Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
File:                     3137372e36362e382e302f32312d3234203d3e20323632343836.roa (raw, json)
Hash identifier:          JyP0KxPpOLHOkm5z0D274+xTr75jnwL1tkQ7ywwnY8k=
Subject key identifier:   03:44:EF:0F:A0:C2:68:2E:CE:98:5F:6D:A8:B7:62:A7:7D:4B:4F:50
Certificate issuer:       /CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
Certificate serial:       6B07A6FCCD47E9D738E28BD4C1D643CB0B95210B
Authority key identifier: 86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
Signing time:             Thu 04 Apr 2024 14:24:07 +0000
ROA not before:           Thu 04 Apr 2024 14:19:07 +0000
ROA not after:            Thu 03 Apr 2025 14:24:07 +0000
asID:                     262486
IP address blocks:        177.66.8.0/21 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:07:a6:fc:cd:47:e9:d7:38:e2:8b:d4:c1:d6:43:cb:0b:95:21:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86FCEC8208478C5716DD8705BD24D48C23A5374B
        Validity
            Not Before: Apr  4 14:19:07 2024 GMT
            Not After : Apr  3 14:24:07 2025 GMT
        Subject: CN=0344EF0FA0C2682ECE985F6DA8B762A77D4B4F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:3f:41:b0:99:54:c5:20:d6:0f:4f:4d:5f:
                    cf:3e:96:a1:0f:59:b3:e1:4f:00:d4:99:57:cd:60:
                    f7:50:17:d5:f3:a3:0d:3b:fd:58:ed:47:90:f9:ae:
                    16:a2:33:ce:d8:1e:32:26:6b:f6:7f:0d:0d:00:1a:
                    26:4a:2c:8e:7e:19:3d:e5:43:fe:23:5f:49:a7:7c:
                    43:81:d1:01:61:c9:4f:fe:3f:8e:ce:f5:f9:7a:fc:
                    39:79:e5:de:52:df:8d:92:26:ff:50:93:3b:35:b8:
                    32:27:6a:c2:ed:32:63:52:24:ff:dd:84:6b:db:8f:
                    29:4c:95:ef:30:02:e1:a4:ea:7f:27:39:74:da:8a:
                    60:16:ef:43:75:9f:51:41:5a:87:14:fb:9a:c1:66:
                    26:19:a9:76:8a:29:0a:bd:a4:9d:38:26:78:1c:ee:
                    4d:c8:36:52:69:94:89:68:05:94:b8:66:60:cc:d0:
                    9b:79:88:66:ae:14:99:71:a9:ee:68:6d:a9:25:c7:
                    02:38:b8:07:41:bc:f3:af:08:5f:d2:3d:e5:dd:8b:
                    6b:78:f2:80:73:b1:83:de:36:9d:df:0b:ec:12:62:
                    eb:84:72:a6:fb:23:c4:14:80:65:bc:85:14:93:8d:
                    f7:b1:e3:b7:61:7a:bf:98:99:22:9f:aa:de:26:a7:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:44:EF:0F:A0:C2:68:2E:CE:98:5F:6D:A8:B7:62:A7:7D:4B:4F:50
            X509v3 Authority Key Identifier:
                keyid:86:FC:EC:82:08:47:8C:57:16:DD:87:05:BD:24:D4:8C:23:A5:37:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/86FCEC8208478C5716DD8705BD24D48C23A5374B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/1/3137372e36362e382e302f32312d3234203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:bb:69:9c:ae:a5:db:18:98:03:df:b4:ce:b7:9a:91:53:
         5b:18:1e:99:d1:81:40:2f:4b:81:2e:30:01:28:29:a7:4a:82:
         df:01:a3:ef:65:ea:11:cc:f9:5f:77:0d:e1:ad:5d:46:42:13:
         fa:bc:47:ee:18:67:2a:8e:bb:7c:84:0b:57:16:f1:61:c2:f5:
         c7:9c:41:53:10:ef:a4:10:0c:5b:16:2c:af:02:ab:70:69:ce:
         4e:cf:b7:75:04:9c:8a:a5:8a:a6:db:6e:d5:4d:b9:87:4f:3f:
         4a:18:65:06:df:f8:58:9d:6d:83:9e:ac:34:38:ba:4e:31:84:
         1d:ee:02:2a:e8:7f:d2:18:65:c2:9c:06:12:d2:fc:7d:17:58:
         a9:7e:0d:c9:75:8d:78:7e:d8:b1:bd:9c:e4:9a:5f:b8:fc:f2:
         9f:87:9b:41:4a:9e:a2:6a:cb:a1:9a:8d:eb:41:fc:23:26:bd:
         d9:36:fd:d2:fe:bd:96:45:f2:ac:42:bb:05:79:1d:0f:5b:09:
         56:0b:2a:b3:9f:d3:94:8c:e1:67:1b:74:14:08:60:94:f4:7b:
         e1:39:42:95:6a:98:a7:fe:a6:3a:fa:05:08:e9:85:56:26:52:
         1b:40:eb:00:43:e1:79:d7:d7:73:60:a2:7e:bf:4a:c2:21:6f:
         48:d1:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org