Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32322d3232203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32322d3232203d3e20323633343539.roa (raw, json)
Hash identifier:          5NUPC9ei2vVtdpIFkhQ8MKo66g6EehxcJJk/dR9VCUc=
Subject key identifier:   31:F2:D6:DD:28:02:68:00:F1:76:EB:FB:65:0C:87:BD:B5:73:2F:85
Certificate issuer:       /CN=5A4BAE4980AE3E4817729E29F0DB8758F0C3C067
Certificate serial:       766CC126D44B64F646EC7F69F62C047E6F4E2A4E
Authority key identifier: 5A:4B:AE:49:80:AE:3E:48:17:72:9E:29:F0:DB:87:58:F0:C3:C0:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32322d3232203d3e20323633343539.roa
Signing time:             Mon 15 Jul 2024 12:57:48 +0000
ROA not before:           Mon 15 Jul 2024 12:52:48 +0000
ROA not after:            Mon 14 Jul 2025 12:57:48 +0000
asID:                     263459
IP address blocks:        177.190.168.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6c:c1:26:d4:4b:64:f6:46:ec:7f:69:f6:2c:04:7e:6f:4e:2a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A4BAE4980AE3E4817729E29F0DB8758F0C3C067
        Validity
            Not Before: Jul 15 12:52:48 2024 GMT
            Not After : Jul 14 12:57:48 2025 GMT
        Subject: CN=31F2D6DD28026800F176EBFB650C87BDB5732F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:cf:76:37:6f:45:4b:b1:f5:0d:30:7f:b7:
                    23:ae:d0:13:26:cf:60:79:ee:cb:f1:13:8e:98:7f:
                    d2:fb:ce:61:08:5b:ba:1a:9c:44:ec:2d:68:44:0e:
                    75:f0:22:cb:28:72:7e:65:55:ea:f8:f8:c4:eb:bb:
                    b3:32:d2:d0:fc:21:3a:9d:95:4a:c6:7f:62:fa:4e:
                    52:1c:68:4e:ab:25:b5:2b:1a:37:0f:4a:20:d0:62:
                    f7:00:79:48:b2:ea:80:19:4e:ad:e4:e8:bb:6f:b8:
                    21:cc:fa:74:e7:7a:bb:b0:ee:11:ee:11:6d:71:36:
                    c3:95:3a:bd:7f:b5:81:ad:5f:d8:a2:45:3f:13:50:
                    07:ae:b1:e7:4b:ac:66:ff:d5:70:86:ea:77:71:03:
                    1c:a4:ca:a1:47:8c:58:04:0f:8b:3d:ec:f6:cf:4d:
                    5c:eb:2e:8f:d6:98:99:37:a7:36:44:11:e0:ef:49:
                    7e:3e:a5:62:ec:0e:2a:d1:eb:40:5d:cc:e0:0e:d2:
                    33:7a:ff:a3:23:a5:2d:5a:e2:0b:2f:9b:3f:cf:5c:
                    22:15:f9:e2:69:3b:b9:14:50:d8:60:3a:c6:45:d5:
                    e9:65:a0:06:d6:81:b0:e0:aa:0c:7b:50:55:5d:d9:
                    df:53:68:e1:c8:10:43:81:f3:da:19:f0:15:41:46:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:D6:DD:28:02:68:00:F1:76:EB:FB:65:0C:87:BD:B5:73:2F:85
            X509v3 Authority Key Identifier:
                keyid:5A:4B:AE:49:80:AE:3E:48:17:72:9E:29:F0:DB:87:58:F0:C3:C0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A4BAE4980AE3E4817729E29F0DB8758F0C3C067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32322d3232203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:05:c1:d8:08:f1:a0:44:8d:53:4a:a0:94:3b:90:b2:68:de:
         3d:e9:c5:74:44:14:50:b4:cc:77:85:45:39:72:ff:5d:8a:ee:
         a9:0a:c3:60:94:1f:d2:27:06:43:fc:81:92:25:71:65:0c:e0:
         25:ad:fa:5a:6d:f7:ea:cc:ea:8e:a9:1d:6e:9c:0a:34:31:46:
         3b:68:3d:92:04:60:47:2a:b4:36:eb:38:72:40:66:93:05:06:
         ed:86:a4:31:1b:92:87:9c:9a:58:a0:e5:c7:c7:4d:4a:30:79:
         6e:ad:82:6d:0d:28:21:12:ac:d7:31:c8:7e:1f:e1:5a:ce:5b:
         fe:e0:14:36:81:32:75:3f:30:da:13:b7:ad:41:78:ba:bc:cf:
         4f:fd:7f:bd:fb:b7:66:b3:8b:30:70:d0:85:a1:44:d7:33:ed:
         0e:33:5d:55:02:b7:76:26:0c:a3:8a:75:28:1c:47:b3:e0:26:
         b6:ff:b5:a5:74:69:b9:52:e9:7f:ec:34:7e:f9:8e:21:bf:ae:
         9c:4c:84:b9:72:d9:71:74:3e:f5:69:44:da:3f:b8:54:82:d9:
         05:e2:9f:18:20:ec:c2:0d:e2:54:d3:25:7c:0d:ba:9d:7c:82:
         bb:7e:cd:5d:93:a4:b4:3c:8a:db:7a:fc:5d:a8:e0:73:d7:b3:
         40:4e:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:33:28 2024 by rpki-client on console-ams.rpki-client.org