Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa (raw, json)
Hash identifier:          Qn6WU+uGuIUDz7d1TXSbLKpASWeAqv9T7/8M6verQJ4=
Subject key identifier:   83:E4:05:B3:5B:6D:A9:A1:FA:2C:98:9E:87:53:89:FA:2B:4C:74:CB
Certificate issuer:       /CN=E3001BFE7DDEEC3218B11FC38A06F65B0A809CF6
Certificate serial:       74C416FFF058BD6812B82B67B87F3CF93A85F2EB
Authority key identifier: E3:00:1B:FE:7D:DE:EC:32:18:B1:1F:C3:8A:06:F6:5B:0A:80:9C:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3001BFE7DDEEC3218B11FC38A06F65B0A809CF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa
Signing time:             Wed 26 Jun 2024 21:14:02 +0000
ROA not before:           Wed 26 Jun 2024 21:09:02 +0000
ROA not after:            Wed 25 Jun 2025 21:14:02 +0000
asID:                     263459
IP address blocks:        177.190.168.0/21 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c4:16:ff:f0:58:bd:68:12:b8:2b:67:b8:7f:3c:f9:3a:85:f2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3001BFE7DDEEC3218B11FC38A06F65B0A809CF6
        Validity
            Not Before: Jun 26 21:09:02 2024 GMT
            Not After : Jun 25 21:14:02 2025 GMT
        Subject: CN=83E405B35B6DA9A1FA2C989E875389FA2B4C74CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1d:96:06:ec:fd:8f:6e:71:c4:10:f9:59:22:
                    f3:e3:a7:72:00:09:d5:84:0e:c3:fa:af:87:72:98:
                    39:4c:e1:0a:1b:6c:15:59:73:d4:39:49:cc:43:03:
                    ad:28:71:68:ad:4e:66:6a:55:8d:48:00:c0:e7:da:
                    b3:38:47:66:07:f2:56:ff:61:86:ab:41:8a:f7:c4:
                    c6:5d:ce:74:00:97:81:62:83:46:3f:42:e1:a7:a7:
                    d6:0d:66:78:aa:7e:95:9b:a6:6c:db:0a:07:a7:3e:
                    96:85:c1:c3:f7:57:7b:56:3e:e1:ab:d6:0d:37:1b:
                    a1:dc:46:2d:2b:e1:a9:61:f4:f1:4f:fe:55:a7:5e:
                    95:6c:d4:44:ae:62:dc:8f:c5:58:a5:0d:de:c0:a5:
                    db:7c:70:6a:cb:b2:a2:fe:57:2b:bc:77:b4:04:6e:
                    09:19:40:4d:8e:1f:72:b9:63:a3:72:59:93:ac:fc:
                    98:d5:88:84:67:49:09:7a:fb:2b:a2:1b:15:26:07:
                    72:8c:aa:09:e9:9b:d8:86:6f:b0:c5:29:88:6e:9f:
                    ea:81:4f:91:00:ca:10:c0:fd:a3:6a:de:d3:bb:30:
                    13:4c:39:dd:e1:d6:f1:ac:25:5d:a1:3b:9e:9a:94:
                    b8:84:d1:c4:1f:24:36:ab:e2:1a:e4:29:e4:f7:e1:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:05:B3:5B:6D:A9:A1:FA:2C:98:9E:87:53:89:FA:2B:4C:74:CB
            X509v3 Authority Key Identifier:
                keyid:E3:00:1B:FE:7D:DE:EC:32:18:B1:1F:C3:8A:06:F6:5B:0A:80:9C:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/E3001BFE7DDEEC3218B11FC38A06F65B0A809CF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3001BFE7DDEEC3218B11FC38A06F65B0A809CF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3332203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:49:ea:92:b6:fe:7f:a5:72:fa:3b:8b:58:a2:42:63:a2:de:
         78:3e:28:b6:99:a2:00:da:4e:11:d3:00:04:bf:5c:57:99:cc:
         21:a9:34:7f:46:f7:1e:37:a3:19:97:d0:2b:41:23:0d:59:dc:
         4c:d1:e2:b4:79:1d:cc:e7:aa:f4:e2:65:72:d4:ad:38:ea:9c:
         a1:e4:08:ca:85:e6:48:67:4f:b3:00:7e:df:6e:e6:81:fd:ea:
         e0:2e:c2:37:47:a5:62:44:60:04:4d:93:e3:70:90:72:7b:e8:
         f7:04:05:79:0f:c5:24:29:48:4e:c1:f4:fd:90:cf:43:60:69:
         8d:dd:43:cb:9a:6c:65:74:5a:01:ea:cc:33:2c:19:53:73:08:
         a0:2d:69:36:8a:2c:69:26:e6:79:a8:ab:88:8c:5d:d9:96:37:
         a6:36:93:32:7e:09:a1:75:75:67:73:84:8f:61:92:15:b7:9d:
         0e:2b:f1:67:be:00:2b:a4:54:3d:aa:aa:33:81:1d:2d:5c:26:
         47:5b:35:97:5b:c2:f8:ad:9d:f2:ed:2b:18:7a:d3:9f:f4:f1:
         97:dc:38:21:23:23:db:a2:b6:19:65:40:60:e7:e6:12:a0:7f:
         22:b4:b0:cb:1e:02:d8:c1:29:61:c8:e8:d8:e4:0f:dc:6a:20:
         06:73:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:59:08 2024 by rpki-client on console-fra.rpki-client.org