Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa
File:                     3137372e3232322e31362e302f32312d3231203d3e203238313635.roa (raw, json)
Hash identifier:          3tUkuOeBbCnoZ1CVf9YorO51cf2Nilmqq2Kodo4uCqI=
Subject key identifier:   2B:2C:C1:2C:7D:65:97:62:57:D4:2D:61:95:38:77:01:C4:ED:F2:EC
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       54CE369B5092FDD634C6D6EBBC5B20F8B4DA86F9
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:21:09 +0000
ROA not before:           Mon 01 Jul 2024 19:16:09 +0000
ROA not after:            Mon 30 Jun 2025 19:21:09 +0000
asID:                     28165
IP address blocks:        177.222.16.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ce:36:9b:50:92:fd:d6:34:c6:d6:eb:bc:5b:20:f8:b4:da:86:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:16:09 2024 GMT
            Not After : Jun 30 19:21:09 2025 GMT
        Subject: CN=2B2CC12C7D65976257D42D6195387701C4EDF2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:c1:6b:c4:f7:db:91:19:c1:50:f9:8f:b3:
                    cf:d6:9a:36:40:f0:a6:b9:11:bd:dc:54:77:81:7f:
                    3a:ea:e6:81:cf:86:70:ff:50:7a:ee:9a:8e:bb:d0:
                    a7:07:5c:ee:30:88:54:2a:5d:b9:7b:00:0f:44:82:
                    2d:ff:0d:7f:ad:d0:96:c6:de:16:48:b2:46:a8:b6:
                    f4:2e:93:f3:84:a2:97:45:90:33:d0:cf:0e:f7:cd:
                    9e:a5:4b:e1:37:b7:48:03:e9:fc:75:59:be:15:ab:
                    2f:a2:9f:41:20:ea:fb:a9:b0:b2:a1:e4:db:31:c0:
                    ca:c4:0f:99:fc:7e:26:cd:44:d2:c6:59:43:f1:43:
                    13:a4:61:09:ca:14:0d:38:20:56:7a:a5:20:b4:7d:
                    04:d7:79:58:57:a7:ad:9b:15:61:d2:9d:ab:65:35:
                    e3:d5:b3:f8:f9:83:66:59:45:ef:62:bc:af:7b:37:
                    b3:22:21:25:52:25:a7:bd:fa:ae:28:d6:72:21:42:
                    e4:93:9f:b5:3a:5f:76:ff:3c:81:22:9b:63:62:2a:
                    0e:7e:7b:67:63:39:66:c7:9d:b3:44:fd:8b:29:97:
                    9b:8e:7e:2a:4d:d0:16:0d:e8:52:b9:f6:eb:48:70:
                    25:eb:ca:54:f8:98:e5:d4:fe:24:fb:dd:c4:9c:08:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2C:C1:2C:7D:65:97:62:57:D4:2D:61:95:38:77:01:C4:ED:F2:EC
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31362e302f32312d3231203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:6b:9d:b8:66:6e:6f:c7:e6:0c:5a:d8:75:12:d0:49:61:
         02:19:3a:92:0c:0e:ad:7e:75:2c:51:cf:6b:a3:c4:fb:4d:c1:
         05:bd:e7:65:4e:b6:3a:4e:41:87:09:86:0b:e4:7c:4c:79:45:
         d0:a6:d3:84:49:cd:04:98:27:d4:c0:87:a5:08:02:4f:81:e2:
         28:4a:74:8d:d7:db:33:42:bd:e3:e6:bf:fa:07:c0:50:32:3c:
         be:18:49:3e:d5:41:96:82:89:e3:28:69:a6:c7:71:91:37:1a:
         03:34:62:e2:bb:65:b9:5d:14:aa:ca:3f:b3:34:f9:34:50:0f:
         2e:51:ea:6c:e8:73:70:7a:b9:34:5d:ea:88:d5:9f:66:97:77:
         cb:6d:06:d2:53:73:1c:a5:02:38:a8:1b:27:23:c1:f8:9c:68:
         87:94:a2:76:58:72:eb:e1:28:11:e0:70:90:97:63:4e:5c:4f:
         55:22:e7:12:e2:c3:94:92:99:34:f5:86:1e:e1:05:3f:55:a3:
         0c:73:91:f5:04:2b:39:7e:d4:d6:a0:fb:9c:bb:8b:ee:6f:fc:
         9e:f6:67:d3:43:4b:da:fc:f8:99:c4:c7:68:7e:5b:9e:d0:3a:
         53:89:70:41:40:23:f9:eb:ff:2d:6c:b0:4e:84:a3:a8:f1:f2:
         a4:ff:f9:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVM42m1CS/dY0xtbrvFsg+LTahvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlFRjJEQTMwQzFERjBGMkI3ODZCMUVDMjY0MDkxNTc0
RjU0RTI3MjAeFw0yNDA3MDExOTE2MDlaFw0yNTA2MzAxOTIxMDlaMDMxMTAvBgNV
BAMTKDJCMkNDMTJDN0Q2NTk3NjI1N0Q0MkQ2MTk1Mzg3NzAxQzRFREYyRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBsFrxPfbkRnBUPmPs8/WmjZA
8Ka5Eb3cVHeBfzrq5oHPhnD/UHrumo670KcHXO4wiFQqXbl7AA9Egi3/DX+t0JbG
3hZIskaotvQuk/OEopdFkDPQzw73zZ6lS+E3t0gD6fx1Wb4Vqy+in0Eg6vupsLKh
5NsxwMrED5n8fibNRNLGWUPxQxOkYQnKFA04IFZ6pSC0fQTXeVhXp62bFWHSnatl
NePVs/j5g2ZZRe9ivK97N7MiISVSJae9+q4o1nIhQuSTn7U6X3b/PIEim2NiKg5+
e2djOWbHnbNE/Yspl5uOfipN0BYN6FK59utIcCXrylT4mOXU/iT73cScCA6nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKyzBLH1ll2JX1C1hlTh3AcTt8uwwHwYDVR0j
BBgwFoAUie8towwd8PK3hrHsJkCRV09U4nIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMC84OUVGMkRBMzBDMURGMEYyQjc4NkIxRUMyNjQwOTE1NzRGNTRFMjcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg5RUYyREEzMEMxREYwRjJC
Nzg2QjFFQzI2NDA5MTU3NEY1NEUyNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzAv
MzEzNzM3MmUzMjMyMzIyZTMxMzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsd4QMA0GCSqGSIb3DQEBCwUAA4IBAQCVm2uduGZu
b8fmDFrYdRLQSWECGTqSDA6tfnUsUc9ro8T7TcEFvedlTrY6TkGHCYYL5HxMeUXQ
ptOESc0EmCfUwIelCAJPgeIoSnSN19szQr3j5r/6B8BQMjy+GEk+1UGWgonjKGmm
x3GRNxoDNGLiu2W5XRSqyj+zNPk0UA8uUeps6HNwerk0XeqI1Z9ml3fLbQbSU3Mc
pQI4qBsnI8H4nGiHlKJ2WHLr4SgR4HCQl2NOXE9VIucS4sOUkpk09YYe4QU/VaMM
c5H1BCs5ftTWoPucu4vub/ye9mfTQ0va/PiZxMdoflue0DpTiXBBQCP56/8tbLBO
hKOo8fKk//n5
-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org