Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230342e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          EtbXr3PFmcAVy6XbGhVeORmENJWcaY4asYl54BINlVw=
Subject key identifier:   C1:0D:4C:D3:6E:DD:09:42:8D:62:37:C9:88:57:A6:BA:D6:63:B9:E0
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       78E6EB2E449B728BEB1F47AE171DCA54D5270027
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:24:02 +0000
ROA not before:           Mon 01 Jul 2024 19:19:02 +0000
ROA not after:            Mon 30 Jun 2025 19:24:02 +0000
asID:                     28165
IP address blocks:        177.184.204.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e6:eb:2e:44:9b:72:8b:eb:1f:47:ae:17:1d:ca:54:d5:27:00:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:19:02 2024 GMT
            Not After : Jun 30 19:24:02 2025 GMT
        Subject: CN=C10D4CD36EDD09428D6237C98857A6BAD663B9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9b:9c:d0:71:17:2e:0d:2c:45:05:96:d9:94:
                    58:2d:e8:34:61:e9:1c:62:d4:87:df:ad:ce:53:3a:
                    08:a2:c9:94:01:c1:2f:11:c2:b5:88:ca:7a:ca:fb:
                    39:94:ad:99:27:1a:40:19:39:af:af:33:cb:01:9d:
                    c1:25:ed:e5:7e:13:72:83:54:f7:d1:56:f5:07:c4:
                    36:b1:51:71:c2:ab:fb:07:cf:76:d6:4e:40:1b:eb:
                    a5:b8:66:0d:60:bd:5f:9b:f6:1a:e1:ee:9b:02:82:
                    dc:46:4a:01:c9:49:1c:48:3f:98:04:13:2f:ce:c5:
                    98:f4:2e:da:a9:b5:df:16:c0:a1:b0:84:ae:a7:78:
                    d5:28:e6:3d:4c:d4:4f:b8:45:12:a6:8a:ab:86:d6:
                    97:a7:da:03:e2:a7:8f:3a:5b:be:d6:14:d4:17:58:
                    08:77:62:2b:ec:00:72:4e:77:ae:0c:a7:db:4c:76:
                    00:ff:d6:14:bb:97:c0:82:c2:4f:62:13:1a:15:9b:
                    d0:27:b4:12:d3:9d:d1:9f:e3:b0:ff:ec:10:25:ed:
                    ac:fc:f3:90:89:3c:d2:b1:b1:7f:61:e1:b6:6c:a7:
                    22:5a:05:4d:c8:29:87:63:5d:76:c5:f8:64:6b:ec:
                    a9:f8:22:be:65:5f:d3:23:48:e1:38:ff:4c:df:b3:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:4C:D3:6E:DD:09:42:8D:62:37:C9:88:57:A6:BA:D6:63:B9:E0
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230342e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:31:3d:0d:17:4d:eb:d2:b4:a5:c4:36:c4:fa:d9:28:86:46:
         28:a7:b7:e2:b2:09:60:c8:b7:99:57:d3:78:df:d4:6b:94:a6:
         71:87:fd:b2:1f:04:b5:50:f0:f3:f8:d0:75:72:41:79:bc:4c:
         32:3f:67:e0:96:6f:10:62:b3:f9:e8:94:fa:b7:58:7d:52:4d:
         19:47:2c:b1:04:23:d8:ec:70:ac:39:26:98:d1:11:ac:34:6b:
         fa:a6:75:13:0a:72:db:0b:5f:12:a1:8f:4d:92:d2:ae:9b:9e:
         b2:7a:7f:19:39:a3:fb:fc:53:20:09:02:bf:36:6f:a9:1e:c6:
         d0:cb:f7:06:d5:f8:53:be:6e:49:de:2d:d7:ed:b1:f3:7d:39:
         57:c8:6b:d4:95:32:7c:a5:4c:44:79:c6:f7:c1:3c:3e:36:47:
         1c:f4:24:2d:bc:c1:ea:b4:23:a7:8d:18:04:a7:96:94:1d:d0:
         fc:a8:f2:cc:ae:3e:1c:13:a1:38:1f:99:eb:c4:ca:ea:19:b2:
         3a:7a:16:73:70:45:1e:1f:59:2b:29:75:ea:2e:45:3d:50:55:
         bc:db:78:a2:b2:22:e6:ca:c8:8d:a5:79:b0:c0:29:7b:b4:37:
         db:76:c6:61:69:25:ea:47:0d:5a:f6:8e:b7:da:1b:a1:29:d3:
         54:18:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org