Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa
File:                     3137372e3232322e32342e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier:          qz07c+Gx+jWVavXXqJk4bNxpjRTKxVy+MyBtccO2TRU=
Subject key identifier:   EE:1B:27:EC:00:4C:60:C5:7B:D9:BA:E8:B3:89:88:21:3E:04:08:63
Certificate issuer:       /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial:       39B54C6E02EA3C38B64E4AA4945444AECD5E91E1
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa
Signing time:             Mon 01 Jul 2024 19:21:44 +0000
ROA not before:           Mon 01 Jul 2024 19:16:44 +0000
ROA not after:            Mon 30 Jun 2025 19:21:44 +0000
asID:                     28165
IP address blocks:        177.222.24.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:4c:6e:02:ea:3c:38:b6:4e:4a:a4:94:54:44:ae:cd:5e:91:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
        Validity
            Not Before: Jul  1 19:16:44 2024 GMT
            Not After : Jun 30 19:21:44 2025 GMT
        Subject: CN=EE1B27EC004C60C57BD9BAE8B38988213E040863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:69:73:51:93:ba:bc:cb:98:6f:75:57:af:
                    ad:68:0a:2d:e3:3d:fc:73:ae:22:40:67:62:04:d5:
                    9e:bf:69:65:c9:00:2c:f6:d4:2e:a7:d9:07:00:2c:
                    34:c4:f6:dc:5d:8a:03:28:3e:60:f5:8a:76:59:16:
                    53:ed:60:75:64:a0:b5:19:5a:ba:89:84:38:67:73:
                    6a:84:f7:c6:c4:fc:18:d4:66:27:f4:71:e8:55:c6:
                    2c:66:a2:9b:50:99:c3:e2:1d:66:ef:d9:f2:04:05:
                    3d:4d:d4:eb:d1:78:9e:83:e8:a7:ab:4f:22:e4:e8:
                    51:a2:56:45:7c:2f:96:90:c0:bf:54:56:5e:b0:fc:
                    a9:16:5e:d6:8b:64:3e:dc:d8:fa:ca:f0:f5:09:5b:
                    39:b4:88:32:8c:f1:1f:39:ab:37:a6:2b:05:01:ae:
                    b0:d0:bb:41:75:9c:c3:62:5b:ae:f5:c0:3e:49:dc:
                    61:0b:6f:c9:f3:77:50:21:26:eb:68:5f:b3:3d:32:
                    98:25:f2:0a:6a:31:1e:95:d2:7c:93:c6:a9:2a:b1:
                    4e:4a:b7:3f:da:74:95:1c:40:b7:3c:dc:ba:cb:9c:
                    b2:a5:f7:28:d6:a2:97:89:ef:ff:76:73:3e:8f:25:
                    ba:d4:d7:ea:e8:11:28:54:e3:87:2c:f6:42:96:81:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:27:EC:00:4C:60:C5:7B:D9:BA:E8:B3:89:88:21:3E:04:08:63
            X509v3 Authority Key Identifier:
                keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137372e3232322e32342e302f32322d3232203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:6d:51:9f:d4:32:53:4e:78:d9:5e:55:69:63:bd:f4:b3:1f:
         59:5d:01:23:a2:e5:9e:b2:bc:83:56:22:dc:28:a3:68:80:d4:
         f5:20:ac:a4:8d:0f:0e:a5:37:2d:8d:62:bc:2a:d8:b3:d4:5c:
         27:49:e1:54:c5:f7:ac:36:d6:b5:fd:25:1f:a2:08:d5:11:3f:
         ac:f8:e6:b8:ba:c6:0c:e2:7c:19:e0:b7:6f:eb:7a:3d:91:9a:
         23:74:00:f7:21:7c:8d:6e:15:00:13:c5:5f:aa:7d:56:02:18:
         b8:3f:2a:9d:78:31:71:18:35:5a:e3:3f:1a:1d:6e:1f:5a:8e:
         79:6a:10:4c:e1:88:dc:1f:4a:94:8b:78:41:99:4d:37:f4:42:
         8c:e6:ca:0b:88:40:cc:f4:4b:37:ec:9c:ff:c6:2e:01:bd:f5:
         dd:38:b3:17:e8:aa:08:fc:0a:e0:5c:fc:be:62:92:f7:de:4c:
         de:ee:2f:05:1c:99:8d:1d:87:01:2a:45:9b:e6:fe:14:a0:fb:
         7e:9b:d3:39:d0:c7:2e:9f:01:cb:da:24:6d:22:da:e3:38:0c:
         94:21:9d:b5:8b:5e:3d:36:6b:6c:df:f6:22:01:49:e2:fa:cd:
         57:3f:f9:0b:bc:dc:3e:c2:c1:e0:38:e6:93:af:7a:4f:ff:92:
         63:e0:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org