Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e38342e36342e302f32312d3234203d3e203238313731.roa
File:                     3137372e38342e36342e302f32312d3234203d3e203238313731.roa (raw, json)
Hash identifier:          zlJ2ytxxoktss2e0XgjAW0MXdNu5/5lajkh1g3DQ/Ck=
Subject key identifier:   42:5E:C4:E1:87:F8:CA:98:3D:CD:CB:67:05:EC:7D:18:4C:FD:97:31
Certificate issuer:       /CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
Certificate serial:       08DDB051CAEA11B7559178C2C37AE555B14689FC
Authority key identifier: 8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e38342e36342e302f32312d3234203d3e203238313731.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     28171
IP address blocks:        177.84.64.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dd:b0:51:ca:ea:11:b7:55:91:78:c2:c3:7a:e5:55:b1:46:89:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:4a:87:a4:3a:5b:29:d6:78:27:7a:07:ea:
                    ef:55:cb:2d:04:e9:66:15:20:81:61:d0:1e:6d:a0:
                    79:39:2b:06:0f:eb:b0:bb:64:b0:56:85:7d:ef:57:
                    dd:8a:80:61:05:02:c4:d9:b6:0a:b2:fe:02:0e:61:
                    cb:e1:24:04:c6:95:a5:86:69:e4:55:fd:e2:03:94:
                    d4:d5:ce:78:af:03:41:57:27:78:47:ac:01:ad:4a:
                    e5:e9:e0:ce:9c:27:8c:bf:37:2f:bb:16:9b:aa:fd:
                    74:cd:02:99:fb:14:41:5c:48:e3:eb:0d:3b:b1:1c:
                    c6:d2:d5:ec:19:d9:fb:96:86:85:39:4d:82:55:7e:
                    6c:14:0a:66:e8:99:68:7d:c6:ac:b8:05:7c:33:01:
                    b3:40:8d:d1:4d:95:09:60:3d:d0:3b:4c:86:f3:16:
                    8d:80:ed:47:aa:dc:9f:65:8e:5f:e9:7e:35:81:30:
                    95:2c:82:b0:0d:3f:4b:55:76:f7:cb:c6:1a:64:be:
                    34:11:5f:96:72:86:31:59:fb:c5:1d:be:a5:98:22:
                    8f:35:0d:41:e5:59:ca:95:9a:f4:ce:14:7f:d8:48:
                    13:e5:d4:6d:13:2c:39:e4:ee:ad:94:8c:77:4a:f9:
                    da:ca:23:7d:c5:46:d6:5f:ed:b8:7b:31:64:f3:54:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5E:C4:E1:87:F8:CA:98:3D:CD:CB:67:05:EC:7D:18:4C:FD:97:31
            X509v3 Authority Key Identifier:
                keyid:8B:A6:99:C4:70:16:69:EC:E8:E7:D3:F4:A8:60:C4:F6:D5:C7:64:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA699C4701669ECE8E7D3F4A860C4F6D5C764D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJhG6X9jdPGAtdPRz66yts2chEbhZAhbgpTYFCeMBuYj/1/3137372e38342e36342e302f32312d3234203d3e203238313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:3c:a3:df:e2:9c:60:1c:56:47:f2:9a:f6:a5:d2:8a:d5:33:
         cd:f3:4f:d7:49:82:87:25:05:00:33:c9:96:be:28:ea:9f:c1:
         0a:01:c8:cd:06:55:ab:49:78:c9:25:3c:4d:2c:2b:66:76:02:
         20:49:c6:d9:b9:85:96:d8:09:01:ce:52:37:8d:2d:c1:6a:92:
         56:79:3f:f3:a9:1e:39:73:fe:30:e0:1f:fd:c7:2a:7b:d3:92:
         b3:dd:6f:ac:d2:1f:9b:fa:b3:b4:71:32:bc:d7:03:14:a8:b9:
         7d:af:9c:e4:37:57:bb:27:36:9a:8b:95:b6:d9:49:fa:52:96:
         5a:fe:3f:9e:d0:a7:83:a4:b1:97:75:96:32:88:d0:81:fa:a2:
         f0:3c:05:cd:d4:cd:e3:e1:b5:71:69:af:5d:b2:21:44:17:c0:
         a8:a8:e5:ed:83:32:5a:00:18:d8:79:ec:87:58:c9:1d:f2:e4:
         b1:f6:dd:ce:9e:c7:24:13:7d:c3:92:03:49:61:6b:a2:cc:81:
         7b:b5:d2:ca:32:5e:3e:3b:97:82:dd:7f:92:db:e5:66:96:40:
         35:d7:47:26:79:f1:37:ff:39:35:09:76:e4:87:70:93:c5:ec:
         9d:1a:d8:54:56:45:56:84:2d:0a:59:8d:7d:b0:3f:83:de:45:
         05:df:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 18:45:39 2024 by rpki-client on console-ams.rpki-client.org