Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3137372e38362e3234382e302f32322d3332203d3e20323632363434.roa
File:                     3137372e38362e3234382e302f32322d3332203d3e20323632363434.roa (raw, json)
Hash identifier:          uekwY5Zx6CbyQzKS0R5yujXeNkIzBTmZBHftWG/SBVI=
Subject key identifier:   51:06:BB:DB:15:4D:F5:4F:B8:9A:9E:D9:43:08:80:12:22:6D:7A:D5
Certificate issuer:       /CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
Certificate serial:       49DC9EF56FCB4AA6C54814311E7111517D92473F
Authority key identifier: 8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3137372e38362e3234382e302f32322d3332203d3e20323632363434.roa
Signing time:             Wed 17 Jul 2024 21:28:40 +0000
ROA not before:           Wed 17 Jul 2024 21:23:40 +0000
ROA not after:            Wed 16 Jul 2025 21:28:40 +0000
asID:                     262644
IP address blocks:        177.86.248.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:dc:9e:f5:6f:cb:4a:a6:c5:48:14:31:1e:71:11:51:7d:92:47:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
        Validity
            Not Before: Jul 17 21:23:40 2024 GMT
            Not After : Jul 16 21:28:40 2025 GMT
        Subject: CN=5106BBDB154DF54FB89A9ED943088012226D7AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:19:94:23:4b:16:09:27:5c:1c:0a:f8:bb:
                    d0:0b:2e:2b:31:03:b5:3b:fe:73:bf:fc:ed:99:0b:
                    6c:3d:0e:27:1c:d3:09:e1:b4:c1:73:64:6f:4b:6e:
                    0d:c0:e4:70:31:04:fc:d2:16:94:83:e0:c9:69:45:
                    7b:80:3f:1e:62:58:ab:69:8e:03:f7:e7:e0:57:4a:
                    11:68:ee:4f:b4:5d:8a:73:60:f6:e2:11:e1:ce:cd:
                    93:12:ec:d9:c3:f9:ef:b7:54:81:74:33:e0:75:72:
                    66:89:b2:27:61:72:8d:84:c1:39:c1:a0:13:39:f3:
                    01:76:2b:9f:3e:a0:62:99:e0:f5:d1:dc:c3:5a:35:
                    9c:c4:01:ec:70:28:94:b3:cb:7f:23:95:af:c8:43:
                    44:04:70:4e:22:72:19:48:56:53:74:b8:2b:25:fa:
                    09:a1:26:be:dd:78:2d:9d:c3:ce:1a:22:8c:4b:ae:
                    52:a8:9b:02:91:9e:74:53:42:48:b2:2e:04:21:af:
                    20:a3:82:5b:69:c8:18:16:ac:98:01:e9:1a:60:3b:
                    99:2d:06:ed:3b:89:1c:a4:f0:13:e3:e5:3e:08:2f:
                    1d:e4:c4:53:cf:1b:73:b6:4d:97:ea:ea:82:43:24:
                    5c:4b:25:e9:d6:ae:a0:a3:3d:3d:f8:a7:f0:97:1a:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:06:BB:DB:15:4D:F5:4F:B8:9A:9E:D9:43:08:80:12:22:6D:7A:D5
            X509v3 Authority Key Identifier:
                keyid:8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3137372e38362e3234382e302f32322d3332203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:2d:9f:ca:dd:ad:89:9d:03:63:4e:c8:d4:4b:ad:b5:6e:
         65:52:86:8e:a9:39:e3:a5:e1:ba:85:b3:4c:d2:e7:c5:8c:ea:
         18:59:09:3c:8e:e6:db:bb:d4:16:28:70:ef:4f:b5:00:bd:61:
         7c:8a:97:87:ab:dc:1b:7e:2f:49:fe:eb:ae:96:22:18:2e:e3:
         a1:41:d5:65:cd:82:d8:41:c6:fc:1b:f6:f0:ba:20:44:2e:8e:
         2d:79:9c:84:e9:8a:d7:d1:3d:40:f6:dc:22:d7:ac:9f:ee:85:
         ed:f5:ad:46:a9:03:07:b3:14:21:6e:4b:49:b9:1a:b8:c9:af:
         4d:c8:f1:0a:eb:5d:87:9c:88:8a:3d:2d:74:ee:64:3d:a3:88:
         6d:6a:75:13:f7:a9:c2:8d:07:4a:7a:02:e7:2e:56:4c:af:ad:
         68:23:1f:fd:7f:ae:c5:a5:a3:f9:e3:79:96:c8:ba:25:30:04:
         21:2a:be:89:de:15:ca:64:2e:aa:1d:c0:1a:10:54:ea:92:d1:
         56:4f:d1:dd:7c:2b:30:a7:23:0b:94:d3:90:4d:10:ee:7d:ad:
         48:dc:c3:f7:5d:c6:38:2f:e2:81:2e:bc:49:3e:eb:76:1f:42:
         c3:90:bf:02:fa:2d:27:8a:bd:e2:e1:38:fc:d5:66:15:0c:00:
         f8:a8:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 20:25:15 2024 by rpki-client on console-ams.rpki-client.org