Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          bhEhDWvcfYYmW2emcxItjt4OLSZiJzVspJ/Ej41YTtU=
Subject key identifier:   85:3C:4F:27:20:A4:A1:B4:70:1A:3A:A8:F7:BA:04:54:F7:65:AF:11
Certificate issuer:       /CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
Certificate serial:       255F1983A7353B14B02FE24E7B7AFC1A9F800612
Authority key identifier: 88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa
Signing time:             Thu 04 Apr 2024 06:55:14 +0000
ROA not before:           Thu 04 Apr 2024 06:50:14 +0000
ROA not after:            Thu 03 Apr 2025 06:55:14 +0000
asID:                     263459
IP address blocks:        177.190.173.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5f:19:83:a7:35:3b:14:b0:2f:e2:4e:7b:7a:fc:1a:9f:80:06:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
        Validity
            Not Before: Apr  4 06:50:14 2024 GMT
            Not After : Apr  3 06:55:14 2025 GMT
        Subject: CN=853C4F2720A4A1B4701A3AA8F7BA0454F765AF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:02:13:33:61:d2:88:e4:c0:6c:b3:b0:d9:
                    d7:cb:ca:8d:e9:e7:28:cb:01:d6:c8:79:e3:e7:fb:
                    37:9e:10:cc:79:2a:33:89:65:30:ec:b0:03:61:10:
                    b4:cc:65:29:48:a9:d9:bc:7a:9b:f5:02:d2:c4:c2:
                    e1:11:0a:9e:37:8b:b0:89:81:f0:36:e8:77:f2:29:
                    90:51:7b:56:25:a3:72:e4:3f:f2:a9:b6:23:0c:5e:
                    98:f7:a1:93:12:1c:f4:a1:d0:81:9f:f5:4b:7a:a9:
                    2b:f5:75:30:33:ec:c0:cf:14:91:4f:7c:a3:35:9c:
                    86:50:65:9a:98:70:7e:2e:de:38:9b:b8:e6:c9:a5:
                    8b:59:d5:f8:23:11:11:3c:87:f7:6b:3d:49:8f:57:
                    88:5d:b3:6b:71:32:70:61:0c:92:c7:48:7f:c3:9b:
                    de:b3:e0:66:5e:e5:33:5f:62:38:e7:d5:5e:ff:02:
                    9d:35:61:48:f7:c0:06:40:0e:c5:b1:d5:12:7a:44:
                    5d:cf:32:c4:e5:4e:5e:f6:59:98:37:ff:df:11:9b:
                    0f:27:f7:d4:13:85:a3:37:c8:39:7d:c4:0c:56:09:
                    ed:d7:fe:a4:64:8f:a6:e1:a4:b1:1b:c5:14:21:5c:
                    36:cd:c8:04:6e:02:d1:60:b3:70:8a:30:9e:c4:b2:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3C:4F:27:20:A4:A1:B4:70:1A:3A:A8:F7:BA:04:54:F7:65:AF:11
            X509v3 Authority Key Identifier:
                keyid:88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3137332e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:88:6b:49:43:93:f1:7c:f5:36:5a:9e:94:c1:94:42:7b:
         d0:1d:84:0d:41:ea:48:6b:37:6f:05:32:25:36:7a:ba:5c:5b:
         68:63:1a:84:17:36:14:54:78:e9:24:26:f1:fc:90:5b:c1:11:
         2e:0c:fc:34:27:27:a0:81:e9:40:e6:be:bc:f8:9f:f8:3b:91:
         b4:2b:b6:03:c9:f1:2a:ae:c2:87:79:a8:bb:52:5a:43:33:1d:
         ae:b7:0a:d5:d1:4e:8b:5b:01:ca:e2:7c:a3:64:3b:51:a6:56:
         a6:8e:cf:c9:df:04:0c:ce:44:9e:49:92:15:87:ab:ff:9b:99:
         ac:dc:77:96:73:19:00:04:be:be:6b:7a:c5:da:41:e4:06:26:
         cd:cf:78:62:fc:b6:80:a3:48:c8:61:5a:53:66:05:ff:1b:77:
         cb:ff:8d:a2:e7:d0:e5:7e:29:37:ff:6f:95:3f:7e:42:d1:86:
         8e:c3:0f:e4:f0:b1:f7:e1:c2:bf:a0:0d:e5:cf:03:62:82:d3:
         51:c9:f1:37:7c:43:90:91:c2:cd:03:b3:cb:e4:89:6f:6f:70:
         7e:c9:0f:77:84:65:e5:12:25:f6:09:2a:18:2d:43:e1:0a:40:
         17:91:94:ac:2f:0c:68:35:b1:c4:ad:d2:09:a9:89:1f:10:04:
         bb:ce:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 21:59:59 2024 by rpki-client on console-fra.rpki-client.org