Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa
File:                     3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa (raw, json)
Hash identifier:          poZSDepi+fHoLnuRRNKpF4leW0TzMUGxnZpnuMHm5NM=
Subject key identifier:   80:73:DB:59:B4:05:98:7F:56:E7:70:33:7C:3A:41:43:21:64:43:74
Certificate issuer:       /CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
Certificate serial:       21B83CAC066CE41D2B4AD156B09A3ABABBD78FCB
Authority key identifier: 5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa
Signing time:             Thu 04 Apr 2024 16:45:58 +0000
ROA not before:           Thu 04 Apr 2024 16:40:58 +0000
ROA not after:            Thu 03 Apr 2025 16:45:58 +0000
asID:                     52873
IP address blocks:        177.128.208.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b8:3c:ac:06:6c:e4:1d:2b:4a:d1:56:b0:9a:3a:ba:bb:d7:8f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD99894988DD0F96A54E3B74753FF224C03A71B
        Validity
            Not Before: Apr  4 16:40:58 2024 GMT
            Not After : Apr  3 16:45:58 2025 GMT
        Subject: CN=8073DB59B405987F56E770337C3A414321644374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:20:93:7f:ad:ad:5b:c7:01:79:53:d3:05:
                    c9:43:7c:a8:6b:1e:28:29:fc:ff:03:54:68:59:e2:
                    35:87:e5:7d:2b:3b:24:67:e7:f9:14:cb:37:ba:88:
                    4e:c6:31:73:e0:9a:d0:86:b9:06:9a:5e:fc:4a:c8:
                    3c:1f:4f:d1:17:37:4c:67:57:8e:ce:66:df:93:20:
                    ce:13:d4:43:f6:5d:01:9b:9f:64:fc:37:77:3b:52:
                    47:35:bf:79:37:28:56:a9:bf:ad:65:0a:e8:ae:92:
                    fb:eb:6b:a4:4c:53:13:bb:c6:3b:aa:f0:bb:98:d6:
                    92:28:6b:01:ad:2d:f1:d6:00:6d:63:95:a3:98:46:
                    77:74:51:67:dd:96:64:7f:6f:e0:d1:92:03:a7:3f:
                    4c:77:a2:86:21:28:1f:76:2c:9d:d3:f4:dd:39:da:
                    55:b0:c6:33:8d:2b:3f:86:73:31:50:63:27:ef:ae:
                    d5:85:7c:dd:0f:99:1c:4a:f3:19:0b:21:2c:6f:46:
                    2e:fd:04:ee:11:71:a3:b7:70:62:74:a0:e6:79:8b:
                    0d:e8:1b:8b:54:b5:de:9c:9a:b3:ee:2a:38:38:46:
                    ab:ec:cf:69:de:8a:81:4a:29:a0:1e:10:f7:d2:29:
                    13:fa:52:dc:8d:78:4d:fa:d5:85:46:de:32:23:55:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:73:DB:59:B4:05:98:7F:56:E7:70:33:7C:3A:41:43:21:64:43:74
            X509v3 Authority Key Identifier:
                keyid:5A:D9:98:94:98:8D:D0:F9:6A:54:E3:B7:47:53:FF:22:4C:03:A7:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AD99894988DD0F96A54E3B74753FF224C03A71B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/1/3137372e3132382e3230382e302f32312d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:10:53:a2:0d:2c:f1:84:4f:7c:07:bb:c2:0e:9a:1e:a3:7f:
         92:72:83:d3:6c:ad:73:70:64:54:09:3c:16:b2:1e:12:30:b9:
         54:99:9a:3b:b9:ff:14:cd:f6:2b:e7:8c:2a:3f:5e:55:f7:c2:
         a5:a3:00:58:09:96:07:60:aa:b7:5f:c6:c3:5e:eb:96:d4:d4:
         07:e9:7f:84:ea:24:eb:b8:8b:56:23:22:d8:8e:e3:e7:bc:a1:
         ea:b3:a4:95:50:19:3f:2f:1d:2d:c3:de:54:d1:2c:fa:f5:d8:
         b9:68:d4:c0:03:4a:83:5d:34:e5:8e:3f:d4:7b:6f:96:7f:ca:
         56:85:c7:08:ba:73:2e:86:e0:ab:81:58:b6:a8:94:44:76:67:
         1b:01:a9:e1:bd:ea:f2:39:11:22:6e:32:be:6a:23:1b:c7:17:
         a1:cb:cb:f5:3b:55:1e:26:3e:6a:d3:ac:a9:e7:bf:7c:b1:1c:
         60:c6:54:29:66:d0:3a:de:09:56:30:af:c2:16:3c:ea:8a:ff:
         52:37:0c:24:59:55:36:f9:fd:63:ee:5d:41:3c:2d:4d:63:6d:
         c9:44:23:6c:cf:1d:cf:d0:51:66:fa:ae:ae:fb:96:c1:b8:c2:
         76:b1:b6:88:74:fc:6a:4f:30:8c:50:6a:ca:23:ab:61:be:96:
         03:93:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 12:40:44 2024 by rpki-client on console-ams.rpki-client.org