Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230312e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          UdoTGZA2cK+8ci3KxT3ujJRuc4QupFAjE8or1ZAYbdo=
Subject key identifier:   01:FD:62:E7:0B:AC:DE:A1:56:54:B2:F9:88:2E:C7:14:C8:88:39:AF
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       70F3DEE6D37333E26A0F5E35CADF358A5E7C074A
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230312e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:06 +0000
ROA not before:           Mon 01 Jul 2024 19:19:06 +0000
ROA not after:            Mon 30 Jun 2025 19:24:06 +0000
asID:                     28165
IP address blocks:        177.184.201.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f3:de:e6:d3:73:33:e2:6a:0f:5e:35:ca:df:35:8a:5e:7c:07:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:06 2024 GMT
            Not After : Jun 30 19:24:06 2025 GMT
        Subject: CN=01FD62E70BACDEA15654B2F9882EC714C88839AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:10:bc:0f:53:32:3b:ad:b3:2b:cc:18:6e:b4:
                    bd:9e:07:df:03:64:c8:5b:95:b5:d6:cd:af:0e:96:
                    16:ca:ee:ab:cf:99:29:ed:90:07:31:a8:e9:72:ab:
                    3e:bf:45:e3:3f:8e:03:1d:78:f4:1a:3c:12:bf:e9:
                    51:01:5c:1a:59:f6:6d:d7:dd:6e:6b:8d:a2:ef:26:
                    55:6e:c2:ce:d0:03:29:d4:26:61:61:ea:ae:e2:9d:
                    4c:33:58:c7:d0:0f:ce:ba:a8:21:f2:70:cb:f7:12:
                    6b:2c:3f:94:ec:a3:ed:a3:25:da:7a:46:58:3c:e3:
                    30:c1:36:2f:dc:15:9c:7b:c5:ea:e5:34:11:f7:01:
                    4a:d2:8d:70:5e:e8:13:59:e5:78:e1:f0:d6:4a:15:
                    03:f5:00:aa:e6:f3:62:a3:90:a4:08:a2:80:ea:0f:
                    72:14:e3:0c:fc:cf:0c:6f:0e:6a:a6:7c:bb:e0:ea:
                    5d:1b:23:41:1e:b4:56:c0:61:a5:59:5e:d2:e7:c7:
                    7f:c6:13:1c:3f:30:21:3d:c6:5d:b3:39:0e:94:60:
                    96:cc:86:05:0b:66:b7:40:32:35:0e:e5:f8:91:14:
                    9d:b2:f3:c3:6c:f9:e8:56:5f:1e:cf:bb:92:b4:a3:
                    59:22:2f:85:24:07:4a:31:6f:a5:7b:3e:e3:8f:3c:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FD:62:E7:0B:AC:DE:A1:56:54:B2:F9:88:2E:C7:14:C8:88:39:AF
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230312e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:dc:b8:f3:45:cb:1e:73:fd:dc:24:58:71:ac:bf:ec:7f:22:
         43:d5:f3:f5:fd:44:84:db:d6:bd:6e:9e:ac:88:6c:db:b5:8e:
         32:eb:d7:75:17:29:3d:cd:5c:f6:90:e6:72:21:b2:c9:50:e2:
         8d:e2:58:d5:93:21:9b:6c:9d:26:63:f1:c2:3c:58:cc:a1:f6:
         64:e1:93:e8:9e:69:36:6c:70:b2:6c:e5:27:8b:6c:f0:c3:c7:
         f1:b0:a2:d0:e8:cd:76:76:ee:0a:a2:bc:d2:35:ac:a5:f5:88:
         fc:0b:62:9e:2c:f5:8c:91:44:bd:18:84:2c:d6:91:33:f9:89:
         a5:6d:35:fd:1e:75:cf:87:e0:9c:3f:c7:a3:05:6d:6a:14:c1:
         51:6a:29:07:99:08:d5:05:e9:fa:fe:06:e2:85:aa:6c:9a:bb:
         d3:22:fd:ac:dd:1f:be:7e:01:6a:26:0d:b5:34:9c:93:77:a6:
         9c:3c:4d:d1:b9:41:c0:da:d2:ac:54:41:0f:29:1b:77:79:71:
         1d:af:b0:b2:c5:e8:66:8d:0c:ea:59:7f:47:91:8f:21:b6:aa:
         a0:3a:67:7f:60:4b:60:8b:2d:3e:69:5f:e7:7b:df:4a:42:24:
         6e:61:d1:96:c5:74:03:9a:c9:26:2b:74:83:a4:2e:19:1b:80:
         72:20:a5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org