Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa (raw, json)
Hash identifier:          LF8o9sOKwV/RTjFt68uioTID/12ya8BJGvgT4va/uic=
Subject key identifier:   20:4B:E3:C4:9F:71:83:FD:4D:6E:09:D1:3D:8A:19:DE:C5:74:71:F3
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       2CE847DF7FCB2999C3D5EC95644E7D1675C10061
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:21 +0000
ROA not before:           Wed 14 Aug 2024 19:51:21 +0000
ROA not after:            Wed 13 Aug 2025 19:56:21 +0000
asID:                     262977
IP address blocks:        177.190.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e8:47:df:7f:cb:29:99:c3:d5:ec:95:64:4e:7d:16:75:c1:00:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:21 2024 GMT
            Not After : Aug 13 19:56:21 2025 GMT
        Subject: CN=204BE3C49F7183FD4D6E09D13D8A19DEC57471F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:c3:2f:37:00:44:c8:7b:ff:e3:95:18:99:
                    6b:79:44:2e:41:2f:1b:96:39:76:0a:37:af:5a:86:
                    bd:72:96:1a:9d:8c:93:9b:10:b0:dd:4c:55:5d:c4:
                    8a:ca:04:fd:fd:b7:93:a1:42:27:14:99:8f:7c:fa:
                    44:6f:51:13:fe:1a:f1:11:8b:fd:7a:92:40:1b:91:
                    98:2c:db:2b:02:ed:b8:5b:fb:72:f6:12:b1:59:4e:
                    7b:d4:2b:f2:40:62:ea:d7:25:12:21:4a:28:be:32:
                    ee:2f:75:d0:d0:ba:34:61:0c:34:65:a8:89:1d:bc:
                    13:00:6c:2d:f3:14:58:65:55:b0:18:47:99:91:05:
                    d6:f0:ba:4c:f8:1e:20:13:cd:f6:a4:19:1b:40:4c:
                    01:c8:fc:4d:bc:73:d2:c9:d8:4b:8c:22:c1:d8:c1:
                    bc:20:b8:f3:da:9b:14:a0:0d:e8:82:8d:30:43:ac:
                    43:8b:0e:b3:84:87:08:53:f2:d1:6b:05:a4:f2:2a:
                    91:e2:48:19:01:ab:f9:97:c2:07:a7:40:b0:4e:9a:
                    e9:c5:54:4c:0b:9e:ac:5f:24:90:2f:84:22:fa:8b:
                    ec:15:1c:21:db:57:c3:39:74:d2:5b:43:22:28:f1:
                    60:26:8a:b8:f3:c0:45:df:0b:cb:92:03:5f:98:38:
                    11:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4B:E3:C4:9F:71:83:FD:4D:6E:09:D1:3D:8A:19:DE:C5:74:71:F3
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32332d3233203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:b3:f5:a6:66:c4:1a:c1:f9:8f:c6:99:64:7c:ef:b3:c5:d7:
         97:fc:56:43:97:ed:4e:e0:df:ed:25:44:8a:2c:c5:dc:d1:44:
         ba:0c:2e:1e:61:7a:fc:e1:b3:ac:bb:78:2f:fd:c5:63:64:d0:
         ff:de:50:64:40:48:12:72:9c:89:3f:2f:d8:a8:6c:4e:11:6d:
         0d:79:37:4c:7d:5e:28:e2:01:c6:ea:71:dc:97:9c:bc:75:4e:
         39:ac:67:f4:8a:96:cf:48:54:fe:b3:73:d6:2d:73:63:45:35:
         56:82:4e:9f:57:94:0a:e2:4b:c2:ef:eb:d3:c1:32:a1:38:6e:
         ee:96:a6:b6:08:34:a8:1a:6a:b1:95:c9:24:5e:7f:10:3f:b8:
         87:d5:66:e7:5f:60:7c:e6:18:e8:59:d5:29:53:61:fa:29:6b:
         49:c2:ac:4c:97:f5:2e:a1:a5:54:f1:8a:32:f1:2b:cd:9c:8d:
         36:43:3a:4e:ca:8f:e6:43:06:cd:68:93:6d:86:c6:39:97:6e:
         6b:5c:e6:f0:3f:e9:8c:09:7c:97:85:74:90:dc:45:9f:67:bd:
         59:3a:35:fd:b4:62:48:5a:47:33:58:9c:8a:f6:93:d0:5f:4e:
         31:5a:80:73:2d:c5:68:c5:9d:a0:ad:4e:7f:0d:64:f0:bf:ac:
         28:99:06:65
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULOhH33/LKZnD1eyVZE59FnXBAGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA4MTQxOTUxMjFaFw0yNTA4MTMxOTU2MjFaMDMxMTAvBgNV
BAMTKDIwNEJFM0M0OUY3MTgzRkQ0RDZFMDlEMTNEOEExOURFQzU3NDcxRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuMMvNwBEyHv/45UYmWt5RC5B
LxuWOXYKN69ahr1ylhqdjJObELDdTFVdxIrKBP39t5OhQicUmY98+kRvURP+GvER
i/16kkAbkZgs2ysC7bhb+3L2ErFZTnvUK/JAYurXJRIhSii+Mu4vddDQujRhDDRl
qIkdvBMAbC3zFFhlVbAYR5mRBdbwukz4HiATzfakGRtATAHI/E28c9LJ2EuMIsHY
wbwguPPamxSgDeiCjTBDrEOLDrOEhwhT8tFrBaTyKpHiSBkBq/mXwgenQLBOmunF
VEwLnqxfJJAvhCL6i+wVHCHbV8M5dNJbQyIo8WAmirjzwEXfC8uSA1+YOBGRAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIEvjxJ9xg/1NbgnRPYoZ3sV0cfMwHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzEz
NzM3MmUzMTM5MzAyZTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxvl4wDQYJKoZIhvcNAQELBQADggEBAEqz9aZmxBrB
+Y/GmWR877PF15f8VkOX7U7g3+0lRIosxdzRRLoMLh5hevzhs6y7eC/9xWNk0P/e
UGRASBJynIk/L9iobE4RbQ15N0x9XijiAcbqcdyXnLx1TjmsZ/SKls9IVP6zc9Yt
c2NFNVaCTp9XlAriS8Lv69PBMqE4bu6WprYINKgaarGVySRefxA/uIfVZudfYHzm
GOhZ1SlTYfopa0nCrEyX9S6hpVTxijLxK82cjTZDOk7Kj+ZDBs1ok22GxjmXbmtc
5vA/6YwJfJeFdJDcRZ9nvVk6Nf20YkhaRzNYnIr2k9BfTjFagHMtxWjFnaCtTn8N
ZPC/rCiZBmU=
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org