Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          OjRzuxUscG0fIpiK9gLPAJhWVwrE4YOA79+Lz4FW3Cc=
Subject key identifier:   72:8A:D9:44:61:F7:5A:36:BC:21:12:89:13:FE:77:96:A6:47:05:EF
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       1401D7741D66408D798C62AE29DF85FE1C09121D
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:52 +0000
ROA not before:           Mon 01 Jul 2024 19:18:52 +0000
ROA not after:            Mon 30 Jun 2025 19:23:52 +0000
asID:                     28165
IP address blocks:        177.222.17.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:01:d7:74:1d:66:40:8d:79:8c:62:ae:29:df:85:fe:1c:09:12:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:52 2024 GMT
            Not After : Jun 30 19:23:52 2025 GMT
        Subject: CN=728AD94461F75A36BC21128913FE7796A64705EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:f8:56:b8:57:0e:64:e7:2e:cc:c0:c7:66:
                    34:d4:b7:19:02:4b:43:76:e2:6a:ee:1e:cc:2c:0d:
                    0c:44:04:34:53:46:a3:df:e1:c1:dc:3d:59:ac:b2:
                    ca:c9:88:21:88:ee:c2:f9:4f:b2:97:b1:9d:b0:5c:
                    52:61:2d:50:db:97:0a:1c:27:46:45:0c:2b:91:fb:
                    6c:63:5e:ff:38:2c:3b:57:50:e7:29:87:a7:e2:e7:
                    ca:67:73:37:a9:2f:1f:52:79:19:b7:b3:2a:04:98:
                    7d:18:b6:8b:af:55:0d:e6:fb:e2:51:5a:ff:7a:cd:
                    53:b5:22:b4:6e:f9:83:78:a0:28:66:20:e6:54:d5:
                    37:84:21:cd:d3:05:d1:f4:30:c9:04:a7:a3:13:82:
                    b4:ce:fd:e0:d4:85:59:eb:9e:33:a2:09:ca:0b:38:
                    a6:2f:67:05:ea:6b:4b:89:5d:78:4b:b2:d5:46:94:
                    88:ca:85:72:10:4f:04:63:8c:37:06:a0:49:00:c8:
                    ff:19:6a:df:0e:84:a5:c6:d4:21:b5:2f:18:38:0a:
                    53:f5:68:29:f8:ee:30:77:35:95:b3:38:7d:45:32:
                    87:17:08:c6:cf:3a:26:a7:2a:4d:f7:d9:97:b2:ef:
                    33:0e:87:7e:8e:c6:8a:76:ff:db:c8:73:ae:dd:89:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:D9:44:61:F7:5A:36:BC:21:12:89:13:FE:77:96:A6:47:05:EF
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:63:5a:58:ab:7e:e5:ff:0b:e5:ab:93:34:fc:59:63:d3:fe:
         88:0b:c1:eb:0a:2f:0e:2e:c0:48:02:1e:82:fc:4d:86:73:33:
         c5:4d:1a:d6:dc:b4:da:ef:e6:5b:9b:ab:34:87:ea:44:cf:3e:
         b3:c7:34:3a:7f:9d:84:63:00:1b:74:8d:24:57:a6:c3:77:94:
         f7:72:f0:e4:41:11:ea:8e:15:10:2e:5e:e0:ff:88:1a:54:65:
         a0:f3:1d:d0:49:79:32:bc:c6:ab:fa:f3:4c:82:b9:39:f1:ad:
         85:80:7e:33:a2:85:a9:7b:50:76:c4:95:3b:de:6f:d6:fc:54:
         eb:c6:58:ac:31:31:ce:19:56:27:f7:51:a5:4a:cb:e4:bb:ef:
         d9:e4:a3:b5:fc:22:29:a0:c9:b8:8c:18:26:5e:89:ae:13:2f:
         35:57:a5:21:e4:53:20:3e:3b:34:39:c1:7a:1c:cf:99:1d:92:
         c8:04:c2:78:e5:fd:8a:63:b6:26:43:ec:9d:e7:d9:17:2a:71:
         47:bc:e6:01:a7:73:5a:c3:4c:e3:0d:44:4a:5a:fc:9f:3f:32:
         f0:f5:c9:7e:59:71:21:45:76:d8:92:d6:a9:38:bf:be:df:65:
         b6:db:e0:21:30:04:b3:f6:59:2f:f9:c1:10:cb:a6:ad:2f:c3:
         e3:67:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org