Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e3136342e302f32322d3234203d3e20323632343336.roa
File:                     3137372e35322e3136342e302f32322d3234203d3e20323632343336.roa (raw, json)
Hash identifier:          DqbvhKL3JgR80k89hkFhaXZLCoXMW2B6HTigYiOtbZQ=
Subject key identifier:   D2:48:1C:28:2D:9B:BC:BC:82:30:37:80:03:47:51:CE:B0:25:26:4B
Certificate issuer:       /CN=2B687CD69162C4C9D67B54D1B612864A7C4AF30C
Certificate serial:       43041EB1EC669D282C8D1F3FFA1D7E0820411072
Authority key identifier: 2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e3136342e302f32322d3234203d3e20323632343336.roa
Signing time:             Fri 06 Oct 2023 21:43:54 +0000
ROA not before:           Fri 06 Oct 2023 21:38:54 +0000
ROA not after:            Fri 04 Oct 2024 21:43:54 +0000
asID:                     262436
IP address blocks:        177.52.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:1e:b1:ec:66:9d:28:2c:8d:1f:3f:fa:1d:7e:08:20:41:10:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B687CD69162C4C9D67B54D1B612864A7C4AF30C
        Validity
            Not Before: Oct  6 21:38:54 2023 GMT
            Not After : Oct  4 21:43:54 2024 GMT
        Subject: CN=D2481C282D9BBCBC82303780034751CEB025264B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:d1:a7:81:89:0b:d5:24:44:75:74:cd:ca:
                    0d:6e:17:b9:bd:b9:c1:58:41:0b:ba:c6:d1:d6:94:
                    f9:b3:01:4b:74:ba:c8:81:7b:02:c3:4b:6f:da:35:
                    09:eb:13:d3:a2:40:74:4f:42:71:43:99:8a:65:68:
                    cd:4a:ec:86:d0:04:da:8b:9a:3b:22:08:79:cc:15:
                    17:8e:67:c9:98:07:62:99:98:46:04:44:d7:6c:c8:
                    2e:bd:28:99:19:51:68:1d:3d:82:cc:3b:db:96:c6:
                    8c:7b:b7:92:39:86:3d:91:dc:11:d2:fc:b3:2d:9b:
                    f8:f0:90:56:aa:e9:a8:b1:86:ea:10:c1:b6:3e:e1:
                    45:5b:96:27:04:08:71:67:a6:b3:d4:f2:b9:b5:92:
                    ab:ba:94:bd:1b:8f:a8:88:0d:e0:c0:ff:66:18:88:
                    01:78:16:a9:b3:22:2a:4c:ea:82:83:48:27:ba:59:
                    24:0b:95:b4:68:a1:13:bf:6f:fe:4e:a9:97:4a:7b:
                    e3:cb:bb:c5:54:f7:24:2a:c9:ee:06:0d:0c:7c:4f:
                    8f:8b:15:03:a0:37:ab:f0:6b:2f:4b:bd:13:48:84:
                    f8:d5:49:4a:0f:c2:31:f5:53:74:d6:ee:a4:cd:4f:
                    5c:bf:ab:bd:bb:2f:42:77:d3:77:fd:e9:18:a5:5c:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:1C:28:2D:9B:BC:BC:82:30:37:80:03:47:51:CE:B0:25:26:4B
            X509v3 Authority Key Identifier:
                keyid:2B:68:7C:D6:91:62:C4:C9:D6:7B:54:D1:B6:12:86:4A:7C:4A:F3:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B687CD69162C4C9D67B54D1B612864A7C4AF30C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxmuE2jz2CKGVKNWz8nf93DNZ8QgAN8rTDgrFdUV8Euc/0/3137372e35322e3136342e302f32322d3234203d3e20323632343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:5e:86:3a:a1:42:5c:f8:23:a6:1a:54:57:cc:c5:39:8d:
         48:50:4f:65:95:c4:95:7a:da:93:b0:99:04:5e:19:53:d8:86:
         13:97:6d:25:b2:31:80:6a:a0:e2:75:e1:01:ad:3c:24:34:91:
         a1:0d:e5:36:18:d1:c8:9e:33:8c:b8:e7:78:b6:1d:52:f7:6a:
         9d:d0:7c:b1:0c:4c:c9:17:2e:66:6f:c2:e1:da:d5:87:d7:6c:
         16:18:dd:c1:15:be:bb:df:02:8c:d8:5f:c8:04:1f:f8:c0:1f:
         fd:88:ca:e8:61:3c:d2:21:cd:39:9f:98:dc:a8:5c:0f:5e:8e:
         1c:15:76:04:7c:4d:db:de:6b:5a:3b:3a:9e:39:75:90:b8:cc:
         93:c9:8f:c4:b9:21:50:95:3c:14:32:c3:9a:5a:07:95:09:6d:
         e4:35:96:28:7b:dd:07:9b:9c:6e:e2:f0:47:7f:0a:58:e6:4b:
         84:13:b5:44:38:92:6c:6d:df:af:c4:69:33:25:a0:ba:09:3c:
         6f:70:f5:8b:15:49:17:49:77:09:23:d3:29:a1:f4:4a:83:78:
         8c:9e:20:3e:7a:11:a0:39:94:83:a2:e2:89:6e:ac:e1:e5:1b:
         d4:2c:ba:a7:72:4d:3a:f9:c7:77:45:79:76:8b:d1:98:69:f3:
         89:82:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 03:28:07 2024 by rpki-client on console-ams.rpki-client.org