Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32322d3232203d3e203532353537.roa
File:                     3137372e38362e382e302f32322d3232203d3e203532353537.roa (raw, json)
Hash identifier:          kB3yFp+cumIK8xo1qZKXd88oA05jhMWOACGyQjW8K+0=
Subject key identifier:   F1:33:8B:B5:0F:A6:75:58:78:3F:B3:23:1D:2D:F2:CE:D5:94:CB:A9
Certificate issuer:       /CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
Certificate serial:       28E0AFAE23EF5881F114353D800B73F9B12A2D30
Authority key identifier: 31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32322d3232203d3e203532353537.roa
Signing time:             Mon 17 Jun 2024 14:59:15 +0000
ROA not before:           Mon 17 Jun 2024 14:54:15 +0000
ROA not after:            Mon 16 Jun 2025 14:59:15 +0000
asID:                     52557
IP address blocks:        177.86.8.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e0:af:ae:23:ef:58:81:f1:14:35:3d:80:0b:73:f9:b1:2a:2d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A34383E0EDF59913E3F81F7606FE38AE7264F0
        Validity
            Not Before: Jun 17 14:54:15 2024 GMT
            Not After : Jun 16 14:59:15 2025 GMT
        Subject: CN=F1338BB50FA67558783FB3231D2DF2CED594CBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:2c:7b:5e:65:51:a7:a0:10:53:08:11:34:
                    ea:b4:9f:33:fd:00:9c:c7:89:30:39:60:2a:78:53:
                    00:55:76:5c:95:7e:65:1d:9f:36:fe:2a:65:92:95:
                    00:ce:f8:8e:77:12:59:37:5c:88:85:af:23:ba:23:
                    57:90:9b:1c:28:ba:42:cc:90:58:b4:95:0e:9a:39:
                    bd:b7:f5:f4:db:34:4b:36:a7:9e:e6:1d:33:22:24:
                    9f:ef:f5:51:82:c4:c8:95:70:6b:a1:07:a8:45:4a:
                    3e:7c:e0:0c:12:76:57:15:5f:ee:97:08:f5:d7:5b:
                    58:1a:28:67:7a:44:18:be:da:9a:c8:e1:f5:7e:a9:
                    73:a8:aa:2d:e1:00:e5:e6:01:7d:47:df:56:0c:91:
                    9e:31:ea:fe:a5:41:f3:f3:b9:12:31:a9:19:5f:41:
                    8f:1d:dd:c5:ac:e2:e7:24:c2:05:46:e7:7b:19:68:
                    bf:96:8e:a0:0c:4a:06:e0:25:f1:72:c6:41:67:4f:
                    4d:43:86:f6:6b:7b:70:af:eb:12:0e:25:58:1e:90:
                    34:f7:96:55:3e:5b:13:60:3e:c1:4a:ed:e1:76:ff:
                    2b:8b:08:80:e8:83:27:b3:9c:96:33:81:55:05:d7:
                    c8:71:71:69:f6:86:74:99:c5:96:12:8c:05:c4:12:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:33:8B:B5:0F:A6:75:58:78:3F:B3:23:1D:2D:F2:CE:D5:94:CB:A9
            X509v3 Authority Key Identifier:
                keyid:31:A3:43:83:E0:ED:F5:99:13:E3:F8:1F:76:06:FE:38:AE:72:64:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/31A34383E0EDF59913E3F81F7606FE38AE7264F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A34383E0EDF59913E3F81F7606FE38AE7264F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99K61sk5S5A51EFekz3bHcNh9fUdmDfxA89kjkzPDWLq/0/3137372e38362e382e302f32322d3232203d3e203532353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:82:62:9f:1e:42:c5:a6:5c:ce:fb:7e:5f:25:bf:cb:e4:c1:
         1d:b2:ad:18:f7:56:67:8a:24:f6:5a:ed:e7:09:07:95:4c:5b:
         7e:a9:79:14:ac:17:0d:f3:a0:32:c2:76:da:68:a1:7e:3a:fb:
         cc:d5:8c:f8:3d:d2:c9:29:b8:dc:38:75:97:70:a5:e2:3e:fb:
         12:b8:f0:13:8d:86:82:aa:6d:f0:5b:8e:23:32:a0:37:2f:61:
         ab:c0:49:2e:4a:fe:da:97:8c:a8:94:39:37:9f:84:46:5e:7e:
         1c:da:5c:e1:e6:7b:c2:19:94:fa:43:aa:ad:cb:8b:54:82:57:
         70:ec:53:2b:7a:f6:d4:1d:1a:e0:32:ab:4e:f7:49:53:0b:95:
         0e:75:b2:93:63:da:34:3e:1a:cd:e3:9a:1d:27:ee:b4:90:17:
         23:38:9d:92:34:82:af:06:1f:91:f1:0d:50:ef:5b:5a:13:03:
         ca:2b:06:6f:3d:23:d5:ea:81:74:c2:5b:5d:ed:2c:43:e7:05:
         1b:64:ca:45:87:d3:5b:e8:6c:51:79:e0:a3:de:04:13:b6:57:
         00:c5:e1:8e:9e:bc:1e:0a:06:d3:5d:a4:94:e0:dd:7f:35:01:
         10:11:83:64:c9:c6:57:92:cc:f9:55:bc:d5:ef:53:ef:16:40:
         1b:47:a8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 13:04:10 2024 by rpki-client on console-ams.rpki-client.org