Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32302d3230203d3e20323632393737.roa
File:                     3137372e3139302e38302e302f32302d3230203d3e20323632393737.roa (raw, json)
Hash identifier:          gkmQ7Thr4CcQmRWf2yMlKInaUuB9iBUCCojK6CiINEI=
Subject key identifier:   53:18:81:53:1E:B4:80:D6:D8:84:46:8F:60:63:83:83:F8:D4:AC:68
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       0617EBF343D08EE7926FD2F17067CD95844AEE31
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32302d3230203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:26 +0000
ROA not before:           Wed 14 Aug 2024 19:51:26 +0000
ROA not after:            Wed 13 Aug 2025 19:56:26 +0000
asID:                     262977
IP address blocks:        177.190.80.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:17:eb:f3:43:d0:8e:e7:92:6f:d2:f1:70:67:cd:95:84:4a:ee:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:26 2024 GMT
            Not After : Aug 13 19:56:26 2025 GMT
        Subject: CN=531881531EB480D6D884468F60638383F8D4AC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:f8:bd:44:5c:03:55:84:96:64:cc:40:8f:
                    05:35:b3:f8:a3:ad:bc:ee:67:e1:60:c7:a4:e0:2f:
                    e6:22:c0:76:c5:50:23:c7:08:ae:9d:e0:99:8e:32:
                    e9:38:0d:03:f2:55:6e:70:81:c6:6a:7c:81:88:19:
                    3a:b1:9a:84:d3:9b:73:c4:58:7e:cf:ad:55:52:42:
                    ec:9b:64:09:71:30:c3:7e:d3:b7:9e:9b:35:65:7d:
                    fe:99:f3:10:89:6e:be:c2:f4:4c:c2:ef:3a:b0:fc:
                    95:2b:cb:76:ff:5f:31:3e:d5:00:ea:51:2e:b2:d7:
                    2d:0c:19:63:ed:f1:81:24:ea:16:76:da:ce:26:be:
                    92:58:b3:c1:16:ff:4e:90:e6:8e:7c:d0:ed:da:6a:
                    f1:45:9e:94:22:f4:83:9f:ed:7a:d7:ac:d2:77:64:
                    db:21:34:34:08:13:0d:c8:42:e6:a1:ae:4e:50:3e:
                    41:e8:5a:44:02:a4:b3:b9:0b:d5:d7:c7:48:6e:ff:
                    b8:6d:b0:56:ac:70:c2:f9:d1:57:c7:da:f6:66:bf:
                    4c:3a:03:30:4b:60:aa:ec:33:2a:3b:50:05:18:18:
                    2b:59:32:d5:00:45:f2:91:bd:91:c9:32:0e:fa:ec:
                    0a:6e:12:23:d5:8f:e1:b6:e4:2e:97:e8:af:1a:8d:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:81:53:1E:B4:80:D6:D8:84:46:8F:60:63:83:83:F8:D4:AC:68
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38302e302f32302d3230203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:26:26:2e:95:50:db:3f:9b:41:6b:e0:75:16:48:83:62:27:
         cd:a5:3a:2b:e7:af:e7:39:69:3d:c8:c4:2a:f8:26:b3:af:d0:
         14:2f:9a:34:7f:28:5d:b8:c1:ab:9c:41:c6:14:9e:fd:1c:f7:
         cc:e4:02:f9:c2:22:28:c6:ba:e4:dd:b4:ef:48:89:95:21:9e:
         3e:1f:82:79:39:87:1b:f9:be:1e:0d:42:82:bc:6f:a9:b9:be:
         6f:e0:57:db:ef:c7:3d:59:68:2c:1f:e5:25:3c:04:ee:96:08:
         72:c6:97:70:ff:4b:db:86:44:c2:c9:c2:92:ab:2c:77:0b:25:
         30:b3:5f:78:1d:b7:61:e4:82:ee:a4:33:d3:47:a0:2c:ab:44:
         21:83:20:c9:50:81:ee:ea:ea:29:57:5f:b2:05:ce:2c:01:fd:
         3c:96:3b:05:24:0b:91:5c:ff:7b:c7:13:59:bb:fe:1a:35:0a:
         d4:40:df:0e:59:34:35:07:fb:04:ff:34:79:e5:f6:94:49:4d:
         2b:65:c9:75:5b:33:fb:1f:b8:85:89:8b:76:e4:6d:76:81:5e:
         ee:e3:d3:09:14:e0:3d:59:91:d8:00:32:45:01:d7:5b:f8:3f:
         d3:49:08:3c:aa:71:4a:33:c3:96:56:50:69:fb:99:eb:bd:35:
         1e:1b:b8:36
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUBhfr80PQjueSb9LxcGfNlYRK7jEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA4MTQxOTUxMjZaFw0yNTA4MTMxOTU2MjZaMDMxMTAvBgNV
BAMTKDUzMTg4MTUzMUVCNDgwRDZEODg0NDY4RjYwNjM4MzgzRjhENEFDNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYC/i9RFwDVYSWZMxAjwU1s/ij
rbzuZ+Fgx6TgL+YiwHbFUCPHCK6d4JmOMuk4DQPyVW5wgcZqfIGIGTqxmoTTm3PE
WH7PrVVSQuybZAlxMMN+07eemzVlff6Z8xCJbr7C9EzC7zqw/JUry3b/XzE+1QDq
US6y1y0MGWPt8YEk6hZ22s4mvpJYs8EW/06Q5o580O3aavFFnpQi9IOf7XrXrNJ3
ZNshNDQIEw3IQuahrk5QPkHoWkQCpLO5C9XXx0hu/7htsFascML50VfH2vZmv0w6
AzBLYKrsMyo7UAUYGCtZMtUARfKRvZHJMg767ApuEiPVj+G25C6X6K8ajWXTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUxiBUx60gNbYhEaPYGODg/jUrGgwHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzEz
NzM3MmUzMTM5MzAyZTM4MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBASxvlAwDQYJKoZIhvcNAQELBQADggEBADUmJi6VUNs/
m0Fr4HUWSINiJ82lOivnr+c5aT3IxCr4JrOv0BQvmjR/KF24waucQcYUnv0c98zk
AvnCIijGuuTdtO9IiZUhnj4fgnk5hxv5vh4NQoK8b6m5vm/gV9vvxz1ZaCwf5SU8
BO6WCHLGl3D/S9uGRMLJwpKrLHcLJTCzX3gdt2Hkgu6kM9NHoCyrRCGDIMlQge7q
6ilXX7IFziwB/TyWOwUkC5Fc/3vHE1m7/ho1CtRA3w5ZNDUH+wT/NHnl9pRJTStl
yXVbM/sfuIWJi3bkbXaBXu7j0wkU4D1ZkdgAMkUB11v4P9NJCDyqcUozw5ZWUGn7
meu9NR4buDY=
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org