Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
File:                     3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          aMc96XpO6ehMVj59azTfFYZXBdIYWeXzzM7LF5HB/lY=
Subject key identifier:   F8:FD:79:D6:AE:62:00:C7:0B:09:9B:D8:8E:A9:CD:8F:01:BF:7F:B9
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       7003ECB236E8C66FC2882B9171BE980DD69677E5
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:30 +0000
ROA not before:           Thu 31 Oct 2024 17:21:30 +0000
ROA not after:            Thu 30 Oct 2025 17:26:30 +0000
asID:                     28667
IP address blocks:        177.184.240.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:03:ec:b2:36:e8:c6:6f:c2:88:2b:91:71:be:98:0d:d6:96:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:30 2024 GMT
            Not After : Oct 30 17:26:30 2025 GMT
        Subject: CN=F8FD79D6AE6200C70B099BD88EA9CD8F01BF7FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:5e:d7:5f:0d:ec:98:d2:b1:16:37:f1:6d:
                    51:cc:b4:53:89:fb:ac:c3:3f:95:10:82:8d:9a:e1:
                    33:d0:60:c3:d4:5a:e1:b9:92:d9:93:64:4b:31:3e:
                    35:85:dd:9e:78:7c:4f:81:4e:67:f5:20:41:76:4f:
                    9b:91:b7:8c:dc:b6:e1:eb:5f:3f:97:f1:1b:c1:36:
                    31:ed:36:35:92:63:a6:00:ba:7a:a4:2d:b7:17:d6:
                    dd:41:12:dd:73:c8:7f:43:1d:ef:72:20:48:57:c4:
                    02:ea:7a:89:a5:b7:e3:18:c5:55:c7:7d:5e:b4:c3:
                    66:6b:38:3b:0e:82:c9:f9:b4:ae:2f:62:7e:bb:bd:
                    15:c9:33:b1:b4:77:c3:9d:18:95:d0:d4:2d:06:33:
                    34:7b:58:b6:b1:87:b2:62:ef:5a:7d:b9:8f:f5:93:
                    b8:35:7d:03:b1:0f:c1:88:bb:e8:6a:2b:85:36:6e:
                    64:95:ee:70:dc:54:9f:2d:b1:e9:a5:2e:54:3e:e9:
                    5e:3e:a3:f8:4f:a3:9f:45:f7:96:a7:a5:b0:ff:30:
                    cb:51:74:ce:ec:7a:49:7f:d6:77:13:d3:9f:a2:fe:
                    eb:24:2c:7f:a3:14:9e:e7:31:89:05:83:03:c0:06:
                    b1:f4:3e:6b:a1:c3:24:6d:a3:5a:67:4b:d2:45:cb:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:79:D6:AE:62:00:C7:0B:09:9B:D8:8E:A9:CD:8F:01:BF:7F:B9
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:69:c8:c5:b4:14:c9:4a:e6:9d:c1:4f:ad:1e:39:5a:41:c6:
         96:8b:a6:1f:07:d9:05:b7:14:bf:3f:2d:67:29:ce:81:22:38:
         57:ed:2f:00:5f:91:6d:fc:7f:a7:d7:f3:14:5c:0a:c8:2f:24:
         66:f7:d3:e5:e9:29:44:b5:03:e5:3a:1c:3b:58:09:9a:40:33:
         6e:f2:fd:0a:23:fd:14:fc:a2:bf:78:5e:1f:5c:0f:bd:b7:b7:
         31:21:38:d7:4d:f4:8b:ae:79:35:18:d3:52:9c:d6:4e:ea:c8:
         6e:90:fd:e9:ec:a6:92:da:f3:2a:52:c4:7f:ae:c4:66:6f:9a:
         fe:16:d5:d9:43:18:6d:6e:74:14:24:57:0d:af:20:06:d6:be:
         0a:1c:e4:5c:e0:fc:f4:89:c6:cd:7d:46:e7:dd:1e:08:7f:ed:
         c6:9c:18:39:10:90:76:14:5f:d5:50:c0:a4:9c:0a:03:79:72:
         2b:85:8e:71:61:6c:1a:1e:d3:20:cc:fa:37:34:0c:61:21:5c:
         35:dc:9d:0f:bb:fe:b6:5a:af:db:00:04:75:95:07:8f:75:40:
         86:d2:64:bd:19:d6:32:e9:35:9b:e8:a8:d7:b6:6e:42:7d:d9:
         ad:ef:f7:df:55:1d:d8:0d:54:a6:1d:76:6a:24:bd:4f:82:6a:
         4a:5e:2c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org