f:49:58:15:
         8f:cb:a4:22:42:74:0d:f1:a8:b9:86:bb:4d:28:ec:a7:e5:7a:
         2a:d6:07:49:4b:7a:79:83:e5:eb:78:43:9b:45:86:21:42:30:
         31:58:a6:05:42:7e:b9:fd:a8:f5:a5:ee:1f:66:d8:dd:cf:cb:
         1b:b8:17:9d:0a:22:dd:21:fd:f9:43:36:1d:3d:f6:ae:11:04:
         17:31:59:30:64:11:47:29:d2:d0:9e:68:c4:da:bc:ca:bf:c9:
         49:3b:08:a3:52:24:d2:39:77:ef:38:b7:2c:69:88:24:05:a6:
         04:31:ca:45:49:b8:ed:b7:5b:a8:c3:b3:89:08:c6:56:a6:de:
         ed:d1:c0:83:0c:f1:d8:8b:80:14:db:d0:d2:f8:62:07:e7:29:
         23:04:88:ef:35:a7:42:e0:50:85:68:e4:42:7e:cd:d0:1e:93:
         50:62:79:af:93:bb:34:b0:70:b9:7e:d7:7c:16:e7:e5:19:06:
         bf:18:5f:43:95:45:d8:4f:a9:0e:e4:0d:74:45:9f:c2:03:cd:
         d5:78:23:60:f0:29:e3:5c:62:5e:8c:c6:de:20:20:d9:1e:f6:
         fd:2d:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org