Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3332203d3e20323632323933.roa
File:                     3137372e3135342e3139322e302f31392d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          oVnZ75A0RePHYNkIbWxHP7grbgy1ysonhZ680PF4PKc=
Subject key identifier:   36:0F:8B:51:0F:4C:61:BC:F5:E0:35:F6:4D:55:07:12:53:07:FC:7F
Certificate issuer:       /CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
Certificate serial:       2A06A99658A401A218EE0ABB4E545D7CE03F0C5B
Authority key identifier: 8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3332203d3e20323632323933.roa
Signing time:             Mon 16 Sep 2024 08:29:25 +0000
ROA not before:           Mon 16 Sep 2024 08:24:25 +0000
ROA not after:            Mon 15 Sep 2025 08:29:25 +0000
asID:                     262293
IP address blocks:        177.154.192.0/19 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:06:a9:96:58:a4:01:a2:18:ee:0a:bb:4e:54:5d:7c:e0:3f:0c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA97C26E58799D3765EA8E38C553BF596FE990E
        Validity
            Not Before: Sep 16 08:24:25 2024 GMT
            Not After : Sep 15 08:29:25 2025 GMT
        Subject: CN=360F8B510F4C61BCF5E035F64D5507125307FC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:4e:64:fd:18:08:bb:8c:b2:1d:70:87:18:
                    de:2b:64:6b:8c:f3:ef:d5:1d:f6:e1:8e:ac:05:fb:
                    8d:3f:17:2c:91:0a:c3:59:3d:78:2f:5d:10:a0:03:
                    75:e1:d5:53:98:00:56:ee:d1:54:60:63:3c:56:c8:
                    01:c6:9e:74:06:98:4d:16:9b:1a:fe:6d:3b:6c:b2:
                    4b:42:9a:6a:1c:0e:a4:70:a2:69:8e:a5:24:4c:8a:
                    6e:0a:ea:d1:57:4e:6b:c0:ce:c6:4e:f9:db:c4:d9:
                    17:46:d5:61:c6:52:7b:d5:56:bb:79:ce:18:ac:c2:
                    11:29:b5:2d:91:44:20:53:1d:f3:e8:3e:3a:2e:63:
                    03:c8:8c:d7:2b:d2:d1:ee:9e:3f:61:b9:6b:0c:2d:
                    35:e4:1f:4d:57:b0:a3:56:aa:f0:96:44:fa:98:20:
                    c0:0b:c8:3c:94:71:07:47:46:41:8d:6e:b0:49:86:
                    02:f6:0f:4f:ba:06:4c:86:81:aa:0f:68:79:f3:99:
                    93:11:6e:00:45:ee:ca:7b:86:a9:99:82:59:90:7a:
                    d5:da:31:cb:5f:1b:94:2a:46:92:bc:57:ea:f7:54:
                    e5:26:7e:a5:f1:f2:10:e3:b2:0c:cb:bb:8a:0c:58:
                    54:83:1c:85:7e:f8:e2:78:07:e6:66:a5:f1:a8:7a:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0F:8B:51:0F:4C:61:BC:F5:E0:35:F6:4D:55:07:12:53:07:FC:7F
            X509v3 Authority Key Identifier:
                keyid:8E:A9:7C:26:E5:87:99:D3:76:5E:A8:E3:8C:55:3B:F5:96:FE:99:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/8EA97C26E58799D3765EA8E38C553BF596FE990E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA97C26E58799D3765EA8E38C553BF596FE990E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3137372e3135342e3139322e302f31392d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:18:6e:3a:b7:5f:07:18:ec:14:b6:d8:92:75:b1:bc:f3:44:
