Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139312e302f32342d3234203d3e203532353339.roa
File:                     3137392e3130362e3139312e302f32342d3234203d3e203532353339.roa (raw, json)
Hash identifier:          Nl/7ehnVjoSXFFk2Bic/7U7g2/VhzE5hJX6NwfSmGZQ=
Subject key identifier:   6B:C3:BC:B6:10:4E:A6:78:DC:F2:23:FF:4B:A0:1E:71:37:2D:1A:0B
Certificate issuer:       /CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
Certificate serial:       3372DB7E8B5886897AF9CBAF782FE5988BB7F89C
Authority key identifier: B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139312e302f32342d3234203d3e203532353339.roa
Signing time:             Fri 02 Aug 2024 17:55:55 +0000
ROA not before:           Fri 02 Aug 2024 17:50:55 +0000
ROA not after:            Fri 01 Aug 2025 17:55:55 +0000
asID:                     52539
IP address blocks:        179.106.191.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:72:db:7e:8b:58:86:89:7a:f9:cb:af:78:2f:e5:98:8b:b7:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
        Validity
            Not Before: Aug  2 17:50:55 2024 GMT
            Not After : Aug  1 17:55:55 2025 GMT
        Subject: CN=6BC3BCB6104EA678DCF223FF4BA01E71372D1A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:a1:a5:93:49:49:f7:02:b2:0c:b6:27:3d:
                    9f:1b:ba:c1:cc:63:55:b7:1b:d0:27:45:67:42:da:
                    96:f2:e8:52:12:65:81:07:a3:63:99:7b:d1:5c:be:
                    58:cf:da:c0:e9:6f:6c:22:58:00:15:64:68:41:3e:
                    76:f6:55:d5:53:cf:54:bf:6a:2f:11:ad:6b:8e:45:
                    a5:ca:1a:e5:5f:36:f7:d2:bb:fa:3a:9c:a8:cf:8c:
                    36:76:ba:70:6f:d4:4c:b9:9b:0a:2f:8c:2b:45:b4:
                    21:d0:87:7a:e3:7c:15:73:63:09:78:69:ae:bc:5c:
                    95:73:e5:c9:49:4c:c4:5d:b2:e7:79:ed:1f:6b:29:
                    d1:29:3c:a6:a0:22:1c:50:13:b0:c5:7e:21:0e:e5:
                    55:6c:3d:15:4a:74:5f:00:50:aa:79:a6:62:89:ab:
                    ea:f1:eb:0e:49:e5:c6:a8:1f:f6:eb:b0:57:03:fc:
                    dd:fb:38:8b:50:e8:d9:f7:c4:4a:65:80:ca:ca:80:
                    eb:41:13:ef:b0:cb:ea:1a:08:13:e9:46:b6:be:34:
                    73:2d:3b:83:ac:73:c0:5a:92:58:62:a3:0e:a4:0b:
                    bd:3f:63:46:ff:a4:99:c6:09:df:b8:0c:69:eb:e7:
                    a6:3b:d5:bc:f8:94:31:42:df:e4:8c:67:cc:27:f4:
                    21:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C3:BC:B6:10:4E:A6:78:DC:F2:23:FF:4B:A0:1E:71:37:2D:1A:0B
            X509v3 Authority Key Identifier:
                keyid:B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139312e302f32342d3234203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:ff:d6:58:c8:4d:ee:01:60:9f:bf:98:54:ec:a1:ed:95:
         17:1c:23:57:9b:58:66:d6:85:c9:e4:cb:88:95:3f:6c:30:8a:
         f5:b6:df:27:35:8b:ac:de:f1:a3:82:a4:ac:94:65:ee:b3:62:
         db:04:41:e5:5d:71:74:86:d6:bb:e7:4b:fc:1f:02:c4:4e:a5:
         5b:73:de:87:ed:45:5d:dd:ef:f5:16:ca:10:bd:e8:e0:22:6c:
         f1:92:75:6d:8c:d9:d2:22:de:cf:11:86:b6:22:73:5b:b6:a1:
         52:0f:2a:4d:1e:ef:2a:db:7a:d7:44:b9:94:fc:c5:d9:39:03:
         4e:04:9c:54:cd:94:5e:8c:0c:89:0d:8a:9c:85:c2:d3:48:f7:
         60:f8:6d:4f:81:6b:88:a4:76:86:9f:f4:1f:ce:af:63:dd:43:
         4b:b3:01:f5:0f:f2:d6:7f:48:a9:1e:14:3c:35:f4:6d:3e:ec:
         c5:c7:47:ab:35:58:58:7c:bb:53:93:96:2b:36:d1:e0:75:06:
         fe:4e:70:cb:9b:09:9b:04:47:64:76:f8:10:7a:9a:d7:3d:f9:
         82:8f:5b:27:f7:4f:4c:2a:bd:8b:e6:4d:7e:ba:44:6d:11:3a:
         64:49:f0:4d:38:87:cf:d0:17:8c:13:6f:1b:0f:f6:ef:2d:5b:
         3c:4f:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 16:53:01 2024 by rpki-client on console-ams.rpki-client.org