Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa
File:                     3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa (raw, json)
Hash identifier:          67CnsTn8MQ84Xusu5fRg7n+mVNpvagoQOgAr1IHfGSo=
Subject key identifier:   22:E5:07:FC:0B:C6:31:02:75:E2:52:E3:43:20:78:4C:D7:E9:63:0D
Certificate issuer:       /CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
Certificate serial:       7F6DAA5847AC14422F71C583059EFB8E8AD92267
Authority key identifier: B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa
Signing time:             Wed 14 Aug 2024 19:56:28 +0000
ROA not before:           Wed 14 Aug 2024 19:51:28 +0000
ROA not after:            Wed 13 Aug 2025 19:56:28 +0000
asID:                     262977
IP address blocks:        177.190.94.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6d:aa:58:47:ac:14:42:2f:71:c5:83:05:9e:fb:8e:8a:d9:22:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B24E50BEEF71D16432D285DED9AEAF8F4F70908B
        Validity
            Not Before: Aug 14 19:51:28 2024 GMT
            Not After : Aug 13 19:56:28 2025 GMT
        Subject: CN=22E507FC0BC6310275E252E34320784CD7E9630D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:2d:18:e7:20:3d:b8:43:4e:4d:05:3a:1b:
                    ac:d5:ec:58:af:87:a4:b9:35:5f:2c:f9:59:33:41:
                    81:d7:0c:aa:b0:11:88:6f:f2:d0:58:7d:25:ed:e0:
                    27:58:e5:78:fb:f0:f9:89:d3:28:51:a9:29:d8:f8:
                    6c:8f:7e:b7:ef:5d:53:c2:6f:26:e5:cc:56:e6:33:
                    3b:f6:27:29:bf:7f:7d:23:c3:10:bf:04:20:fb:ca:
                    52:3c:8e:4b:4e:a7:5f:31:3a:4a:a0:ea:09:6d:15:
                    be:ee:e8:65:24:e2:43:f4:89:dd:1e:a4:2c:42:b8:
                    3d:ca:2d:52:09:58:18:e3:64:c7:e6:37:e8:f5:bc:
                    0c:25:c8:4d:7b:d9:ab:1f:4e:6e:cc:29:87:46:42:
                    c5:0f:6f:22:65:be:76:c6:df:3b:d1:5f:d0:f8:af:
                    5c:34:ab:87:ef:f0:fc:c7:ef:82:08:d3:79:64:d5:
                    6e:3f:8d:09:cc:85:76:1b:db:21:9c:37:37:ef:f6:
                    bb:f4:9d:b9:e1:6d:24:67:65:9b:17:e3:fc:0f:6a:
                    cf:8b:61:fd:c3:05:76:d1:6f:7b:9c:8a:05:51:6c:
                    ee:55:09:33:87:ab:a2:80:96:96:0c:cd:5e:05:46:
                    3d:d9:f4:77:b8:4a:41:8f:79:38:b0:6b:1e:11:27:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E5:07:FC:0B:C6:31:02:75:E2:52:E3:43:20:78:4C:D7:E9:63:0D
            X509v3 Authority Key Identifier:
                keyid:B2:4E:50:BE:EF:71:D1:64:32:D2:85:DE:D9:AE:AF:8F:4F:70:90:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B24E50BEEF71D16432D285DED9AEAF8F4F70908B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/3137372e3139302e39342e302f32342d3234203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:d2:d8:c9:14:c1:b0:72:4a:4f:93:74:fe:d0:27:49:35:
