Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          bGQje29ZmN+GIh4rMcv2KrHp2nw6Exe5jOlVyK8xzdA=
Subject key identifier:   AA:1C:79:9E:7D:C7:47:5D:98:CD:C2:B5:61:4C:75:74:AE:72:E2:94
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       0213FAC6845B0B2B12D2F106AC392CD66E2815B0
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:25 +0000
ROA not before:           Wed 14 Aug 2024 19:51:25 +0000
ROA not after:            Wed 13 Aug 2025 19:56:25 +0000
asID:                     262977
IP address blocks:        177.190.90.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:13:fa:c6:84:5b:0b:2b:12:d2:f1:06:ac:39:2c:d6:6e:28:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:25 2024 GMT
            Not After : Aug 13 19:56:25 2025 GMT
        Subject: CN=AA1C799E7DC7475D98CDC2B5614C7574AE72E294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0a:be:7a:51:98:19:84:18:a1:48:52:53:8c:
                    6c:41:bd:a4:7b:fd:55:59:75:0c:73:a3:4b:e6:5a:
                    8a:e7:e3:ad:ed:13:6a:ea:8e:ac:be:c2:11:74:46:
                    4d:5d:5b:c2:2d:b6:0d:e9:09:db:7c:cf:5e:c7:9f:
                    26:6c:bb:67:44:5f:52:8b:4f:00:ab:5b:1a:8a:e2:
                    7d:28:e2:c2:10:c9:2a:b5:74:e1:c8:03:1f:c2:9e:
                    4d:94:f5:b7:85:62:38:d3:97:76:f2:ad:91:2d:49:
                    d4:5f:57:63:0a:aa:e6:3c:bb:ed:b1:78:ed:2b:d9:
                    58:3a:7d:20:89:ba:90:b7:07:3d:34:73:a8:19:b9:
                    73:7f:39:fc:6a:5f:18:30:9e:56:49:26:97:ba:bb:
                    b2:3c:22:5e:1d:28:b6:9f:c2:3a:d8:f0:dd:01:a7:
                    58:13:2e:93:9d:71:d9:1d:c1:41:dc:94:8e:a9:f5:
                    7b:74:ef:3c:d4:bb:00:a7:0b:03:1c:ec:2d:8b:7d:
                    3b:57:31:2c:ea:74:77:2c:d4:94:3f:a1:4a:de:16:
                    96:ae:bd:5d:7c:e8:82:2a:7e:9e:89:b6:0c:9e:ea:
                    6d:60:a9:f8:d6:39:18:c2:14:47:55:8a:d9:19:37:
                    b8:06:e9:87:8d:46:06:c2:6e:70:37:ce:21:0f:69:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1C:79:9E:7D:C7:47:5D:98:CD:C2:B5:61:4C:75:74:AE:72:E2:94
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:56:f9:b4:58:5e:8c:2e:80:04:45:89:b0:28:9f:9b:09:
         12:aa:54:e5:13:dc:66:c6:c2:22:73:63:ea:12:10:54:d5:ac:
         98:bd:ba:16:bb:3d:5d:24:b6:7f:57:bd:0d:cf:ba:68:b2:1b:
         8d:9f:f3:2d:1e:ae:28:9e:29:a1:66:73:c9:c4:e2:d3:21:06:
         ec:ca:b1:c7:1c:d4:cc:db:84:fa:da:97:18:4e:39:3d:08:df:
         b0:65:23:a5:da:5b:61:3c:af:cd:52:95:f5:22:75:4c:d0:f7:
         5f:5f:2a:92:c3:67:a2:67:94:f7:81:c5:2b:0a:83:e7:f3:18:
         0a:1f:5b:56:3e:06:fb:ff:84:f4:08:77:33:9b:f8:8b:3e:22:
         f8:99:2e:82:ec:8e:7e:d3:a9:e9:86:1c:5c:10:d5:ea:1f:e1:
         38:d3:49:8c:7e:b0:61:f9:9f:99:9c:af:24:67:2f:75:80:aa:
         f8:5c:72:3d:70:bc:82:9e:7d:0b:c7:ff:a0:d9:85:e0:5f:0c:
         49:45:75:aa:e3:db:23:8c:20:9d:ec:75:f4:0c:ee:46:0a:76:
         1f:28:35:d3:71:15:70:5c:e6:e4:ee:ec:3f:c3:e9:35:4c:85:
         e7:12:2f:1c:3f:13:cd:7a:d7:de:bb:6f:3a:e7:7b:d1:05:65:
         fe:f7:63:c0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUAhP6xoRbCysS0vEGrDks1m4oFbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA4MTQxOTUxMjVaFw0yNTA4MTMxOTU2MjVaMDMxMTAvBgNV
BAMTKEFBMUM3OTlFN0RDNzQ3NUQ5OENEQzJCNTYxNEM3NTc0QUU3MkUyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCr56UZgZhBihSFJTjGxBvaR7
/VVZdQxzo0vmWorn463tE2rqjqy+whF0Rk1dW8Ittg3pCdt8z17HnyZsu2dEX1KL
TwCrWxqK4n0o4sIQySq1dOHIAx/Cnk2U9beFYjjTl3byrZEtSdRfV2MKquY8u+2x
eO0r2Vg6fSCJupC3Bz00c6gZuXN/OfxqXxgwnlZJJpe6u7I8Il4dKLafwjrY8N0B
p1gTLpOdcdkdwUHclI6p9Xt07zzUuwCnCwMc7C2LfTtXMSzqdHcs1JQ/oUreFpau
vV186IIqfp6Jtgye6m1gqfjWORjCFEdVitkZN7gG6YeNRgbCbnA3ziEPaZOBAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUqhx5nn3HR12YzcK1YUx1dK5y4pQwHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzEz
NzM3MmUzMTM5MzAyZTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxvlowDQYJKoZIhvcNAQELBQADggEBAHyLVvm0WF6M
LoAERYmwKJ+bCRKqVOUT3GbGwiJzY+oSEFTVrJi9uha7PV0ktn9XvQ3PumiyG42f
8y0eriieKaFmc8nE4tMhBuzKsccc1MzbhPralxhOOT0I37BlI6XaW2E8r81SlfUi
dUzQ919fKpLDZ6JnlPeBxSsKg+fzGAofW1Y+Bvv/hPQIdzOb+Is+IviZLoLsjn7T
qemGHFwQ1eof4TjTSYx+sGH5n5mcryRnL3WAqvhccj1wvIKefQvH/6DZheBfDElF
darj2yOMIJ3sdfQM7kYKdh8oNdNxFXBc5uTu7D/D6TVMhecSLxw/E8161967bzrn
e9EFZf73Y8A=
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org