Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
File:                     3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          veJ17cRoxkimJ5ws+T2AeU8a2y7BTDzoJmeX5nLJWcc=
Subject key identifier:   79:03:EF:0D:57:B4:26:97:E6:1F:5D:E3:11:36:AE:5D:EE:3C:17:C9
Certificate issuer:       /CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
Certificate serial:       1B140827F4461817C7C8B78F2AC1EEBA14CD5ACB
Authority key identifier: 34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa
Signing time:             Thu 04 Apr 2024 23:14:07 +0000
ROA not before:           Thu 04 Apr 2024 23:09:07 +0000
ROA not after:            Thu 03 Apr 2025 23:14:07 +0000
asID:                     28299
IP address blocks:        177.185.192.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:08:27:f4:46:18:17:c7:c8:b7:8f:2a:c1:ee:ba:14:cd:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C6F2DF7281688C9EB5859F562AC4E3F612149F
        Validity
            Not Before: Apr  4 23:09:07 2024 GMT
            Not After : Apr  3 23:14:07 2025 GMT
        Subject: CN=7903EF0D57B42697E61F5DE31136AE5DEE3C17C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:ad:3b:e1:d2:89:80:5c:a5:ee:d5:92:fd:
                    93:cc:b6:a8:3e:09:72:18:1f:23:42:1b:62:cb:e0:
                    20:92:e6:72:a2:94:da:c7:dc:73:7d:e0:c4:90:39:
                    20:3a:4d:cb:9a:5b:df:98:3f:41:37:db:47:c1:43:
                    8f:52:f9:e7:bf:54:e3:79:56:40:7f:75:ba:1d:7e:
                    3e:cc:2a:3d:01:c5:56:64:9f:ee:30:34:82:41:43:
                    43:4e:f3:8e:09:b9:03:cf:cb:e1:1b:e9:b1:e5:02:
                    d8:9c:84:92:67:2a:eb:91:d7:29:ce:85:23:f5:6f:
                    a8:5f:f8:00:19:06:6f:63:23:f0:76:b5:34:8c:e6:
                    85:ac:bd:0a:ef:55:e8:08:27:ed:7c:c1:13:1f:ce:
                    d2:5e:fb:17:a3:71:74:8c:0c:f4:f5:a4:c9:ae:aa:
                    20:86:84:a6:3b:d3:40:0c:8d:5f:ba:36:b1:af:cd:
                    c4:6b:20:bf:e6:a4:15:d5:a5:d6:e4:99:92:77:10:
                    af:df:3a:7c:26:b3:53:af:61:68:b1:78:a1:56:22:
                    5c:4d:1c:43:f7:40:ed:8d:6a:25:8b:f2:b1:a7:5a:
                    74:74:9a:f5:42:e1:ab:ba:97:8c:71:3c:eb:13:5b:
                    37:ec:62:d3:86:24:15:1b:b9:d4:66:85:cb:f2:b5:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:EF:0D:57:B4:26:97:E6:1F:5D:E3:11:36:AE:5D:EE:3C:17:C9
            X509v3 Authority Key Identifier:
                keyid:34:C6:F2:DF:72:81:68:8C:9E:B5:85:9F:56:2A:C4:E3:F6:12:14:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34C6F2DF7281688C9EB5859F562AC4E3F612149F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/1/3137372e3138352e3139322e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:eb:b1:9f:25:e6:73:22:48:9b:d9:cc:38:2f:9a:0e:d0:
         80:04:6a:1a:07:5a:76:c7:a9:a6:72:1c:fc:05:79:6a:ce:18:
         a9:c5:37:fb:62:b6:c5:82:38:ff:99:21:5a:65:55:fc:26:21:
         26:0b:f4:ba:38:fe:ea:02:da:5f:67:54:77:8a:5a:60:36:07:
         24:ed:3d:8b:b3:9f:5a:d5:42:89:35:67:55:9c:f4:89:a8:e0:
         c5:bd:4d:8e:84:74:ee:69:86:52:bc:31:e9:ac:f7:72:f0:17:
         a6:d5:5e:4c:c3:ff:4d:45:fa:22:7e:4b:e6:1c:eb:07:67:d6:
         f8:e3:0c:f9:7e:36:9a:a1:7a:f2:eb:6a:8b:49:a9:1c:65:17:
         d9:d7:e0:14:8f:da:a7:ed:ec:0a:05:d1:a5:05:b6:eb:04:94:
         dc:7b:67:77:b5:f4:c8:82:e2:e4:9b:18:69:33:12:e5:04:cc:
         2e:68:a3:67:16:c7:82:5b:4e:c7:4c:74:ee:69:b1:cd:72:44:
         0a:5a:7f:3a:58:0f:f5:4c:f3:03:7b:2d:ec:0e:a4:45:58:6b:
         40:6c:21:5e:55:99:e8:51:f2:fa:f4:7f:8a:bc:f3:0f:3d:b5:
         7d:4d:bf:9e:82:52:75:b6:e1:c1:22:c4:48:42:35:ac:40:b5:
         4f:4f:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:42:54 2024 by rpki-client on console-ams.rpki-client.org