Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230332e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          13t3DXcgIk6Wbe1lf6QaFGpibIu2aH9mCtxbkUc07iA=
Subject key identifier:   64:DE:FD:CE:93:BA:3F:73:45:98:C3:3E:43:FF:FF:6F:E4:2B:05:E5
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       31E099B878860B0EB8DA2486D986BA2F35E39FAB
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230332e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:29 +0000
ROA not before:           Mon 01 Jul 2024 19:18:29 +0000
ROA not after:            Mon 30 Jun 2025 19:23:29 +0000
asID:                     28165
IP address blocks:        177.184.203.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e0:99:b8:78:86:0b:0e:b8:da:24:86:d9:86:ba:2f:35:e3:9f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:29 2024 GMT
            Not After : Jun 30 19:23:29 2025 GMT
        Subject: CN=64DEFDCE93BA3F734598C33E43FFFF6FE42B05E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:b3:f5:ce:23:a3:5a:e4:42:49:6f:d8:2f:
                    0b:78:bb:0b:96:a9:a5:38:18:19:d0:28:68:c7:6a:
                    9f:bc:34:5e:1e:11:94:d1:dd:b7:62:37:d9:57:bf:
                    d4:9e:73:4f:9c:ae:c3:02:b5:53:10:f0:6d:f9:7f:
                    f0:cc:be:3e:c0:92:3e:90:bc:40:5b:a8:51:00:3e:
                    8e:2d:95:a0:a8:28:bd:6f:1c:8a:d8:44:42:67:2c:
                    7e:07:3f:fe:dd:9a:ce:3e:b8:42:ad:02:db:81:f0:
                    31:86:d2:59:e0:ef:ea:f7:1c:f3:f0:a1:e7:a6:1d:
                    77:86:50:fd:c7:9c:a3:17:c1:04:55:6d:83:09:4f:
                    71:59:cd:36:e1:8a:cb:b4:f4:6a:74:da:fe:15:4b:
                    b7:ec:01:75:81:69:4e:5b:94:d1:9e:49:95:06:46:
                    61:3f:8e:20:59:fc:12:17:9b:71:d6:87:e8:90:90:
                    07:9e:83:ab:04:87:c8:9f:b7:a9:49:d0:f3:99:10:
                    1a:b6:91:86:6a:fe:c4:f1:3d:22:04:50:29:67:d6:
                    e1:a8:e4:14:f6:91:0c:3a:0d:2a:aa:96:f0:0a:bf:
                    3c:e1:d8:4e:70:13:3d:7e:9f:85:cb:7a:f2:24:01:
                    8b:d8:16:19:e5:36:e5:0d:04:39:f8:7b:66:3f:64:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DE:FD:CE:93:BA:3F:73:45:98:C3:3E:43:FF:FF:6F:E4:2B:05:E5
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230332e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:ef:2d:40:c2:64:f0:4e:7c:e5:09:6d:dc:c8:40:e2:1f:
         26:b7:09:0b:e7:c9:23:94:94:ee:ad:66:d2:7e:b6:4c:62:d4:
         9b:5f:fb:90:12:5e:97:84:57:08:63:3c:70:26:e0:60:d5:e4:
         d1:68:b6:ba:23:04:9d:d7:46:ef:07:bf:b4:c8:b5:8e:82:ad:
         e5:38:e9:87:15:e2:de:40:16:8f:af:fe:9b:bc:f4:da:3a:5a:
         c0:59:6a:1f:bd:d7:21:b8:e6:61:81:fb:29:2f:d3:0e:8d:4c:
         3d:d1:9e:53:de:ad:69:d3:95:c7:c7:92:99:6f:12:c3:c0:ce:
         67:aa:27:7b:43:ac:d2:73:b8:87:aa:3c:aa:9f:44:94:1b:06:
         19:5e:ac:89:68:f2:9f:1c:24:f4:04:db:09:a0:ad:35:97:4e:
         69:ee:56:c9:2f:70:9f:f5:db:9c:cc:4c:0c:b4:7a:81:11:15:
         1a:41:7e:45:fd:2d:e2:f5:b8:61:49:74:fd:66:2d:35:75:48:
         4e:d0:f1:ac:1b:29:c6:d4:9d:b4:36:77:da:ab:e4:e1:30:d4:
         bf:de:d6:92:96:e0:a3:b5:85:aa:8b:7c:ce:29:6d:c6:63:c3:
         d0:70:a4:71:f3:5e:e1:04:f6:55:df:a4:89:a4:f2:b2:b0:1e:
         58:db:83:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMeCZuHiGCw642iSG2Ya6LzXjn6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTE4MjlaFw0yNTA2MzAxOTIzMjlaMDMxMTAvBgNV
BAMTKDY0REVGRENFOTNCQTNGNzM0NTk4QzMzRTQzRkZGRjZGRTQyQjA1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0P7P1ziOjWuRCSW/YLwt4uwuW
qaU4GBnQKGjHap+8NF4eEZTR3bdiN9lXv9Sec0+crsMCtVMQ8G35f/DMvj7Akj6Q
vEBbqFEAPo4tlaCoKL1vHIrYREJnLH4HP/7dms4+uEKtAtuB8DGG0lng7+r3HPPw
oeemHXeGUP3HnKMXwQRVbYMJT3FZzTbhisu09Gp02v4VS7fsAXWBaU5blNGeSZUG
RmE/jiBZ/BIXm3HWh+iQkAeeg6sEh8ift6lJ0POZEBq2kYZq/sTxPSIEUCln1uGo
5BT2kQw6DSqqlvAKvzzh2E5wEz1+n4XLevIkAYvYFhnlNuUNBDn4e2Y/ZKYTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZN79zpO6P3NFmMM+Q///b+QrBeUwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzNzM3MmUzMTM4MzQyZTMyMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxuMswDQYJKoZIhvcNAQELBQADggEBAFOo7y1A
wmTwTnzlCW3cyEDiHya3CQvnySOUlO6tZtJ+tkxi1Jtf+5ASXpeEVwhjPHAm4GDV
5NFotrojBJ3XRu8Hv7TItY6CreU46YcV4t5AFo+v/pu89No6WsBZah+91yG45mGB
+ykv0w6NTD3RnlPerWnTlcfHkplvEsPAzmeqJ3tDrNJzuIeqPKqfRJQbBhlerIlo
8p8cJPQE2wmgrTWXTmnuVskvcJ/125zMTAy0eoERFRpBfkX9LeL1uGFJdP1mLTV1
SE7Q8awbKcbUnbQ2d9qr5OEw1L/e1pKW4KO1haqLfM4pbcZjw9BwpHHzXuEE9lXf
pImk8rKwHljbgy0=
-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org