Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3232203d3e20323639303936.roa
File:                     3137372e33392e382e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier:          xaLw/0lzjYz/73LpD3lYEm1HWFlWvJiu8IrdFwcZzm4=
Subject key identifier:   13:8C:5F:20:81:04:3B:75:C0:0A:FC:E6:8B:FF:03:6A:CD:8C:74:CC
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       3205A861B7510EE9CE8B58BB6495917A6FD2F34F
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3232203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:42 +0000
ROA not before:           Mon 29 Jul 2024 15:47:42 +0000
ROA not after:            Mon 28 Jul 2025 15:52:42 +0000
asID:                     269096
IP address blocks:        177.39.8.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:05:a8:61:b7:51:0e:e9:ce:8b:58:bb:64:95:91:7a:6f:d2:f3:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:42 2024 GMT
            Not After : Jul 28 15:52:42 2025 GMT
        Subject: CN=138C5F2081043B75C00AFCE68BFF036ACD8C74CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:0e:d7:92:a9:e3:e9:26:3e:f2:8b:1c:07:
                    a8:4b:cc:c1:fd:75:3c:73:95:60:ac:ca:6c:a3:52:
                    a6:6f:a2:cb:e9:ad:44:92:69:17:79:e1:0b:cb:1a:
                    d1:05:9c:08:73:fa:2c:30:98:38:b6:39:41:fe:8c:
                    98:ca:e8:47:b1:fa:78:e8:08:a0:7f:48:30:69:56:
                    6e:da:33:18:a9:e5:3d:72:88:c7:c1:56:56:9f:a6:
                    62:90:36:a8:93:51:c0:08:bb:93:71:68:8c:09:0c:
                    52:e9:b5:20:db:82:97:92:31:c5:d9:32:3e:76:08:
                    5f:85:5d:a6:c7:c7:59:a5:11:3a:51:40:30:26:be:
                    c6:7b:38:0c:43:7b:46:65:74:ba:35:15:e2:52:98:
                    71:30:86:35:50:38:ce:9a:16:0a:50:e9:ff:1e:29:
                    ba:29:db:cc:2b:ca:6c:0f:89:b9:27:4a:4a:d4:e6:
                    ae:a2:4d:31:93:e4:21:a6:ca:82:83:48:60:bb:5b:
                    1d:99:a4:5f:ee:8c:78:e7:f8:f3:a1:e0:f7:75:05:
                    39:a9:2e:45:3d:77:8c:8e:67:fb:4b:74:3d:73:53:
                    a5:ca:e5:56:a8:01:ef:f8:68:dc:97:78:4e:fb:73:
                    c4:27:5d:22:84:44:fd:ea:4e:98:5b:ac:ca:d6:e2:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8C:5F:20:81:04:3B:75:C0:0A:FC:E6:8B:FF:03:6A:CD:8C:74:CC
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/3137372e33392e382e302f32322d3232203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:3e:d2:36:17:c7:9e:1f:27:7a:84:7a:22:f6:1c:d9:40:c1:
         29:8e:72:b7:1f:6d:92:c5:f6:42:0f:a9:96:83:b5:04:4d:6a:
         fd:b2:d6:7f:4f:22:69:c0:6f:6c:a2:73:04:f3:56:0a:ee:84:
         1b:e1:79:7c:80:24:1b:5f:ff:e7:aa:0d:f4:21:ab:d0:6f:1c:
         0e:51:49:25:6b:1b:0b:87:13:40:d8:34:c1:ce:c9:92:96:b0:
         73:3a:9c:93:f7:1e:4f:64:f8:a5:03:31:ba:fc:45:fc:42:e4:
         b4:9c:17:3b:73:17:fe:9d:b6:53:b3:a4:b4:77:cb:1e:9b:52:
         77:e9:cf:bb:64:e9:f2:20:86:3c:25:53:34:03:be:b8:63:f2:
         0d:e6:80:ae:8b:65:ec:08:b8:89:0e:28:99:ca:5f:54:95:ca:
         44:52:d7:c7:bb:89:68:3c:1c:01:4d:a4:30:6b:6e:72:64:5a:
         cc:3c:90:a7:16:49:0f:01:7d:0d:b7:97:a0:7c:1b:ea:8b:03:
         2c:bc:85:03:db:e1:a6:76:4d:51:46:22:7a:de:c2:38:d9:6e:
         bd:cd:10:c7:bb:f7:43:9b:6a:7c:32:04:a6:5c:ac:15:bf:f7:
         a3:21:d2:7a:d3:8d:c5:3c:78:9f:b2:39:0c:30:11:35:00:ba:
         e7:88:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org