Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3139322e302f32302d3234203d3e203238313635.roa
File:                     3137372e3138342e3139322e302f32302d3234203d3e203238313635.roa (raw, json)
Hash identifier:          S4wBlNvX/x9MVc+EnjRJZ5xmXVioMr8dJ9NixCk0/+Q=
Subject key identifier:   E5:E2:58:11:13:16:09:51:9F:FD:4C:CD:B6:C7:8A:65:00:F4:5B:BA
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       52D84C337352487A536FB732EF24DFAA3B923211
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3139322e302f32302d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:28:02 +0000
ROA not before:           Mon 01 Jul 2024 19:23:02 +0000
ROA not after:            Mon 30 Jun 2025 19:28:02 +0000
asID:                     28165
IP address blocks:        177.184.192.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d8:4c:33:73:52:48:7a:53:6f:b7:32:ef:24:df:aa:3b:92:32:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:23:02 2024 GMT
            Not After : Jun 30 19:28:02 2025 GMT
        Subject: CN=E5E25811131609519FFD4CCDB6C78A6500F45BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:77:89:4a:e9:6d:f9:24:27:f9:9d:f2:67:
                    5a:8b:13:ff:64:37:ca:1d:03:c5:0e:e1:79:27:aa:
                    42:a8:d9:f7:11:34:42:3c:97:65:f3:80:ff:a5:c4:
                    22:3d:8a:3f:cb:2f:1c:df:9b:02:16:31:e5:2a:00:
                    f1:3d:ee:82:8e:f3:19:1a:91:f2:49:8a:fa:be:ce:
                    63:c0:f9:04:d0:7a:9f:29:a1:2c:06:74:ca:4f:ae:
                    39:2d:7e:13:90:ba:3b:80:5e:11:2a:d0:97:98:b5:
                    c7:a2:ca:ff:0c:53:1d:8c:87:44:47:9b:b6:00:78:
                    0a:9b:2f:01:32:f8:10:a2:78:3f:a4:cc:48:9e:80:
                    87:19:44:5a:7c:bf:ce:eb:86:45:a0:ee:57:5a:b1:
                    b6:c1:0d:9b:d2:60:5b:dc:75:e9:65:fc:3c:44:37:
                    0a:69:bd:e6:3f:46:6c:21:c5:49:d6:22:4a:7a:ea:
                    a9:d9:40:f9:b9:d2:1c:69:08:42:07:ce:6c:82:9a:
                    03:46:b9:21:e2:ef:db:a2:1b:3c:20:4d:b7:12:10:
                    dd:c0:84:19:37:9c:d9:4d:a4:3e:8c:40:8b:46:14:
                    93:34:0d:2e:54:9e:7c:28:29:0a:e2:a9:a2:31:b6:
                    c1:c0:87:72:ee:3d:67:88:d4:3c:01:23:37:93:b2:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:58:11:13:16:09:51:9F:FD:4C:CD:B6:C7:8A:65:00:F4:5B:BA
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3139322e302f32302d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:b0:af:bc:7a:d9:1b:d6:85:2e:73:ea:a5:f3:de:d5:1a:
         8d:ec:86:c9:90:f4:40:8c:3d:3f:b5:3e:6c:8a:5d:e7:a1:e2:
         6e:f5:16:62:31:07:ba:22:f2:40:38:3f:0b:22:4f:b9:51:67:
         ef:b7:b6:7a:73:58:2f:68:1a:0b:69:cc:e5:48:1d:94:94:7f:
         ab:6d:64:eb:76:9d:2c:7d:dd:b8:f5:25:ff:c2:db:29:da:79:
         6c:7f:0a:c2:b1:66:79:ae:71:19:04:36:63:c0:c7:66:5d:af:
         25:e1:c9:53:50:72:c1:6d:0e:b6:39:66:dc:9f:f9:e9:62:5a:
         3c:72:62:d9:9e:4e:69:9b:be:ad:bb:70:a4:b2:70:40:9d:b0:
         72:73:c1:c3:02:ef:3c:ae:91:8d:d9:db:27:60:de:4c:4e:01:
         9b:2e:75:aa:2d:5c:c1:87:1e:bb:30:e8:71:0a:6d:a2:95:cc:
         57:cb:0e:dc:4a:8d:2c:39:49:fe:2a:1e:aa:71:86:fa:d2:e0:
         81:ef:8e:c4:0c:1e:19:1a:e2:57:b8:6f:73:b6:85:90:24:28:
         a5:18:af:49:ce:d2:54:4b:84:36:49:62:92:96:6b:73:fd:19:
         18:d2:72:c7:1a:8f:2c:b2:64:96:7f:2b:cb:17:1e:dd:f5:c1:
         7b:a1:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org