Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3137372e36362e3136342e302f32322d3234203d3e203532363535.roa
File:                     3137372e36362e3136342e302f32322d3234203d3e203532363535.roa (raw, json)
Hash identifier:          Qfa/DW1gXllLLQwOk85oEOts/IkZ3NDgbhSs8O5irZw=
Subject key identifier:   9F:CE:2A:26:86:0A:4B:16:FF:AA:36:21:53:2A:ED:F7:0D:C6:07:71
Certificate issuer:       /CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
Certificate serial:       5726DFD8BD7ABB8E4F79EB5AEBB748AED70E2182
Authority key identifier: 25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3137372e36362e3136342e302f32322d3234203d3e203532363535.roa
Signing time:             Wed 10 Apr 2024 13:27:36 +0000
ROA not before:           Wed 10 Apr 2024 13:22:36 +0000
ROA not after:            Wed 09 Apr 2025 13:27:36 +0000
asID:                     52655
IP address blocks:        177.66.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:26:df:d8:bd:7a:bb:8e:4f:79:eb:5a:eb:b7:48:ae:d7:0e:21:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2554E829901F5A24F36854F269A43B52C5F8EB7B
        Validity
            Not Before: Apr 10 13:22:36 2024 GMT
            Not After : Apr  9 13:27:36 2025 GMT
        Subject: CN=9FCE2A26860A4B16FFAA3621532AEDF70DC60771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:4f:5a:8e:8a:1a:70:ce:87:fb:67:68:ad:
                    22:50:4d:1a:bf:51:1d:e2:cd:da:d8:df:84:af:7b:
                    77:f3:45:0c:ec:b9:a6:5e:b8:97:7a:ad:0e:5a:d7:
                    f5:01:75:9f:00:4f:41:5c:d1:1d:cd:2b:23:38:51:
                    3d:86:90:f3:5d:b6:4f:8f:cf:31:57:e9:ff:3a:a2:
                    e0:d3:ce:f4:8a:3d:15:54:ae:a9:68:d1:0b:2a:6d:
                    1f:5f:61:20:01:39:b6:90:b2:f8:67:44:45:18:ee:
                    6b:ce:e8:9f:f1:e9:11:22:d9:e4:4c:93:94:26:cb:
                    08:23:ad:e1:14:3d:22:72:55:35:f3:6a:15:a7:26:
                    28:2b:47:b2:b7:bc:49:00:e8:e1:fb:53:9e:00:d5:
                    62:ec:de:d2:58:c3:16:2e:58:b6:5f:d6:46:b6:3a:
                    72:db:40:da:9f:44:be:55:57:16:a2:30:6c:b0:b2:
                    94:85:a3:32:18:23:29:49:0e:9e:9a:5d:5d:46:61:
                    6d:da:c1:36:16:35:1f:e1:40:d9:da:0b:bc:ff:e2:
                    89:fe:10:c3:c6:41:b7:23:40:a4:d6:7c:6e:3d:2a:
                    9a:75:fe:72:7d:0a:6e:3c:a5:74:c3:94:46:3a:a8:
                    4a:b3:d4:e3:d3:4d:9c:d9:80:05:2d:f8:b8:04:ea:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:2A:26:86:0A:4B:16:FF:AA:36:21:53:2A:ED:F7:0D:C6:07:71
            X509v3 Authority Key Identifier:
                keyid:25:54:E8:29:90:1F:5A:24:F3:68:54:F2:69:A4:3B:52:C5:F8:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2554E829901F5A24F36854F269A43B52C5F8EB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/1/3137372e36362e3136342e302f32322d3234203d3e203532363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:8d:62:e6:8a:6d:cc:79:94:da:ec:ca:5e:50:75:e1:78:54:
         90:7e:b3:5c:78:87:2c:20:5a:d2:73:08:fc:ca:d1:f7:2b:7b:
         f7:99:2a:fa:9f:43:5f:28:d0:23:07:ea:5d:ce:d9:a0:ac:b3:
         a2:83:cb:14:5f:0a:97:52:ab:47:57:44:dc:c8:e1:ab:6f:ac:
         58:12:12:f2:55:07:10:19:fc:fe:4f:71:5c:22:b5:6f:d0:a3:
         62:bc:6a:d0:59:f4:0f:0e:d3:7e:8c:da:4d:57:07:61:67:c6:
         03:a8:2c:78:2c:b8:43:e3:73:0b:b7:1b:23:1f:0e:a6:d9:9d:
         11:a5:d5:8c:ec:9d:b6:d7:75:6a:b7:b9:03:72:c0:c6:3b:ba:
         0f:d4:6e:64:3d:f3:94:b8:df:bf:fc:bd:dd:ff:17:a7:89:07:
         85:3e:ee:82:3a:a8:ec:b1:fb:16:0f:b9:50:c1:a3:a1:c7:b2:
         c6:87:15:13:31:05:3c:2f:b3:95:9e:32:c7:bf:bf:17:fc:64:
         f7:5f:66:c8:6e:fc:a0:99:13:91:90:6e:66:10:09:cd:9f:1f:
         2b:b6:dc:13:4b:7f:21:16:2d:9c:12:f7:a7:3f:ae:b5:85:89:
         65:e5:92:95:2f:9e:4c:cd:e2:7f:da:67:0e:ec:b1:d4:0b:53:
         92:7e:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org