Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
File:                     3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          RkTij3Tbm7V1zj0CD8au6dgJPfb9iyfsG4KNK7D0Zeo=
Subject key identifier:   2A:3D:F7:18:62:9D:90:C1:15:5C:F5:11:5E:67:32:AD:44:4A:3D:7E
Certificate issuer:       /CN=2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2
Certificate serial:       757BBF5D460F4546D123F43B4384AEA809FA1546
Authority key identifier: 2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa
Signing time:             Tue 30 Jul 2024 18:51:27 +0000
ROA not before:           Tue 30 Jul 2024 18:46:27 +0000
ROA not after:            Tue 29 Jul 2025 18:51:27 +0000
asID:                     263444
IP address blocks:        177.91.160.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7b:bf:5d:46:0f:45:46:d1:23:f4:3b:43:84:ae:a8:09:fa:15:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2
        Validity
            Not Before: Jul 30 18:46:27 2024 GMT
            Not After : Jul 29 18:51:27 2025 GMT
        Subject: CN=2A3DF718629D90C1155CF5115E6732AD444A3D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:b5:ab:75:cd:ac:3a:4e:d2:84:30:b1:96:
                    75:0e:b6:73:d7:ca:dd:3f:e0:81:9f:47:c9:74:b6:
                    fc:c2:03:94:6f:e1:84:0a:64:04:ae:d8:58:33:d8:
                    f6:6f:07:cf:d0:55:ca:e9:ae:4a:74:79:58:a4:12:
                    56:51:c7:2d:ab:06:94:12:1d:04:bd:e2:19:6f:be:
                    b9:a4:28:d2:2d:83:d3:05:9b:46:ba:19:e8:e1:a2:
                    41:7e:b0:17:29:5e:25:21:be:86:6a:e0:2d:46:92:
                    d5:6d:9d:06:6d:61:2c:03:75:e3:63:e7:12:dc:e8:
                    8c:00:a7:9e:c1:19:2a:fa:a4:12:7a:ec:eb:89:49:
                    a3:49:7a:83:b8:51:98:ce:f4:00:fc:29:e3:87:6f:
                    b5:f0:61:f4:63:1a:49:f2:80:4f:b8:e8:d6:be:6f:
                    4f:2a:0f:a8:98:7b:6b:5c:82:a0:46:dd:66:df:08:
                    4c:06:1a:0b:fb:3d:34:86:bd:b3:a4:21:b3:cd:db:
                    80:24:5a:48:a3:cc:b7:de:be:23:b4:21:96:d3:4c:
                    85:de:f3:5f:70:a9:c6:83:19:7f:0a:9e:5a:28:a4:
                    86:ab:f9:bb:b4:2a:b9:06:b0:5e:9e:61:1c:ea:59:
                    1a:4a:67:2d:dd:15:4f:c9:52:41:06:34:26:43:c2:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3D:F7:18:62:9D:90:C1:15:5C:F5:11:5E:67:32:AD:44:4A:3D:7E
            X509v3 Authority Key Identifier:
                keyid:2B:B0:FB:0C:D2:AC:37:A1:5B:FE:78:54:A2:F3:4D:62:50:1A:97:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB0FB0CD2AC37A15BFE7854A2F34D62501A97C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9zM9rzhoLidYtwUsTGwwXLy2F3aFQeYFsDH49YLpkNuC/0/3137372e39312e3136302e302f32322d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:39:cf:ae:18:7a:c5:94:7d:65:4d:ae:2d:93:26:f1:27:1a:
         16:ec:ab:10:9f:67:dc:da:00:5d:52:5e:b2:7f:61:11:74:f9:
         90:45:0e:ff:d7:e1:4b:33:0e:ec:07:35:e5:ce:dd:9b:7e:94:
         f5:80:42:ec:7c:b1:d7:28:84:58:e5:e4:62:d1:ad:44:a9:08:
         91:40:e6:f0:da:13:ea:ad:89:d2:bf:ca:c3:fb:75:72:3d:7e:
         73:50:7a:b7:14:7a:7a:8d:e0:0f:54:dd:1a:55:d4:ee:25:ed:
         de:a2:9e:62:d3:0f:69:f0:7f:37:cd:79:77:dd:cb:f9:f5:c2:
         b8:99:59:88:55:cb:bf:70:cc:4d:58:99:18:2c:cc:86:5d:1f:
         4e:9d:54:56:c5:01:61:0a:0b:15:ef:0e:35:cb:67:2d:ed:67:
         6d:15:6b:e3:5b:98:7f:2e:04:77:d8:60:24:67:3a:7b:84:c5:
         20:4f:15:a3:be:ea:a8:97:b0:7c:2f:31:36:07:7e:10:cd:04:
         54:1a:f5:8a:7c:45:89:49:42:57:0d:fa:3a:93:d7:a0:4d:97:
         28:ce:8f:98:33:a6:01:52:c0:ab:de:0d:44:17:a3:48:21:94:
         2b:88:12:70:0a:f1:98:c2:0c:89:e8:49:09:a1:b8:cd:fa:f1:
         6d:8e:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 04:02:58 2024 by rpki-client on console-ams.rpki-client.org