Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          J8V/hvFgTaO9V0RnMRem7PsJKRa1TpFKhm2YcoHFn1k=
Subject key identifier:   49:A7:7A:05:CB:A1:C7:56:74:BA:EF:DC:D4:05:2C:D1:F3:45:9D:0B
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       4090360FF41B4D8751FB3F3F827ADD2B494D431A
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:09 +0000
ROA not before:           Mon 01 Jul 2024 19:19:09 +0000
ROA not after:            Mon 30 Jun 2025 19:24:09 +0000
asID:                     28165
IP address blocks:        177.184.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:36:0f:f4:1b:4d:87:51:fb:3f:3f:82:7a:dd:2b:49:4d:43:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:09 2024 GMT
            Not After : Jun 30 19:24:09 2025 GMT
        Subject: CN=49A77A05CBA1C75674BAEFDCD4052CD1F3459D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:b1:ff:c6:49:8f:15:83:6b:26:ed:4d:7b:
                    24:d5:5f:95:e0:05:1d:54:6d:cf:49:9f:ce:26:2e:
                    ce:8a:89:86:24:74:48:c5:6a:b3:66:ce:29:7c:e9:
                    0c:db:15:81:a4:e9:31:67:48:54:bc:12:14:96:6a:
                    49:3f:4a:f3:aa:e2:52:6e:33:89:42:7d:14:c4:0f:
                    1e:c7:5d:d3:ca:f8:3c:b4:e6:ba:19:e1:26:fd:23:
                    72:59:7e:2e:a8:67:e8:ac:8e:83:30:03:b0:8d:aa:
                    0e:99:e0:57:e7:42:12:f6:fb:a9:22:d2:98:b2:3f:
                    45:70:46:f7:fa:19:cd:cd:4f:3d:73:58:29:75:34:
                    1e:4f:19:bc:c7:54:8a:42:06:15:6a:ba:2b:d9:a7:
                    ac:c8:b9:8d:86:41:13:31:83:5b:da:3e:aa:5a:ac:
                    5d:3f:04:4e:37:f8:1e:2b:cb:9f:4d:32:c7:45:3f:
                    be:2b:ba:f7:93:25:61:c5:6e:8c:8e:ea:d9:6c:3a:
                    9b:6b:de:4d:b4:ad:9a:d1:e5:e6:3e:51:fd:72:34:
                    4b:17:e3:d4:55:c9:96:05:28:c6:45:65:15:f0:e2:
                    90:34:b1:4f:71:76:59:29:34:e8:1c:8c:d7:64:56:
                    f1:41:2e:57:8e:74:a4:0b:1f:ba:f2:c7:1c:de:e6:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:7A:05:CB:A1:C7:56:74:BA:EF:DC:D4:05:2C:D1:F3:45:9D:0B
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230302e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:b0:31:10:60:64:4c:f7:9c:39:88:a2:7f:00:21:5f:9c:
         09:45:8d:a8:9f:67:44:6f:44:61:3b:bf:c1:8d:f3:db:db:e1:
         5f:ce:fa:17:a7:ea:87:88:88:0b:91:f8:a9:f2:7e:d9:40:46:
         46:12:cd:c1:ca:ce:f6:3f:5a:d7:54:cb:41:30:0c:fd:46:de:
         d7:17:a4:12:9a:de:b9:2a:e9:f7:cc:8b:3e:dc:c8:02:37:17:
         a0:d1:8b:0f:f3:a0:3e:02:c8:06:3d:11:34:ca:53:76:a4:9a:
         98:3d:1f:ce:6e:c9:cb:cb:75:00:95:e3:f1:36:9c:39:c8:0a:
         02:e6:fb:3d:85:7f:68:66:c7:f9:32:c2:e0:b2:16:8b:88:70:
         88:c0:24:fc:89:b0:a5:cf:8d:7d:a6:eb:d6:0d:c7:b1:8d:58:
         7f:80:08:62:36:4c:9b:a9:3b:2d:85:6b:ee:24:ca:33:69:a8:
         dd:3a:8c:6a:e1:43:46:e9:12:a7:19:c2:ce:bc:6c:31:8c:52:
         af:cb:35:87:fa:3a:01:20:26:ae:1c:20:75:d2:d2:f4:2d:4e:
         a5:58:54:88:0b:61:67:ea:22:65:b8:f7:35:f7:6d:01:20:d4:
         1a:52:54:22:a5:bf:88:f3:7c:c2:09:1a:bb:65:69:49:27:d8:
         d6:c1:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org