Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31392e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e31392e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          wvbQbGDhVMnrpfbEFEEj0tf2nyrmwIkzdUL12YwEUzA=
Subject key identifier:   9E:66:8E:5E:51:F8:84:79:23:99:29:E3:23:33:35:9B:9A:19:3E:78
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       0F8B5442EE69FE53E3764F7BDBFF11443F11CA66
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31392e302f32342d3234203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:23:47 +0000
ROA not before:           Mon 01 Jul 2024 19:18:47 +0000
ROA not after:            Mon 30 Jun 2025 19:23:47 +0000
asID:                     28165
IP address blocks:        177.222.19.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8b:54:42:ee:69:fe:53:e3:76:4f:7b:db:ff:11:44:3f:11:ca:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:18:47 2024 GMT
            Not After : Jun 30 19:23:47 2025 GMT
        Subject: CN=9E668E5E51F88479239929E32333359B9A193E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:ef:7a:13:7e:b9:8a:a1:40:f0:d3:5f:13:
                    ca:cc:d0:ed:e4:0e:00:5e:00:c1:cd:3d:c4:ee:f8:
                    31:8d:d2:49:ab:95:f8:bb:0f:30:b0:7b:55:75:20:
                    2b:5b:9d:36:50:7f:e6:2d:22:fa:3a:d7:fc:b5:89:
                    75:4e:26:4f:20:1e:03:f0:34:ad:1c:e7:35:97:fd:
                    fe:2b:c9:eb:3e:3f:79:2d:ee:73:60:e0:7b:2c:92:
                    1e:80:77:41:58:82:1c:72:f1:f9:08:5d:c5:fd:5c:
                    19:40:56:85:a6:cc:5e:44:3a:b3:0d:3d:82:12:98:
                    b1:46:60:1c:17:9a:08:a6:69:96:61:3e:34:8c:d3:
                    26:d0:d1:94:3a:9c:34:d3:95:6d:48:12:1a:3e:58:
                    01:be:ff:04:f4:ca:5b:0b:a3:9c:b8:a6:72:98:16:
                    76:e0:de:04:3e:8a:3e:18:2f:be:15:44:c4:3a:77:
                    7e:dc:f7:c0:22:ae:90:9e:4c:1c:14:f0:72:71:03:
                    b0:27:3a:00:1e:4f:b0:96:dc:88:35:b8:eb:76:8e:
                    9c:4e:a6:1a:b9:ce:df:21:62:85:d1:5b:b4:a1:9c:
                    c7:f9:fd:52:57:b4:dd:90:ab:e1:6e:ac:6c:5d:f9:
                    e6:a8:56:51:29:ab:c4:94:a2:31:60:2a:be:41:86:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:66:8E:5E:51:F8:84:79:23:99:29:E3:23:33:35:9B:9A:19:3E:78
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e31392e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3d:6d:42:ec:9a:89:8a:20:fb:8a:13:d0:24:78:d4:2d:fb:
         cc:46:30:a8:fc:9b:62:04:84:2d:fe:0a:c4:74:bc:3f:9e:f8:
         3e:48:88:ff:65:34:23:90:8b:1a:b2:a2:4a:60:02:f0:96:74:
         20:1e:2a:e9:f0:b8:d1:79:3a:5d:8c:8c:82:dc:8c:95:38:69:
         d5:9c:b7:fb:1b:01:4d:c4:13:1d:38:00:ff:06:ff:e0:b9:48:
         55:45:16:a3:ac:ad:ba:fd:fc:08:84:5f:c3:83:12:53:81:70:
         91:c8:46:07:ad:b3:47:82:93:01:e1:60:49:e4:5b:7c:03:5e:
         b3:9f:04:a0:37:be:3c:5e:e1:46:58:9c:ed:68:bd:73:28:d1:
         62:60:53:20:9f:7e:6e:fc:c3:c9:86:6d:05:c1:de:b6:bb:67:
         d3:bd:cc:d0:97:4d:71:83:54:14:57:2e:e5:87:72:ab:79:b9:
         0e:00:f7:de:9f:ae:cc:99:1c:89:3e:d5:c4:6b:84:5c:f0:0b:
         fa:2b:9d:75:2f:9d:4d:e3:fe:f0:0f:90:e9:4f:02:85:98:aa:
         51:62:67:c5:f2:b4:9c:51:2c:41:d7:b2:31:d9:b6:90:07:3b:
         c4:b9:a9:a0:e7:84:30:40:82:a0:d6:a8:3e:34:3c:34:a8:3f:
         31:17:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org