Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa (raw, json)
Hash identifier:          ZyU3GV0mOD0OsCI9aE2XHXlhgM8ieiQGOZGYRw5vuUU=
Subject key identifier:   87:20:8D:AD:3A:2B:D3:A8:29:17:6F:67:99:B2:DF:49:32:E6:86:4F
Certificate issuer:       /CN=0E16CF8542DA473DD978C6E71AC96173973353A0
Certificate serial:       561ACF8AB025C305B9DDC0199D7FEBAA5C09E0F2
Authority key identifier: 0E:16:CF:85:42:DA:47:3D:D9:78:C6:E7:1A:C9:61:73:97:33:53:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E16CF8542DA473DD978C6E71AC96173973353A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa
Signing time:             Tue 23 Jul 2024 15:21:23 +0000
ROA not before:           Tue 23 Jul 2024 15:16:23 +0000
ROA not after:            Tue 22 Jul 2025 15:21:23 +0000
asID:                     263459
IP address blocks:        177.190.168.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1a:cf:8a:b0:25:c3:05:b9:dd:c0:19:9d:7f:eb:aa:5c:09:e0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E16CF8542DA473DD978C6E71AC96173973353A0
        Validity
            Not Before: Jul 23 15:16:23 2024 GMT
            Not After : Jul 22 15:21:23 2025 GMT
        Subject: CN=87208DAD3A2BD3A829176F6799B2DF4932E6864F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:b3:e1:70:61:f1:91:da:20:52:36:8a:0b:
                    c2:a6:6d:af:5b:d8:51:b0:4f:ea:0e:6d:30:58:21:
                    3c:a7:9c:58:4b:d0:8a:e1:b3:59:d9:e7:66:16:05:
                    dd:72:6a:08:02:8e:0e:f5:81:1d:47:25:f0:5c:85:
                    cb:2a:05:a4:93:e4:7c:33:ab:5f:d4:d9:95:02:e2:
                    b7:c6:6c:9e:67:0d:49:13:bf:08:bc:a5:d7:0f:fc:
                    71:0a:ee:ca:e8:ad:21:f8:45:cc:7d:00:3d:ff:f4:
                    03:3d:69:9e:d5:ec:94:cf:c3:7e:96:b2:5d:e3:14:
                    13:51:fd:a3:b6:a3:67:6a:ba:79:64:c0:7a:dc:35:
                    92:2a:27:05:70:02:e6:8e:35:8b:c6:11:e0:83:23:
                    4f:f2:2b:4a:50:e0:13:39:c2:92:29:c8:cb:87:f0:
                    f0:77:67:88:c5:47:68:33:9f:8e:9c:55:14:d9:61:
                    e2:69:a2:20:7e:e5:b1:cd:5e:00:cc:99:79:79:cd:
                    f9:a5:16:76:ac:79:cb:e1:a1:4a:28:7a:d7:d5:07:
                    55:96:72:99:da:41:27:19:4c:a7:85:37:47:f6:86:
                    10:6d:9f:f3:0e:38:3b:ca:a8:60:a0:a1:f1:22:1d:
                    d3:01:e5:e9:fd:ed:ea:2c:4f:85:39:73:19:ed:00:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:8D:AD:3A:2B:D3:A8:29:17:6F:67:99:B2:DF:49:32:E6:86:4F
            X509v3 Authority Key Identifier:
                keyid:0E:16:CF:85:42:DA:47:3D:D9:78:C6:E7:1A:C9:61:73:97:33:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/0E16CF8542DA473DD978C6E71AC96173973353A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E16CF8542DA473DD978C6E71AC96173973353A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:50:5d:de:f4:1b:af:97:5e:9b:42:0f:f8:d0:00:2f:b2:d6:
         74:2e:dc:4b:2a:10:ae:20:3d:15:1e:ce:0c:25:ee:35:14:6f:
         3a:57:ae:2b:13:59:d0:5d:6b:a1:8a:d5:e9:0f:db:04:52:b0:
         84:cd:18:cd:83:a9:ff:2f:f1:7b:39:87:b0:ea:b7:c0:1e:58:
         52:b7:0f:82:9c:3e:db:67:74:6a:e1:fc:70:a9:79:fc:ec:f2:
         d4:1d:d4:55:56:39:c9:cf:f6:3b:6c:be:22:e0:f0:cb:9d:8f:
         d5:df:cc:8b:b8:7a:3b:0e:d5:e5:12:cf:55:14:8e:5c:f0:8e:
         08:4f:6c:f6:51:67:bd:e2:27:60:8d:82:ec:db:79:8a:50:66:
         ea:1b:83:ec:66:f4:82:ee:16:05:8e:26:8e:57:1a:56:03:37:
         7f:04:31:30:d8:fe:56:5c:34:62:cf:90:e1:0b:89:16:10:ae:
         da:06:bd:53:92:d9:f9:5d:5e:97:fc:ee:29:55:f8:48:8e:1c:
         5c:96:5a:e7:68:88:7a:64:f7:78:fc:95:bc:1e:1b:63:8d:16:
         98:80:6a:0b:a2:3e:e9:c4:02:21:bc:34:d4:11:ef:c6:2f:e6:
         e2:4e:f1:0c:2e:ba:01:56:3e:67:e2:0e:bc:00:c3:50:7b:81:
         f5:29:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 02:41:58 2024 by rpki-client on console-ams.rpki-client.org