Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3137372e39312e3136382e302f32322d3234203d3e20323633343436.roa
File:                     3137372e39312e3136382e302f32322d3234203d3e20323633343436.roa (raw, json)
Hash identifier:          3bGVb1/7FWH7IpdgNQsGPRtvdhX/nveoLjryi84lDg8=
Subject key identifier:   E5:99:9B:7F:A2:47:F2:41:4A:E6:7F:30:38:F7:52:47:2C:AC:BF:E1
Certificate issuer:       /CN=3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9
Certificate serial:       53572434888A5C22AAD74F79247AF2F6B44FE53F
Authority key identifier: 3F:2D:0F:99:CA:27:BD:85:08:5F:F4:FA:8E:8D:48:DE:CC:CE:33:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3137372e39312e3136382e302f32322d3234203d3e20323633343436.roa
Signing time:             Tue 13 Aug 2024 11:26:15 +0000
ROA not before:           Tue 13 Aug 2024 11:21:15 +0000
ROA not after:            Tue 12 Aug 2025 11:26:15 +0000
asID:                     263446
IP address blocks:        177.91.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:57:24:34:88:8a:5c:22:aa:d7:4f:79:24:7a:f2:f6:b4:4f:e5:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9
        Validity
            Not Before: Aug 13 11:21:15 2024 GMT
            Not After : Aug 12 11:26:15 2025 GMT
        Subject: CN=E5999B7FA247F2414AE67F3038F752472CACBFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:25:ee:31:28:34:12:98:7d:d8:80:5c:db:7b:
                    cd:dc:33:9a:db:bb:f5:f3:d9:e2:a7:0b:1f:0e:c0:
                    56:34:9e:75:79:33:65:f4:66:80:2b:3c:18:cb:c8:
                    ba:6b:6a:7d:28:06:af:20:a0:8e:3b:75:da:ca:43:
                    ea:29:f5:09:ad:e2:e9:8e:5f:3e:b4:a4:df:fc:f6:
                    54:53:5f:b0:57:17:b7:4d:31:53:a9:82:e5:20:b7:
                    93:1a:ca:e1:54:e4:1a:63:2b:5b:57:90:d0:d7:4c:
                    db:a5:3d:eb:43:23:f9:b2:47:43:fd:0b:62:a0:b5:
                    00:31:27:66:21:b0:9b:63:ec:37:f8:fb:95:7b:0d:
                    a5:f7:4a:9f:91:8b:48:28:b0:a1:6e:0c:81:13:1a:
                    d4:f5:65:01:b8:ec:76:5a:6e:83:7a:46:5a:ab:4c:
                    84:64:2e:24:e3:8f:60:99:86:97:ce:08:b1:de:59:
                    8e:0f:f3:aa:ec:fa:75:42:58:93:2d:58:9c:52:3c:
                    7a:cc:bb:b2:0b:f3:70:8c:0d:29:d0:52:01:2f:f3:
                    5e:31:f7:df:3f:4b:5a:34:1e:cb:68:c7:ff:e1:ce:
                    35:7c:bc:55:89:31:e7:5d:03:68:c7:99:01:a3:90:
                    c4:19:2d:f3:3f:32:b1:5b:5a:c0:23:af:96:70:33:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:9B:7F:A2:47:F2:41:4A:E6:7F:30:38:F7:52:47:2C:AC:BF:E1
            X509v3 Authority Key Identifier:
                keyid:3F:2D:0F:99:CA:27:BD:85:08:5F:F4:FA:8E:8D:48:DE:CC:CE:33:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F2D0F99CA27BD85085FF4FA8E8D48DECCCE33D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUB7sbinPSTAsoCCZqs8uQbmzU4v93ve8YfsBB7S7VC/0/3137372e39312e3136382e302f32322d3234203d3e20323633343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:25:c8:07:c0:37:30:a2:67:a0:43:a3:22:84:2f:f8:4a:0b:
         38:26:0e:72:ea:5a:34:5f:8f:49:7c:85:c0:e9:f4:e7:f8:df:
         30:71:50:e5:01:9b:f6:69:4e:42:f7:02:f2:ab:f5:31:15:85:
         68:bf:ff:0f:6f:4e:4e:97:93:4b:3b:db:52:6f:c7:84:3e:8a:
         b0:36:5a:74:f6:c6:1a:3d:e2:d9:7b:64:60:b4:49:c5:58:6f:
         fa:ca:1e:99:df:b6:b4:ab:3f:56:38:54:32:d4:7c:54:42:5d:
         61:65:e3:f2:9d:09:ed:80:31:1c:22:32:4a:de:b4:f4:3d:98:
         a9:79:b2:14:4c:fa:2d:ec:e1:0a:0b:48:2a:cc:fb:3b:a9:03:
         5f:1b:40:bf:33:6f:af:97:31:3b:82:bb:b0:27:3d:1a:af:93:
         f6:ab:84:12:3f:09:6d:35:f6:d4:b6:06:48:57:2f:e9:93:15:
         5e:ca:ac:96:86:c7:db:96:f6:58:d2:31:97:b9:2e:c5:53:a3:
         66:a9:b4:17:74:3e:f1:d6:47:a5:26:78:4d:a5:0a:9a:9a:ba:
         45:1e:67:fa:d3:bb:cc:41:5c:54:ba:4f:85:3b:da:6d:47:cf:
         9a:f5:65:d2:7e:7d:64:16:00:f9:a1:5d:f2:01:ca:1b:d7:d8:
         7f:94:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:17:25 2024 by rpki-client on console-ams.rpki-client.org