Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
File:                     3137372e31322e3136302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          QtEmZx3RdTEnX4+N2kYLR9sbKPyzGzgvelkcbJ1mVWw=
Subject key identifier:   3D:68:D9:C8:61:5F:D0:EB:EE:CC:CB:DD:58:A1:CE:13:3C:14:45:97
Certificate issuer:       /CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
Certificate serial:       37F60F08ABA1323E7DD77980F05E809203558D62
Authority key identifier: 34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 04 Apr 2024 23:14:06 +0000
ROA not before:           Thu 04 Apr 2024 23:09:06 +0000
ROA not after:            Thu 03 Apr 2025 23:14:06 +0000
asID:                     28299
IP address blocks:        177.12.160.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f6:0f:08:ab:a1:32:3e:7d:d7:79:80:f0:5e:80:92:03:55:8d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
        Validity
            Not Before: Apr  4 23:09:06 2024 GMT
            Not After : Apr  3 23:14:06 2025 GMT
        Subject: CN=3D68D9C8615FD0EBEECCCBDD58A1CE133C144597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:45:14:a6:52:d8:08:38:d1:1e:17:aa:91:29:
                    ed:70:58:ba:18:a7:e3:b1:97:0b:1c:2b:20:ff:1e:
                    0f:b7:78:8e:66:cf:ef:ea:88:46:13:33:47:3f:e6:
                    6e:11:73:dc:f4:7e:c7:6c:c5:a1:eb:1d:d1:53:fd:
                    00:6c:68:9b:24:ce:f2:5f:cb:74:50:a9:7b:ec:a5:
                    99:f9:ee:bc:2b:d2:c1:d6:04:68:e9:67:aa:a6:95:
                    03:9a:33:81:7d:32:70:bb:55:76:82:a2:78:3d:6d:
                    cb:9d:17:04:36:71:b6:d8:30:16:b0:40:41:4a:0c:
                    e5:6a:f0:d3:ab:02:94:b0:a2:a3:29:6f:4f:ff:0a:
                    32:18:47:d1:89:82:f6:5a:54:16:da:9e:70:50:fd:
                    73:81:ab:a5:38:d1:03:71:b1:51:66:de:4c:ad:53:
                    a6:2a:02:37:ee:7f:87:2a:9c:85:9a:38:5f:02:6d:
                    37:8a:5f:e3:ff:f2:36:d5:17:84:c5:23:73:8c:90:
                    b3:86:d4:d6:8d:4f:fb:b1:64:17:cf:42:c2:36:7b:
                    e4:54:96:75:ee:35:88:06:d9:f4:61:0c:c0:bb:4c:
                    93:c0:0c:8e:5f:20:3d:c8:64:a1:e7:d9:17:65:0c:
                    72:08:96:da:19:56:b1:53:11:dc:7f:96:e3:40:6a:
                    6a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:D9:C8:61:5F:D0:EB:EE:CC:CB:DD:58:A1:CE:13:3C:14:45:97
            X509v3 Authority Key Identifier:
                keyid:34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e31322e3136302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:30:de:bd:8b:7e:df:6b:0e:cd:68:b0:16:ad:50:61:c0:d9:
         05:7c:98:7b:79:0f:e2:77:0c:58:98:a2:e5:3d:63:f8:b9:c4:
         c7:c9:0f:35:ca:3d:72:cd:aa:78:8b:00:67:d6:09:f7:6f:e1:
         26:d1:05:b7:5e:ab:e1:3a:09:3d:53:52:bb:7b:0f:95:bd:a1:
         58:21:ea:a8:4a:19:26:ab:d7:20:3f:d2:a1:92:7c:b2:f0:f1:
         64:99:25:5e:75:ba:ee:63:d3:a6:fe:4e:7b:46:a3:56:0b:de:
         3f:1f:a5:5a:ec:e5:cf:7f:95:4a:92:c1:f5:75:cf:23:9e:ff:
         e5:a6:e5:6c:99:25:76:65:0d:b0:b5:96:e6:01:aa:e8:d5:64:
         55:34:43:d6:d5:4e:41:87:88:ce:12:2a:8a:87:61:0d:38:63:
         48:b9:4f:d8:f8:bb:41:b3:c6:48:06:c2:6e:df:96:9a:ce:18:
         d2:81:12:33:68:a3:e9:69:80:76:8a:74:3f:20:4b:0d:62:c2:
         47:7d:10:5d:3d:05:6e:e3:36:a6:a1:a9:4a:a0:66:81:3a:1d:
         6a:9e:b5:61:d5:41:1a:00:c1:14:f0:a3:8e:ab:02:f0:e9:2f:
         a9:27:44:39:55:2c:cf:cf:59:2f:09:90:98:6b:3d:2b:7f:f1:
         97:30:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:10:45 2024 by rpki-client on console-ams.rpki-client.org