Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          pjm9x4j+bBdlM+MmLiG/Z4cjoODVcO2Z/kqr5mPmXz0=
Subject key identifier:   6B:63:45:3F:DE:4E:2D:33:5E:D5:8B:B4:03:51:57:12:13:73:10:1F
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1EBB17D1447FEF458EB2039A1900916D31C3C359
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:58 +0000
ROA not before:           Mon 01 Jul 2024 19:18:58 +0000
ROA not after:            Mon 30 Jun 2025 19:23:58 +0000
asID:                     28165
IP address blocks:        177.184.206.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bb:17:d1:44:7f:ef:45:8e:b2:03:9a:19:00:91:6d:31:c3:c3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:58 2024 GMT
            Not After : Jun 30 19:23:58 2025 GMT
        Subject: CN=6B63453FDE4E2D335ED58BB4035157121373101F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:22:76:e2:45:d0:d8:09:4a:b4:c3:c9:b0:
                    f3:a2:2b:14:04:ec:3b:58:bc:71:f1:cf:d3:88:6e:
                    dc:91:90:bd:ed:d3:e7:8d:96:71:01:70:89:2e:07:
                    1f:4b:87:a1:78:91:c9:f5:87:01:1b:fe:d9:e3:73:
                    8a:89:4b:85:1c:a8:c8:d2:4a:14:a3:cb:91:d1:ff:
                    ac:91:37:20:f6:be:35:7b:80:c6:51:09:eb:18:d2:
                    7e:cf:d6:71:0f:62:e9:5a:bd:b8:b3:ca:f5:d3:58:
                    75:45:61:66:e0:b8:66:aa:a0:da:21:30:6b:43:31:
                    5d:38:40:9b:fd:2b:43:83:0f:b2:67:27:26:d6:5b:
                    d6:62:83:72:7f:d7:8a:fb:eb:61:13:d1:23:dd:6a:
                    9e:a2:58:14:19:2a:0c:13:b5:66:e8:5d:8b:21:c2:
                    4e:27:cc:d9:4b:17:2e:65:e7:d4:03:66:8a:16:28:
                    58:0f:a5:3f:93:ef:41:9a:53:d9:77:54:0a:b4:24:
                    33:3d:d3:d8:cb:8f:43:66:cc:36:f4:c8:6f:44:cf:
                    a9:1e:1c:e9:43:23:76:2a:cf:8b:d3:7b:26:8a:f5:
                    1d:b7:6c:9c:4e:ca:e5:7c:56:95:3a:d5:08:3d:59:
                    1a:e6:62:be:99:2e:8b:c9:80:62:d2:f4:d9:79:7e:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:45:3F:DE:4E:2D:33:5E:D5:8B:B4:03:51:57:12:13:73:10:1F
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3138342e3230362e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:3e:21:40:0c:ca:90:48:fe:7f:f0:50:87:4c:d1:2b:c7:
         f1:37:6e:c8:fe:a1:f9:4b:ba:5d:04:bf:2d:3d:46:d2:89:47:
         8e:fb:32:b3:88:01:57:e7:db:a8:7a:07:0e:86:b9:65:fc:d7:
         a1:ae:1d:cf:21:24:19:00:c4:c1:bb:66:19:36:64:77:08:3f:
         63:c4:b5:2e:83:e6:2b:ab:01:85:c3:fd:69:65:ba:48:4c:07:
         58:3e:81:49:85:74:0c:6d:b4:7d:92:c1:92:25:ec:4b:f9:6d:
         e1:61:2a:e5:74:5c:a0:69:ea:33:0d:69:89:a7:9f:51:df:2b:
         bd:99:c3:b9:9f:fd:cb:4a:b8:81:16:7c:7d:15:c8:ff:51:b0:
         51:9f:2c:d1:3a:eb:d7:1e:25:7d:33:95:b0:24:19:77:6c:f7:
         6d:7f:bf:72:f3:38:12:ba:99:d7:b9:bd:f9:8a:47:80:bd:ce:
         20:73:8d:23:20:71:47:b6:48:27:f7:30:b8:05:ac:bf:c6:5b:
         c3:02:fb:eb:d5:66:86:24:ef:5f:a2:4d:01:f7:9c:d6:ae:c3:
         c4:9a:44:f1:48:6d:74:1f:5b:95:55:3e:dc:c8:1b:76:53:54:
         81:34:45:dd:1c:b2:f5:73:ab:e9:ef:f5:28:01:d0:82:29:60:
         42:8c:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org