Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa
File:                     3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa (raw, json)
Hash identifier:          l4XWUziqE/IVQk93iDWeO9DueL+pVbhj7jKc/8zG+SQ=
Subject key identifier:   31:B4:A0:E9:D3:6D:66:6B:C4:70:AB:63:59:8E:47:B4:7E:D9:AB:DF
Certificate issuer:       /CN=30D6291E9DCA7393E99691CAD422596A716588D1
Certificate serial:       36E4E24B8AA4B2217F8753BD46612AACF1FE595B
Authority key identifier: 30:D6:29:1E:9D:CA:73:93:E9:96:91:CA:D4:22:59:6A:71:65:88:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D6291E9DCA7393E99691CAD422596A716588D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa
Signing time:             Thu 04 Apr 2024 08:00:21 +0000
ROA not before:           Thu 04 Apr 2024 07:55:21 +0000
ROA not after:            Thu 03 Apr 2025 08:00:21 +0000
asID:                     262430
IP address blocks:        177.39.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e4:e2:4b:8a:a4:b2:21:7f:87:53:bd:46:61:2a:ac:f1:fe:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30D6291E9DCA7393E99691CAD422596A716588D1
        Validity
            Not Before: Apr  4 07:55:21 2024 GMT
            Not After : Apr  3 08:00:21 2025 GMT
        Subject: CN=31B4A0E9D36D666BC470AB63598E47B47ED9ABDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:48:b1:2a:ef:b1:8d:39:03:55:7c:da:d2:
                    3f:9b:7e:46:9b:41:16:a0:e7:8e:3b:90:a6:09:08:
                    30:c6:94:6d:28:62:2f:59:c5:4e:66:94:4c:95:db:
                    c9:5a:c1:19:e8:81:54:52:ab:29:42:44:e0:1d:db:
                    92:46:53:ea:2a:ba:d0:ab:03:53:31:90:13:f5:62:
                    8a:c8:f7:70:1f:55:21:e1:5f:4a:34:fe:e4:01:f0:
                    ac:5e:e8:1b:12:d9:fd:12:53:86:ea:90:61:7d:e0:
                    0a:33:d5:9b:bb:16:bb:b7:c2:b6:99:2c:eb:0e:6d:
                    8e:92:dc:0d:89:cf:df:5b:82:67:0d:db:f7:26:73:
                    1e:0c:57:da:0a:ae:52:8f:a8:38:4d:b8:0a:b6:1d:
                    1d:4b:06:1d:30:bd:f8:cd:b1:cd:34:6f:6b:02:0b:
                    df:7c:c6:b8:b3:02:8e:bb:b3:e0:36:9b:eb:d1:8e:
                    76:b0:f0:f5:38:a9:93:b5:91:60:51:c7:15:8c:23:
                    87:a8:2e:dc:34:89:22:32:21:a2:2f:97:13:6b:39:
                    07:77:80:bf:45:4b:2a:75:12:1f:1d:cd:ea:df:3a:
                    26:c1:dd:b3:ea:af:ea:ab:c6:74:e0:20:4b:2f:40:
                    9d:56:33:a3:be:7e:63:60:84:7e:bd:f0:22:7b:37:
                    48:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B4:A0:E9:D3:6D:66:6B:C4:70:AB:63:59:8E:47:B4:7E:D9:AB:DF
            X509v3 Authority Key Identifier:
                keyid:30:D6:29:1E:9D:CA:73:93:E9:96:91:CA:D4:22:59:6A:71:65:88:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/30D6291E9DCA7393E99691CAD422596A716588D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30D6291E9DCA7393E99691CAD422596A716588D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvXhi2gbF826wjaRbPgaG6DbYnMNkT6gXztYK36jVVsj/1/3137372e33392e3133362e302f32322d3234203d3e20323632343330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:98:ad:f0:64:1b:da:3b:08:8c:41:f0:41:61:04:07:31:
         f5:35:cf:a3:f4:aa:44:4e:c9:f5:6a:0f:44:85:18:58:7d:69:
         14:52:92:51:75:43:98:8b:6a:d5:58:29:ea:39:c8:d9:2a:96:
         d1:44:3e:4b:cb:7e:e2:26:b1:c1:21:0f:34:d7:cc:cd:a3:63:
         1c:9a:05:c6:4f:32:80:97:44:72:9d:3f:fb:e6:12:a5:57:c7:
         46:eb:98:5c:b6:9e:6b:79:10:29:7c:74:2b:9d:33:5e:f8:ad:
         8a:3d:2d:5d:68:91:cf:38:0c:94:3c:66:93:46:0b:39:83:1f:
         89:0d:43:5c:06:ff:b7:4d:80:bc:0e:45:d1:10:22:60:08:ef:
         9a:70:b2:c2:4f:db:22:6a:de:89:e4:d6:19:f6:bb:e1:bf:57:
         f4:d9:f8:17:20:9f:00:2c:11:9d:e8:e1:8f:4c:4e:75:da:71:
         d4:33:f9:07:1a:da:c7:15:9b:c3:4e:83:29:c3:a0:30:1b:fe:
         10:91:e5:c5:9f:df:b9:9c:0c:41:54:1e:33:bb:95:91:62:e6:
         97:b8:bf:5c:ed:b7:d5:72:50:52:40:10:ed:2f:90:3e:36:1e:
         d8:81:06:1b:04:37:49:4b:af:69:9f:5c:b8:55:6d:f5:0e:dd:
         d6:8a:88:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 18:42:07 2024 by rpki-client on console-ams.rpki-client.org