Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32342d3234203d3e203532353339.roa
File:                     3137392e3130362e3138362e302f32342d3234203d3e203532353339.roa (raw, json)
Hash identifier:          sQzzC30WUgbe11yaVM8sNv2HHSVg/Pk/jpvJdqhWTME=
Subject key identifier:   74:EE:6C:2F:CE:27:C7:77:B3:9F:49:7C:49:17:24:D0:30:9A:B3:43
Certificate issuer:       /CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
Certificate serial:       66121D2842BFED32A7F3AADBED6D1C7F7E96DDB2
Authority key identifier: B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32342d3234203d3e203532353339.roa
Signing time:             Fri 02 Aug 2024 17:56:00 +0000
ROA not before:           Fri 02 Aug 2024 17:51:00 +0000
ROA not after:            Fri 01 Aug 2025 17:56:00 +0000
asID:                     52539
IP address blocks:        179.106.186.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:1d:28:42:bf:ed:32:a7:f3:aa:db:ed:6d:1c:7f:7e:96:dd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
        Validity
            Not Before: Aug  2 17:51:00 2024 GMT
            Not After : Aug  1 17:56:00 2025 GMT
        Subject: CN=74EE6C2FCE27C777B39F497C491724D0309AB343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:c9:a5:9a:5a:62:9e:03:ca:3d:03:a2:48:
                    e5:e9:66:29:d5:f2:91:1f:b9:fd:6a:1d:bd:20:8c:
                    12:3f:3f:db:c3:0b:fc:47:2e:1f:10:7a:a6:5e:77:
                    06:89:51:1a:8c:65:86:75:9a:01:b2:9c:f5:3a:6d:
                    db:66:2d:5f:83:ac:07:70:ab:3b:9b:7b:33:5e:9e:
                    c5:48:70:62:84:31:ff:6d:83:b3:6b:9a:61:11:74:
                    4e:5f:3a:16:0c:c4:bf:8d:be:dd:81:20:15:3a:bb:
                    ad:dc:27:13:88:44:8c:41:c9:a3:ee:c0:c7:26:3a:
                    68:18:75:05:f1:a2:77:1c:7d:24:5f:d0:53:57:35:
                    a4:89:14:b1:dd:0c:86:f0:7a:3d:50:43:37:e4:90:
                    98:03:c5:da:2c:fe:14:2a:62:cd:7b:45:63:f0:4d:
                    2c:4c:1d:a8:35:db:96:2c:85:97:89:ee:1b:2e:47:
                    f8:c0:d1:29:06:9c:b3:c8:30:1c:a2:55:b7:e7:0f:
                    90:88:ad:87:fe:f6:bb:ad:11:76:0e:28:3a:c8:1a:
                    0f:36:42:09:cf:76:43:8b:51:ad:e4:e9:eb:a9:b5:
                    57:ec:b0:75:76:17:76:91:c5:12:4f:0d:dd:32:3c:
                    ee:98:88:49:15:11:52:63:fb:4b:28:eb:82:b0:3d:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EE:6C:2F:CE:27:C7:77:B3:9F:49:7C:49:17:24:D0:30:9A:B3:43
            X509v3 Authority Key Identifier:
                keyid:B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3138362e302f32342d3234203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:d8:e9:10:15:77:81:7e:86:61:57:94:a4:96:d0:8b:a0:
         a7:b0:ba:c6:9c:0e:af:bd:74:5f:0a:e3:24:90:1c:9a:76:ce:
         72:fb:4b:a4:c0:a5:c8:0e:6b:e7:cb:34:70:20:1b:7a:0d:51:
         81:a5:31:78:56:a0:6c:f6:c2:2b:57:c4:2b:f2:32:51:a6:ac:
         f6:7d:15:37:4c:bb:0f:55:62:a4:5e:cd:bf:93:aa:fa:3e:58:
         4b:87:5a:f9:d2:4a:96:81:e1:4f:6b:4b:3b:77:0b:98:12:d8:
         3b:b1:63:ce:01:cf:da:9b:29:b6:55:ba:37:47:d6:a1:82:51:
         db:46:8d:c7:d4:f5:41:53:44:7f:5e:94:ce:0f:48:a7:e9:43:
         ae:aa:91:1b:d1:96:4b:a4:7f:9e:8d:52:a2:50:c9:50:3d:1c:
         f6:9e:44:24:58:04:d1:f1:af:b7:a4:c1:29:b2:14:2c:9b:a6:
         6b:cf:17:e9:6a:74:e8:05:b2:76:7f:2a:47:57:7b:ac:8d:6c:
         cc:eb:01:f6:8d:42:55:85:9e:4d:28:64:d6:93:1d:96:3f:ed:
         41:81:a9:2b:16:35:83:d8:03:15:5f:f9:f9:99:1d:a6:08:2f:
         a8:9c:a3:71:d0:3a:94:4f:5e:4a:9d:6f:33:fd:85:07:57:29:
         f4:a5:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 16:53:01 2024 by rpki-client on console-ams.rpki-client.org