Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
File:                     3137372e33362e3136302e302f32302d3234203d3e203238363639.roa (raw, json)
Hash identifier:          cxGkHNBsTDwNHNN3ZHmb9+voIufnFP1fRrf52Z9oqdk=
Subject key identifier:   7E:CD:AF:F6:6C:00:E6:A4:05:C8:45:58:2C:1B:AB:E0:D9:E5:3B:9D
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       2F060F457B457142B43D5C9525CBA75A402B24CB
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:42 +0000
ROA not before:           Tue 23 Jul 2024 11:33:42 +0000
ROA not after:            Tue 22 Jul 2025 11:38:42 +0000
asID:                     28669
IP address blocks:        177.36.160.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:06:0f:45:7b:45:71:42:b4:3d:5c:95:25:cb:a7:5a:40:2b:24:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:42 2024 GMT
            Not After : Jul 22 11:38:42 2025 GMT
        Subject: CN=7ECDAFF66C00E6A405C845582C1BABE0D9E53B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:94:f0:5c:83:e0:5e:8e:91:9b:33:a9:88:
                    e3:f4:8b:32:fc:8d:e7:29:5a:52:d5:e9:d9:e5:f9:
                    6d:63:81:ab:6b:2f:0c:9a:a5:be:47:b4:81:d7:0b:
                    2f:6a:e2:8e:03:b4:62:21:df:2a:d5:dd:61:16:67:
                    dc:59:7d:84:77:5d:89:59:82:e3:db:9a:45:5b:1a:
                    28:2d:2a:3f:86:1a:e9:ae:50:8e:7c:c6:45:3b:21:
                    b5:f9:76:b2:7d:ad:4b:f9:88:8b:e4:da:ca:62:4e:
                    53:cf:77:f3:f4:b2:ab:29:1f:d5:6e:28:a6:c1:d5:
                    58:c3:f9:1e:ab:8b:3c:3d:82:2d:62:f5:cd:b4:35:
                    5e:71:27:e6:d7:09:a6:9d:f1:3d:a4:1b:98:ca:53:
                    3d:5c:64:90:c3:67:5f:34:f1:08:4e:8e:04:da:50:
                    05:71:9d:3d:e9:d1:c7:5c:6f:a9:23:6c:7b:18:5c:
                    09:76:80:54:45:00:4a:1c:40:c8:f2:05:40:fe:a5:
                    35:7d:94:cf:37:87:03:cd:75:0b:02:d4:bc:27:02:
                    60:5a:66:ee:db:a8:53:87:08:95:db:c3:de:a5:db:
                    b7:93:2b:7b:8f:f8:26:54:f9:a4:b4:63:53:4a:49:
                    99:5c:22:be:10:4f:00:5e:22:dc:df:fc:96:b4:58:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CD:AF:F6:6C:00:E6:A4:05:C8:45:58:2C:1B:AB:E0:D9:E5:3B:9D
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e33362e3136302e302f32302d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:54:81:b4:7a:7e:33:d3:e5:69:57:c0:06:00:c4:12:1d:
         c2:24:bf:13:c6:2e:f0:5d:cb:6a:17:02:a4:e4:78:6a:66:46:
         40:fc:e3:6d:f0:60:26:25:f2:8b:f0:76:49:ec:59:fa:e8:17:
         90:8d:e0:21:e3:00:45:f3:ca:7a:d4:08:ac:52:5f:c9:12:7a:
         f5:f5:7b:6c:16:87:4c:77:58:34:eb:f9:2a:6e:6e:04:7a:56:
         36:0a:79:40:c4:cd:ba:35:a7:3d:e0:10:61:6f:06:e7:42:d1:
         32:4c:19:24:2b:93:4c:c5:6b:c3:36:88:51:cd:bd:d0:66:a8:
         c1:6e:62:e8:66:99:43:f0:ec:9d:eb:02:47:98:fc:08:8a:94:
         4b:60:ce:ae:4b:0a:78:ae:54:82:9c:9c:10:cb:33:d5:e9:ae:
         cc:f2:eb:33:42:c6:54:71:a5:81:c6:12:81:2b:85:19:9a:c1:
         6d:bb:fe:45:39:7d:7a:84:d6:91:8c:ff:e0:49:46:e5:cb:b3:
         63:eb:23:d2:9b:0f:f6:de:93:8a:a2:cb:d8:41:02:38:04:0f:
         cd:73:52:2d:c5:eb:78:9b:d8:ff:c0:08:c8:b6:b0:22:95:b7:
         a5:c2:1a:27:16:6f:b7:dc:78:76:7c:cc:fa:7b:4e:aa:93:a4:
         cf:78:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org