Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
File:                     3137372e38372e31362e302f32312d3234203d3e203533313731.roa (raw, json)
Hash identifier:          TQRfGMPbnp7ph8xxwIz1xyaStXHxSCQlbfB3qq9ez8A=
Subject key identifier:   23:14:F2:D8:28:B8:F9:1F:D3:A0:7C:DD:79:66:1A:E6:14:B4:66:FE
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       039AC3275B18ADF27339AB54922A46555B5EF358
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa
Signing time:             Thu 31 Oct 2024 16:59:34 +0000
ROA not before:           Thu 31 Oct 2024 16:54:34 +0000
ROA not after:            Thu 30 Oct 2025 16:59:34 +0000
asID:                     53171
IP address blocks:        177.87.16.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:c3:27:5b:18:ad:f2:73:39:ab:54:92:2a:46:55:5b:5e:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 16:54:34 2024 GMT
            Not After : Oct 30 16:59:34 2025 GMT
        Subject: CN=2314F2D828B8F91FD3A07CDD79661AE614B466FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:9b:c2:3d:31:f2:c5:e3:7e:dd:09:02:03:
                    ad:04:73:13:a1:02:cc:08:fe:cb:8c:84:a1:88:a0:
                    7b:d7:5f:1b:19:36:22:98:93:9e:92:5a:dc:e6:a9:
                    b7:61:53:7a:a7:74:59:c7:78:7b:35:02:3f:d4:83:
                    e4:e1:15:35:a9:75:b4:3b:81:a7:9d:92:f6:00:71:
                    ef:96:89:e9:f3:e5:2c:69:00:f4:a5:aa:5f:2c:e3:
                    3b:56:7a:3f:77:1d:33:93:da:ae:b6:91:97:c1:b2:
                    53:d2:0b:74:46:6b:2e:81:c5:ac:4c:2d:e2:d4:95:
                    6f:1b:b1:ec:20:ba:5c:1d:17:3a:7a:94:60:e7:75:
                    a5:9a:f8:ed:02:71:57:16:20:96:52:0c:d9:7f:6e:
                    60:dc:90:7e:e5:0a:97:81:d9:1a:09:62:94:1f:fb:
                    c6:24:9d:8d:af:14:06:4d:06:a1:96:da:3e:88:b4:
                    10:bc:b0:bc:56:55:b2:38:c5:e4:df:d9:e5:73:43:
                    68:2b:dc:5b:75:82:7f:fd:d3:a8:7f:78:82:6c:c0:
                    0b:e5:c4:a7:ca:e5:7b:1b:b1:8a:33:ea:13:c3:c5:
                    a0:8a:e4:01:ce:3e:62:3a:f3:f7:9e:25:87:77:34:
                    93:b2:49:75:39:da:b9:65:13:ea:dd:42:8a:c6:e5:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:F2:D8:28:B8:F9:1F:D3:A0:7C:DD:79:66:1A:E6:14:B4:66:FE
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e38372e31362e302f32312d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:ae:a7:29:93:f9:43:bc:76:d4:23:d8:58:18:23:e9:b5:93:
         c8:05:5f:19:13:e5:6e:15:e5:2d:b2:c3:2a:4b:3f:7d:ad:3c:
         b6:ff:39:d4:14:8a:1d:2f:4a:6e:da:24:6a:ae:52:6d:c3:cf:
         2a:d9:33:73:ae:36:fb:29:77:7d:5a:1a:8b:ed:b6:d8:43:24:
         35:af:d6:5c:3e:7b:c5:37:2f:62:7b:9e:ae:cd:ab:50:93:16:
         08:1c:f4:a5:de:b6:ba:d9:33:c7:b8:ff:e6:57:c9:ba:8e:91:
         45:09:f4:67:3b:30:7d:d9:85:6a:a9:b4:cc:f6:1f:c3:66:f3:
         91:52:36:ec:9e:0b:60:73:90:e9:db:c8:52:c6:f8:c3:f4:4b:
         03:a9:0b:55:0c:2d:d0:01:e7:89:04:14:28:fd:3e:68:38:ad:
         d3:ea:3e:f2:61:0b:58:48:7f:51:db:66:80:86:72:b4:f8:0d:
         e9:36:24:fa:7d:98:e1:e1:3b:31:88:5b:a2:85:54:8b:2e:aa:
         c6:b7:6c:c3:08:87:0a:80:06:84:9a:0e:a2:68:81:72:0c:6f:
         7a:16:5e:79:79:ec:3e:24:fc:25:ab:4d:90:96:9b:42:11:df:
         6c:ff:d6:c7:bc:9a:62:49:7d:24:89:ea:ac:69:91:e1:5e:70:
         34:39:4e:d9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUA5rDJ1sYrfJzOatUkipGVVte81gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNjU0MzRaFw0yNTEwMzAxNjU5MzRaMDMxMTAvBgNV
BAMTKDIzMTRGMkQ4MjhCOEY5MUZEM0EwN0NERDc5NjYxQUU2MTRCNDY2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEu5vCPTHyxeN+3QkCA60EcxOh
AswI/suMhKGIoHvXXxsZNiKYk56SWtzmqbdhU3qndFnHeHs1Aj/Ug+ThFTWpdbQ7
gaedkvYAce+Wienz5SxpAPSlql8s4ztWej93HTOT2q62kZfBslPSC3RGay6BxaxM
LeLUlW8bsewgulwdFzp6lGDndaWa+O0CcVcWIJZSDNl/bmDckH7lCpeB2RoJYpQf
+8YknY2vFAZNBqGW2j6ItBC8sLxWVbI4xeTf2eVzQ2gr3Ft1gn/906h/eIJswAvl
xKfK5XsbsYoz6hPDxaCK5AHOPmI68/eeJYd3NJOySXU52rllE+rdQorG5SfdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUIxTy2Ci4+R/ToHzdeWYa5hS0Zv4wHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzNzM3MmUzODM3MmUzMTM2MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMzMx
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FXEDANBgkqhkiG9w0BAQsFAAOCAQEAga6nKZP5Q7x2
1CPYWBgj6bWTyAVfGRPlbhXlLbLDKks/fa08tv851BSKHS9Kbtokaq5SbcPPKtkz
c642+yl3fVoai+222EMkNa/WXD57xTcvYnuers2rUJMWCBz0pd62utkzx7j/5lfJ
uo6RRQn0ZzswfdmFaqm0zPYfw2bzkVI27J4LYHOQ6dvIUsb4w/RLA6kLVQwt0AHn
iQQUKP0+aDit0+o+8mELWEh/UdtmgIZytPgN6TYk+n2Y4eE7MYhbooVUiy6qxrds
wwiHCoAGhJoOomiBcgxvehZeeXnsPiT8JatNkJabQhHfbP/Wx7yaYkl9JInqrGmR
4V5wNDlO2Q==
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org