Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          bmYhcS3reePzah/4MRvI/lBNEHDGDREh84WQR+mq024=
Subject key identifier:   1C:0B:11:A8:81:EA:11:55:D3:17:FB:FA:BF:49:3F:7B:17:3C:09:A2
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       5282B47476014048F5B2A12E74594BF010C1F1B7
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:22 +0000
ROA not before:           Wed 14 Aug 2024 19:51:22 +0000
ROA not after:            Wed 13 Aug 2025 19:56:22 +0000
asID:                     262977
IP address blocks:        177.190.82.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:82:b4:74:76:01:40:48:f5:b2:a1:2e:74:59:4b:f0:10:c1:f1:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:22 2024 GMT
            Not After : Aug 13 19:56:22 2025 GMT
        Subject: CN=1C0B11A881EA1155D317FBFABF493F7B173C09A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:16:25:9c:a3:af:6b:a0:29:fd:76:fd:4d:
                    82:55:e7:01:23:8e:52:1d:d1:01:89:3d:f4:3d:59:
                    ce:85:5c:14:8b:af:84:14:34:5a:09:2e:0a:57:72:
                    22:7b:2f:76:0f:e3:20:33:92:49:8d:d7:57:c3:a6:
                    75:65:a1:2b:c8:5b:ee:66:d5:13:f6:e6:d8:e8:7b:
                    61:8c:ff:03:8e:62:64:7f:14:2a:59:84:d9:f4:cc:
                    f7:93:f5:35:34:2d:53:3b:25:69:b5:01:31:4f:c7:
                    e7:fe:9f:bd:02:3e:01:10:f0:eb:5a:c0:2c:a5:e2:
                    62:90:7a:7e:08:df:c9:38:1b:f7:58:aa:e0:b2:74:
                    92:cb:45:e2:da:06:59:a8:38:5b:f6:43:d6:c2:89:
                    60:f3:79:7e:80:a3:7a:38:c2:dd:ce:87:be:8f:46:
                    ca:15:51:36:ce:3b:0a:b0:bf:6d:37:1a:c7:7b:64:
                    46:90:10:90:ec:34:ec:0b:4e:23:ab:67:f4:93:fc:
                    aa:29:c5:28:74:ee:91:e2:5f:a0:05:eb:8d:62:60:
                    9c:a3:8e:04:15:a1:78:ba:60:11:ac:5b:3a:c2:60:
                    c7:67:ef:64:b1:6f:1d:5c:13:7d:6b:7e:c2:4e:c5:
                    4a:f1:7a:56:64:00:2f:4e:fa:95:32:29:6f:ff:a2:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0B:11:A8:81:EA:11:55:D3:17:FB:FA:BF:49:3F:7B:17:3C:09:A2
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38322e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:72:d0:de:4b:15:e4:71:ea:40:e7:ab:9e:22:65:59:02:75:
         2a:4c:7c:1d:88:ae:c9:58:66:23:2c:6d:a5:f2:89:2d:78:27:
         52:ef:52:73:57:9e:6c:d6:73:e7:68:b7:37:5a:8a:9b:d1:e1:
         8b:23:d1:b9:cf:fc:40:8e:7d:2e:b3:70:51:05:a2:9f:71:01:
         b7:a3:0c:a6:26:e8:c7:32:1a:66:d8:5f:05:71:74:35:50:44:
         ae:c0:de:02:9e:b6:d0:d4:2d:af:8b:00:0c:11:32:ff:18:cb:
         66:5f:91:f3:83:6a:fa:8a:f0:12:44:9e:da:43:84:97:e9:03:
         54:3b:93:cb:08:dc:bf:5d:64:71:83:18:6c:51:46:96:d3:ac:
         42:28:0c:db:9a:61:65:eb:93:ce:47:b7:09:4e:73:ba:13:bd:
         f9:3c:93:73:11:a4:26:af:45:9d:45:92:ba:48:e5:5a:8c:f3:
         65:4b:3e:48:1b:b8:28:99:bd:31:38:c5:d6:15:8f:32:ba:ff:
         6d:48:cd:85:f2:20:8c:f7:b5:8a:68:22:ae:21:7c:0d:b7:7e:
         4d:cd:77:ac:29:79:c8:5a:00:de:1b:8b:00:af:64:74:dc:6a:
         d9:fb:cd:5b:7a:6d:5b:f3:05:71:94:8d:84:be:98:f7:e4:12:
         e5:6a:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:22:52 2024 by rpki-client on console-fra.rpki-client.org