Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          j08lCl6aTL6q0v9VD0C0hmMF2raPjsvxI+vZd2KEjoE=
Subject key identifier:   59:8B:CD:7A:31:4D:3E:B7:63:9C:C8:7E:B0:E8:29:C9:CF:72:60:14
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       7455C496C7149D566766303A91C97F17909F86A4
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:25 +0000
ROA not before:           Wed 14 Aug 2024 19:51:25 +0000
ROA not after:            Wed 13 Aug 2025 19:56:25 +0000
asID:                     262977
IP address blocks:        177.190.88.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:55:c4:96:c7:14:9d:56:67:66:30:3a:91:c9:7f:17:90:9f:86:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:25 2024 GMT
            Not After : Aug 13 19:56:25 2025 GMT
        Subject: CN=598BCD7A314D3EB7639CC87EB0E829C9CF726014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1c:2a:89:87:9d:0f:5f:d7:15:a0:2a:8c:84:
                    ab:e6:43:55:19:bc:ed:ea:1a:f4:54:b6:0d:34:d6:
                    56:df:66:f6:d8:e6:41:2b:73:8e:5c:c2:b3:72:65:
                    97:dd:53:79:41:f8:1a:fc:ce:f3:ba:d2:89:5a:33:
                    ce:cd:28:00:2c:87:5a:a3:75:d4:7a:7d:e1:b9:fc:
                    e6:24:3e:01:be:a7:1b:a4:b4:55:34:4b:57:34:a0:
                    5d:ad:98:cb:c8:af:e1:f1:78:0a:37:09:de:51:41:
                    ba:a9:79:e2:4d:78:e0:54:b2:44:06:c2:b8:2f:55:
                    31:70:82:59:1a:3e:2a:f6:7e:6d:03:74:f0:38:aa:
                    fd:85:b9:05:04:68:05:fe:63:59:3e:96:cd:51:36:
                    ab:c1:f7:6d:9c:b0:e9:bd:80:38:19:fc:a5:25:e1:
                    a0:89:b3:3b:83:fb:72:2c:ac:3e:e8:e1:d1:da:9b:
                    50:f1:c2:ea:4e:11:8f:ce:67:e0:88:71:7a:55:d3:
                    ad:e9:f9:69:06:c3:63:39:5c:1b:06:cb:47:67:d1:
                    72:6d:6b:2a:e8:64:6e:28:7c:5a:38:77:c7:f2:69:
                    c3:c0:0a:ac:15:8c:a7:f6:dd:d2:57:08:09:14:3b:
                    f5:3b:7e:a5:ff:4d:89:d8:95:61:0f:d0:58:78:f2:
                    5b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:CD:7A:31:4D:3E:B7:63:9C:C8:7E:B0:E8:29:C9:CF:72:60:14
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e38382e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:3d:ee:fc:9a:e6:fb:ff:11:31:e6:45:00:65:44:c8:d0:fc:
         7a:51:19:be:3a:ac:6b:5a:87:45:bd:87:a8:23:cd:a5:6a:af:
         7e:d1:2c:92:19:e8:36:41:a8:e7:f8:6e:a6:6c:e3:e9:98:75:
         44:79:b8:c3:0f:9c:b7:52:9c:22:8b:c9:29:3f:9e:13:e2:4b:
         fb:f8:c2:36:c4:6e:68:b8:ff:98:2c:ab:64:6a:2b:95:7b:25:
         d8:f4:46:67:73:d1:fe:a7:2d:53:e6:aa:17:19:2e:e8:7d:26:
         ca:05:6b:7a:f9:2c:25:4c:1c:90:51:88:9b:77:05:fe:c6:46:
         e3:80:62:52:ca:01:14:b3:70:d5:2b:04:f7:48:b8:92:c4:2e:
         2b:f7:1c:d1:26:c6:92:8b:1d:0a:d4:65:1f:79:71:fd:99:95:
         78:f7:ed:7e:63:e8:a4:c4:7b:4e:91:ea:f5:be:ab:66:31:9c:
         25:cf:9e:7b:18:0d:71:66:ec:2d:b2:00:3c:aa:34:8f:4d:fd:
         95:ad:85:ef:57:2f:5d:7c:02:c9:db:f1:9f:e9:86:a9:51:26:
         f5:06:af:1f:de:ff:be:14:87:d6:1a:75:b3:d9:fb:23:f2:ea:
         3a:0b:de:77:5f:9d:7c:3d:0e:5a:28:85:6e:38:56:f7:48:83:
         3f:d0:2c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org