Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
File:                     3137372e32322e33322e302f32302d3234203d3e203532393831.roa (raw, json)
Hash identifier:          OiL53+XvH8QtS0BZBTjknOjJCPYpVHe3fsHnTp5OD5w=
Subject key identifier:   B0:E3:65:C8:19:2E:9F:AB:AD:4A:7E:8F:03:FC:BE:6C:C0:5D:7E:E6
Certificate issuer:       /CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
Certificate serial:       0620DE7E60B0948B015A3C006776E5FA6AE734FB
Authority key identifier: 0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
Signing time:             Sat 11 May 2024 22:42:01 +0000
ROA not before:           Sat 11 May 2024 22:37:01 +0000
ROA not after:            Sat 10 May 2025 22:42:01 +0000
asID:                     52981
IP address blocks:        177.22.32.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:20:de:7e:60:b0:94:8b:01:5a:3c:00:67:76:e5:fa:6a:e7:34:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BEDBC9F25C3978554ED91AA9D925E7498F260D9
        Validity
            Not Before: May 11 22:37:01 2024 GMT
            Not After : May 10 22:42:01 2025 GMT
        Subject: CN=B0E365C8192E9FABAD4A7E8F03FCBE6CC05D7EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:2f:cf:47:a8:29:8c:4c:c3:df:c3:bd:a9:
                    23:2b:25:a0:77:90:69:9a:41:d8:a9:96:83:99:74:
                    fb:a8:e6:a9:61:b8:2b:43:46:e0:2c:db:53:e9:6a:
                    ed:f5:cf:78:85:a4:66:53:09:9d:ef:90:4c:80:c6:
                    0e:28:50:f7:f5:29:32:44:c7:34:f2:13:e0:28:d1:
                    ba:33:2c:8b:70:c6:5e:e6:50:b9:1f:e0:3c:50:ac:
                    bb:b9:87:1f:41:d6:ee:eb:d4:79:a2:2d:27:23:ba:
                    79:f5:53:3a:1b:00:e1:9e:78:ec:69:86:3d:8e:57:
                    bc:3f:bc:67:d1:c0:be:ac:b4:59:ad:46:c8:f7:4a:
                    e0:65:04:8a:07:e4:5b:43:ac:1c:cf:f3:c5:75:5a:
                    5b:34:00:7b:a3:e0:e0:d0:68:a8:a3:21:fb:43:60:
                    f2:d8:dc:e3:aa:1a:21:86:f8:63:17:5c:dc:58:b4:
                    86:d9:70:68:fa:b8:e0:cd:15:d3:c4:09:b4:b3:ea:
                    69:72:f8:84:ab:27:2b:f5:86:db:62:32:db:9e:5f:
                    a7:59:af:14:db:68:88:41:8d:26:21:2b:51:f6:5b:
                    d5:93:85:59:d0:9c:3f:59:1d:77:1c:6c:af:e8:0a:
                    34:34:97:74:22:ab:d7:dc:40:81:01:57:0a:b0:a1:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E3:65:C8:19:2E:9F:AB:AD:4A:7E:8F:03:FC:BE:6C:C0:5D:7E:E6
            X509v3 Authority Key Identifier:
                keyid:0B:ED:BC:9F:25:C3:97:85:54:ED:91:AA:9D:92:5E:74:98:F2:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BEDBC9F25C3978554ED91AA9D925E7498F260D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/2/3137372e32322e33322e302f32302d3234203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:6f:60:b8:b1:ee:05:61:b0:f7:28:a9:44:83:4e:2c:37:d7:
         e7:b6:19:13:07:aa:3f:72:71:31:84:9d:38:33:1d:9b:64:2d:
         92:4b:a4:7b:8f:ec:5f:d3:d1:65:89:af:ff:b3:11:ce:69:3e:
         f6:73:91:02:8a:bc:15:3a:2d:33:98:82:3d:52:0e:e2:63:16:
         05:c5:db:cc:23:29:f8:45:62:83:44:0b:2a:c3:0f:65:e5:71:
         43:a4:1e:69:3a:04:59:fb:f4:4d:61:d4:3a:9a:d0:90:68:49:
         49:b3:72:0a:8b:6d:79:3f:05:ed:30:43:d1:5d:21:a2:03:60:
         2c:b4:39:56:d1:4d:c8:46:90:d5:a3:63:37:e8:57:40:4d:f8:
         1b:25:b5:2e:ce:73:bd:fd:f5:e8:28:55:74:a9:6f:b4:50:6a:
         fd:fc:92:9e:1a:4f:9a:24:77:af:8d:d5:89:20:ee:bd:ef:ca:
         d7:df:07:49:33:8d:17:b0:40:f1:ac:8b:9d:c0:d5:2f:7b:ee:
         d1:37:02:a7:2e:c0:77:32:ab:35:ca:fd:33:ce:7f:2d:7e:75:
         b1:6d:57:5a:7a:31:09:c2:16:5f:26:e2:8a:ca:a2:0f:bc:be:
         5a:bc:0d:ad:cc:2c:9b:0a:90:6a:7c:d9:c7:83:67:5b:ad:63:
         40:ba:bf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 13:20:47 2024 by rpki-client on console-fra.rpki-client.org