         8c:9f:b0:16:7c:e2:41:a5:f8:9b:eb:71:2b:df:f1:5f:0b:43:
         84:a0:bd:c3:5d:df:7a:91:7b:03:70:8c:c4:b1:9d:1c:d0:93:
         a5:3d:ec:b5:3c:7b:7e:e2:ed:a4:42:42:72:65:76:de:a9:f6:
         df:22:9d:24:c1:ab:2b:cf:36:4e:90:3e:c1:a9:13:c9:c3:8f:
         7d:9c:1b:d8:00:a1:64:cd:cb:d6:0e:f0:9f:2b:26:74:ca:fa:
         ca:30:be:2b:3f:31:3f:8c:44:c2:1e:2e:f0:d7:9f:ae:ac:b1:
         1a:39:8c:fc:20:5c:9b:64:04:1f:4f:d5:f2:38:83:52:76:48:
         ee:30:48:c7:73:61:5c:8a:37:94:69:8f:07:e2:d7:ec:2d:2e:
         4b:43:e6:66:a7:da:ab:a0:77:df:0b:a5:52:b4:b1:62:41:f5:
         38:70:0e:0c:2a:2d:81:51:ca:2f:85:53:76:c4:07:14:68:1a:
         3d:ea:ab:11:32:e8:0b:da:19:2b:05:f6:95:8c:c0:e0:0c:df:
         1b:75:8f:10:9f:28:1a:9e:85:95:47:9c:7d:75:2e:cd:1a:76:
         be:d6:52:b4:64:61:a9:c0:53:a9:91:10:1d:16:8c:5c:4b:31:
         94:e9:1e:8c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKgapllikAaIY7gq7TlRdfOA/DFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVBOTdDMjZFNTg3OTlEMzc2NUVBOEUzOEM1NTNCRjU5
NkZFOTkwRTAeFw0yNDA5MTYwODI0MjVaFw0yNTA5MTUwODI5MjVaMDMxMTAvBgNV
BAMTKDM2MEY4QjUxMEY0QzYxQkNGNUUwMzVGNjRENTUwNzEyNTMwN0ZDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVE5k/RgIu4yyHXCHGN4rZGuM
8+/VHfbhjqwF+40/FyyRCsNZPXgvXRCgA3Xh1VOYAFbu0VRgYzxWyAHGnnQGmE0W
mxr+bTtssktCmmocDqRwommOpSRMim4K6tFXTmvAzsZO+dvE2RdG1WHGUnvVVrt5
zhiswhEptS2RRCBTHfPoPjouYwPIjNcr0tHunj9huWsMLTXkH01XsKNWqvCWRPqY
IMALyDyUcQdHRkGNbrBJhgL2D0+6BkyGgaoPaHnzmZMRbgBF7sp7hqmZglmQetXa
MctfG5QqRpK8V+r3VOUmfqXx8hDjsgzLu4oMWFSDHIV++OJ4B+ZmpfGoev0FAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNg+LUQ9MYbz14DX2TVUHElMH/H8wHwYDVR0j
BBgwFoAUjql8JuWHmdN2XqjjjFU79Zb+mQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC84RUE5N0MyNkU1ODc5OUQzNzY1RUE4RTM4QzU1M0JGNTk2RkU5OTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQTk3QzI2RTU4Nzk5RDM3
NjVFQThFMzhDNTUzQkY1OTZGRTk5MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzkzMjJlMzAyZjMxMzkyZDMzMzIyMDNkM2UyMDMy
MzYzMjMyMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBbGawDANBgkqhkiG9w0BAQsFAAOCAQEAaRhu
OrdfBxjsFLbYknWxvPNEjJ+wFnziQaX4m+txK9/xXwtDhKC9w13fepF7A3CMxLGd
HNCTpT3stTx7fuLtpEJCcmV23qn23yKdJMGrK882TpA+wakTycOPfZwb2AChZM3L
1g7wnysmdMr6yjC+Kz8xP4xEwh4u8NefrqyxGjmM/CBcm2QEH0/V8jiDUnZI7jBI
x3NhXIo3lGmPB+LX7C0uS0PmZqfaq6B33wulUrSxYkH1OHAODCotgVHKL4VTdsQH
FGgaPeqrETLoC9oZKwX2lYzA4AzfG3WPEJ8oGp6FlUecfXUuzRp2vtZStGRhqcBT
qZEQHRaMXEsxlOkejA==
-----END CERTIFICATE-----
Generated at Fri Nov 15 01:01:23 2024 by rpki-client on console-fra.rpki-client.org