Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e39302e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          N2trgBesoG0EEKauC3WTJwoV1J21b7DbES/Wbn2ZMq0=
Subject key identifier:   92:40:6C:6F:2A:5C:82:40:F3:04:AD:97:BD:2C:5E:11:54:17:9F:A5
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       099C9F18BB43217EB46A183CB6578D7F828B978A
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32342d3234203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:24 +0000
ROA not before:           Wed 14 Aug 2024 19:51:24 +0000
ROA not after:            Wed 13 Aug 2025 19:56:24 +0000
asID:                     262977
IP address blocks:        177.190.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9c:9f:18:bb:43:21:7e:b4:6a:18:3c:b6:57:8d:7f:82:8b:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:24 2024 GMT
            Not After : Aug 13 19:56:24 2025 GMT
        Subject: CN=92406C6F2A5C8240F304AD97BD2C5E1154179FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:d6:eb:e5:0f:02:32:f9:16:b7:f3:17:56:
                    5a:50:53:19:a6:46:3b:99:dc:94:77:45:74:79:4d:
                    cb:db:e5:0f:62:48:65:ca:52:f0:8e:89:4b:1b:6d:
                    57:26:b2:64:03:c2:e0:f2:89:8b:41:1d:b3:9d:f4:
                    55:4e:c9:9e:15:84:fa:cb:f9:85:92:92:0b:78:c2:
                    8b:7d:47:5c:d7:34:ea:db:41:0d:07:ea:ea:6e:12:
                    c8:f1:62:79:bb:18:e1:b2:b6:43:b4:f3:bd:fc:1f:
                    c2:e5:6d:cd:5f:43:43:f5:62:85:2b:e0:9f:1c:1d:
                    44:56:59:fd:20:27:a6:db:43:bf:68:9b:b9:be:5c:
                    d1:ab:5d:5c:c2:4f:43:42:03:3c:6a:da:2c:2e:dc:
                    8b:5c:7a:a9:17:dc:be:7e:89:49:6b:eb:6e:9b:ed:
                    ed:47:73:38:d0:e6:48:11:47:f2:27:b2:94:cc:6e:
                    b6:bf:82:ac:86:35:f9:60:7e:18:52:5f:77:b2:4c:
                    82:d7:bd:7f:e5:8e:1c:eb:2b:ad:28:71:31:84:f2:
                    e2:ba:8c:e7:ea:65:db:be:eb:10:41:fd:3e:f7:9c:
                    8a:91:b5:fc:c9:b6:72:e4:d4:81:39:c0:a8:1c:be:
                    d2:e6:e5:62:a9:68:78:ad:65:4f:bb:15:bc:bf:68:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:6C:6F:2A:5C:82:40:F3:04:AD:97:BD:2C:5E:11:54:17:9F:A5
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39302e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:05:57:76:8a:94:4b:70:bf:7c:3d:99:1b:c7:5c:a6:99:
         6f:d5:e8:16:04:9b:36:6d:08:cb:dd:f9:dc:9b:6f:be:ff:f1:
         68:23:b6:b0:b3:0b:75:ca:14:d7:c0:e1:4f:aa:1d:3c:6e:98:
         fc:05:fe:02:e3:45:97:46:dd:83:17:39:86:29:cb:e7:42:32:
         b2:bb:bd:fe:8c:5c:ae:15:40:55:16:e7:7d:28:b9:de:65:9b:
         7c:73:07:cb:bf:f2:1e:16:18:5a:04:46:75:32:0f:a3:ee:40:
         33:b3:7d:07:94:9c:f7:09:0b:8f:45:79:fb:ba:b3:77:4d:e2:
         96:0c:c7:7c:bd:7b:d2:89:d6:2b:f0:c2:34:f7:0d:ba:5f:02:
         ec:19:ae:2f:d4:d7:ed:e6:bb:11:53:08:3c:0f:94:ba:fd:e8:
         92:4f:95:a6:4b:f4:e3:8e:73:5b:2f:3a:fe:b8:14:f6:62:6a:
         d2:91:f0:79:35:25:1a:21:a2:26:90:3a:5b:90:d2:52:e6:6d:
         30:16:15:90:24:8f:6e:14:f5:f8:2b:79:8a:09:ed:0a:80:22:
         df:02:cb:d8:21:8e:bf:6d:d3:08:fe:8c:d9:1b:38:89:af:65:
         29:ba:a1:02:f2:4d:28:e7:57:07:e9:d3:d6:9a:d5:42:a9:c3:
         55:48:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org