Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38362e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          D4lAIRez3Kdzugr7+r92lYqch5gYMm14kS1LS4MfnHM=
Subject key identifier:   37:CA:2B:A7:99:06:44:92:65:54:02:55:0D:D3:2A:21:54:5D:D3:DB
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       20C5F8C9E99583FFB4B0930BDCE689030E872102
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:24 +0000
ROA not before:           Wed 14 Aug 2024 19:51:24 +0000
ROA not after:            Wed 13 Aug 2025 19:56:24 +0000
asID:                     262977
IP address blocks:        177.190.86.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c5:f8:c9:e9:95:83:ff:b4:b0:93:0b:dc:e6:89:03:0e:87:21:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:24 2024 GMT
            Not After : Aug 13 19:56:24 2025 GMT
        Subject: CN=37CA2BA799064492655402550DD32A21545DD3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c5:16:d6:ac:fc:1d:eb:29:f7:b0:b8:3f:c3:
                    dd:61:3b:c4:67:34:08:43:0d:0e:cc:2b:1b:e1:3b:
                    3d:34:64:e1:00:16:60:59:6c:79:ee:ba:e4:ee:4d:
                    f1:4e:d6:13:46:08:97:e6:c9:72:ef:b1:0d:0d:57:
                    59:79:0e:94:05:1f:a1:a6:48:bf:cf:23:f3:96:4a:
                    e5:6b:04:4d:36:f4:ec:23:34:f1:5b:c4:f7:37:97:
                    c7:72:25:54:bb:83:38:e5:29:8f:b5:73:26:b2:2f:
                    ca:e3:ae:e1:12:ae:a3:0a:1d:df:8e:0f:2d:f5:09:
                    32:88:11:a5:ae:66:d3:a8:fb:db:51:8a:40:93:e9:
                    10:59:34:be:8e:18:87:5a:9d:7f:e1:42:9d:58:08:
                    32:9b:9e:ba:19:dd:dc:d9:73:b9:8c:48:40:43:1e:
                    33:5a:3d:e9:74:d0:84:10:53:4a:ea:02:1e:c5:8e:
                    a9:c3:be:39:07:80:90:d6:98:53:a7:3a:e5:20:be:
                    58:89:0d:6d:cc:7e:b4:0f:87:f9:18:6d:53:2f:bf:
                    fc:d1:23:8c:53:bb:0a:74:28:2e:79:a0:f7:cd:36:
                    04:78:cc:a6:e4:be:9d:6b:db:9d:7d:20:59:bb:ae:
                    49:5a:87:18:63:d2:80:de:be:1d:33:9b:eb:77:5c:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:2B:A7:99:06:44:92:65:54:02:55:0D:D3:2A:21:54:5D:D3:DB
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38362e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:67:16:02:15:7c:b6:e2:82:dc:3e:c2:3c:97:83:9e:4f:34:
         ec:d4:aa:ed:fd:b2:11:76:3e:02:70:67:e5:4f:ed:56:73:91:
         e4:36:e8:46:31:3f:8d:c7:c0:d3:1e:af:ab:79:99:c3:9c:eb:
         d1:06:e1:0f:6b:b6:d3:3c:78:94:85:11:f5:fa:d7:d7:bd:0c:
         d8:71:42:60:25:11:b2:1d:51:e2:f2:3b:00:d4:87:e1:1b:61:
         fb:c6:37:cf:e7:ed:b5:62:f7:a9:f4:83:cd:4e:1b:82:2d:49:
         4b:50:96:81:c9:21:8b:c5:8d:9b:b1:39:32:2d:0c:de:80:b1:
         1d:47:76:57:8b:df:84:61:81:58:6c:43:3f:30:fa:00:01:79:
         f1:b4:d4:41:2b:30:eb:8d:10:3b:57:f4:c4:ce:af:d2:86:54:
         cc:a7:65:5b:35:b6:ae:ae:40:2b:a5:04:0f:b0:d2:59:e8:a6:
         fe:78:e7:ea:59:3d:3f:95:d7:95:28:c2:25:97:7f:1c:3f:4e:
         c2:41:1a:ec:96:a3:72:e9:0a:51:2c:9d:ee:9f:64:0c:22:aa:
         58:c6:db:40:17:14:80:ab:1c:7f:c5:c5:9f:6b:22:f3:3e:fb:
         ab:2d:9a:bc:05:6f:e4:00:01:16:6c:0d:91:61:d5:28:c8:2b:
         11:65:31:64
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUIMX4yemVg/+0sJML3OaJAw6HIQIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA4MTQxOTUxMjRaFw0yNTA4MTMxOTU2MjRaMDMxMTAvBgNV
BAMTKDM3Q0EyQkE3OTkwNjQ0OTI2NTU0MDI1NTBERDMyQTIxNTQ1REQzREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxRbWrPwd6yn3sLg/w91hO8Rn
NAhDDQ7MKxvhOz00ZOEAFmBZbHnuuuTuTfFO1hNGCJfmyXLvsQ0NV1l5DpQFH6Gm
SL/PI/OWSuVrBE029OwjNPFbxPc3l8dyJVS7gzjlKY+1cyayL8rjruESrqMKHd+O
Dy31CTKIEaWuZtOo+9tRikCT6RBZNL6OGIdanX/hQp1YCDKbnroZ3dzZc7mMSEBD
HjNaPel00IQQU0rqAh7FjqnDvjkHgJDWmFOnOuUgvliJDW3MfrQPh/kYbVMvv/zR
I4xTuwp0KC55oPfNNgR4zKbkvp1r2519IFm7rklahxhj0oDevh0zm+t3XM9tAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUN8orp5kGRJJlVAJVDdMqIVRd09swHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzEz
NzM3MmUzMTM5MzAyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxvlYwDQYJKoZIhvcNAQELBQADggEBADRnFgIVfLbi
gtw+wjyXg55PNOzUqu39shF2PgJwZ+VP7VZzkeQ26EYxP43HwNMer6t5mcOc69EG
4Q9rttM8eJSFEfX619e9DNhxQmAlEbIdUeLyOwDUh+EbYfvGN8/n7bVi96n0g81O
G4ItSUtQloHJIYvFjZuxOTItDN6AsR1HdleL34RhgVhsQz8w+gABefG01EErMOuN
EDtX9MTOr9KGVMynZVs1tq6uQCulBA+w0lnopv545+pZPT+V15UowiWXfxw/TsJB
GuyWo3LpClEsne6fZAwiqljG20AXFICrHH/FxZ9rIvM++6stmrwFb+QAARZsDZFh
1SjIKxFlMWQ=
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org