         0f:e2:42:da:e8:28:70:16:32:f1:01:26:25:a2:61:73:5f:c5:
         bf:ee:1d:7d:cc:e5:bd:54:90:ae:d0:34:9b:77:70:fa:f1:de:
         42:ce:0e:47:91:42:32:b7:bd:21:7a:a3:9b:6b:c7:32:9e:08:
         5b:55:e8:41:5a:8f:26:c0:9b:2e:c6:d7:a8:b1:62:5c:0c:00:
         8b:8c:16:f8:0c:1d:a0:26:e3:71:e2:ac:01:b7:65:2f:59:f4:
         4a:cd:f6:82:94:a3:c0:43:cd:ca:f7:84:22:fc:c3:ec:be:78:
         c4:40:bc:81:63:25:0a:44:74:62:13:83:fa:7e:49:84:6a:ac:
         c0:e6:57:23:21:6b:76:3a:0f:1e:2f:fe:8b:72:0c:aa:2f:f6:
         6d:62:14:d3:3a:f9:4f:e1:2a:11:f1:67:a8:4b:cf:eb:ce:4c:
         bd:70:be:d4:1b:55:ba:55:f5:8a:c7:9c:17:8c:73:87:6b:8d:
         96:b8:fd:34:d1:c2:25:2d:20:22:4c:78:d4:26:9f:a1:97:cf:
         0c:8c:49:d6:e2:9b:68:fc:84:b9:bc:f4:ea:39:e4:b9:8f:60:
         27:26:e1:0a:be:52:3d:e6:42:44:fe:03:46:22:65:6e:70:e2:
         a1:e6:be:d9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUf22qWEesFEIvccWDBZ77jorZImcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0
RjcwOTA4QjAeFw0yNDA4MTQxOTUxMjhaFw0yNTA4MTMxOTU2MjhaMDMxMTAvBgNV
BAMTKDIyRTUwN0ZDMEJDNjMxMDI3NUUyNTJFMzQzMjA3ODRDRDdFOTYzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27i0Y5yA9uENOTQU6G6zV7Fiv
h6S5NV8s+VkzQYHXDKqwEYhv8tBYfSXt4CdY5Xj78PmJ0yhRqSnY+GyPfrfvXVPC
byblzFbmMzv2Jym/f30jwxC/BCD7ylI8jktOp18xOkqg6gltFb7u6GUk4kP0id0e
pCxCuD3KLVIJWBjjZMfmN+j1vAwlyE172asfTm7MKYdGQsUPbyJlvnbG3zvRX9D4
r1w0q4fv8PzH74II03lk1W4/jQnMhXYb2yGcNzfv9rv0nbnhbSRnZZsX4/wPas+L
Yf3DBXbRb3ucigVRbO5VCTOHq6KAlpYMzV4FRj3Z9He4SkGPeTiwax4RJ7hxAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIuUH/AvGMQJ14lLjQyB4TNfpYw0wHwYDVR0j
BBgwFoAUsk5Qvu9x0WQy0oXe2a6vj09wkIswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BOGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJq
LzAvQjI0RTUwQkVFRjcxRDE2NDMyRDI4NURFRDlBRUFGOEY0RjcwOTA4Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CMjRFNTBCRUVGNzFEMTY0MzJE
Mjg1REVEOUFFQUY4RjRGNzA5MDhCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9B
OGt6ZHlwdFd6d1pveVplQ2RXNjJFb3hRNDdQQ0dOQk5vOVB6Z1hBUTJqLzAvMzEz
NzM3MmUzMTM5MzAyZTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
OTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACxvl4wDQYJKoZIhvcNAQELBQADggEBAHnp0tjJFMGw
ckpPk3T+0CdJNQ/iQtroKHAWMvEBJiWiYXNfxb/uHX3M5b1UkK7QNJt3cPrx3kLO
DkeRQjK3vSF6o5trxzKeCFtV6EFajybAmy7G16ixYlwMAIuMFvgMHaAm43HirAG3
ZS9Z9ErN9oKUo8BDzcr3hCL8w+y+eMRAvIFjJQpEdGITg/p+SYRqrMDmVyMha3Y6
Dx4v/otyDKov9m1iFNM6+U/hKhHxZ6hLz+vOTL1wvtQbVbpV9YrHnBeMc4drjZa4
/TTRwiUtICJMeNQmn6GXzwyMSdbim2j8hLm89Oo55LmPYCcm4Qq+Uj3mQkT+A0Yi
ZW5w4qHmvtk=
-----END CERTIFICATE-----
Generated at Thu Sep 26 23:45:58 2024 by rpki-client on console-ams.rpki-client.org