Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
File:                     3137372e38362e32342e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier:          +QzcAWBRq560J3vcndcHncSA+G6ahPUnxl0Psgz/Ywk=
Subject key identifier:   D1:4B:61:1C:1D:DE:09:C7:B9:99:C4:E0:66:43:15:9D:23:31:C4:D5
Certificate issuer:       /CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
Certificate serial:       1C60AA919DA5B2192B43EE9ABBFE0D946F257D3E
Authority key identifier: 14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa
Signing time:             Sat 27 Jul 2024 23:23:00 +0000
ROA not before:           Sat 27 Jul 2024 23:18:00 +0000
ROA not after:            Sat 26 Jul 2025 23:23:00 +0000
asID:                     52566
IP address blocks:        177.86.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:aa:91:9d:a5:b2:19:2b:43:ee:9a:bb:fe:0d:94:6f:25:7d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14B962ABE21D40B706A7569A8F9E3D36A760B30A
        Validity
            Not Before: Jul 27 23:18:00 2024 GMT
            Not After : Jul 26 23:23:00 2025 GMT
        Subject: CN=D14B611C1DDE09C7B999C4E06643159D2331C4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:40:d1:61:ea:24:e6:bf:d6:5b:a0:65:6d:
                    be:8c:73:b5:ac:72:ec:ca:f1:d1:98:3e:fa:e2:10:
                    83:48:f9:d9:09:1d:97:75:bb:e1:fb:ed:8a:3d:4b:
                    81:b6:d2:6b:2e:05:b1:70:ce:e8:cf:70:95:0f:6f:
                    2d:0b:18:03:74:eb:65:ae:82:c5:4a:37:45:22:6f:
                    e3:68:26:ad:ec:47:68:ac:97:a7:6e:3f:54:75:37:
                    8d:e6:49:32:cd:2f:f6:d5:72:61:a6:f0:94:b7:24:
                    9f:27:55:bb:30:be:e9:ec:b2:11:c8:9e:a8:79:a7:
                    9d:a4:89:2d:2a:40:dd:85:83:15:2b:03:cb:6f:06:
                    eb:6b:99:63:fe:a6:09:19:38:4f:13:f4:12:42:57:
                    d0:b6:df:84:7a:9d:09:d9:0d:08:fd:e8:dc:2f:5d:
                    96:ca:95:73:9d:d6:70:d4:ec:36:a2:45:f7:1f:d1:
                    8b:1a:29:1e:1c:09:a5:50:54:d9:54:da:6d:57:32:
                    bd:8f:13:b0:71:99:ba:49:12:1a:0e:c0:eb:68:ad:
                    fe:55:da:fb:8a:70:37:7b:f8:fe:cb:cd:04:ab:39:
                    0c:27:2e:e0:ee:fb:a8:4a:07:d4:18:fe:47:94:b4:
                    c2:88:8d:e8:71:26:04:08:70:b7:49:72:23:b0:1c:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:61:1C:1D:DE:09:C7:B9:99:C4:E0:66:43:15:9D:23:31:C4:D5
            X509v3 Authority Key Identifier:
                keyid:14:B9:62:AB:E2:1D:40:B7:06:A7:56:9A:8F:9E:3D:36:A7:60:B3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/14B962ABE21D40B706A7569A8F9E3D36A760B30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14B962ABE21D40B706A7569A8F9E3D36A760B30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3137372e38362e32342e302f32322d3234203d3e203532353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:3c:a8:62:19:64:45:38:53:6a:e3:9a:98:24:b9:61:33:c3:
         1d:01:db:db:c3:56:6e:c3:bb:7c:6d:0b:ce:b7:13:1d:57:08:
         f6:0d:4a:49:3a:d8:da:14:de:b2:4e:cf:f3:2b:1b:84:b1:8e:
         6b:1f:64:e4:56:61:d9:fb:14:00:5b:d8:bb:e8:8b:19:c5:bf:
         f6:a3:e7:6b:7c:1c:0b:2b:63:0d:6a:af:77:a9:2b:5e:da:21:
         4a:8a:1f:95:11:48:e4:ce:1d:93:07:84:ed:9d:be:0e:12:5c:
         a1:32:78:f5:86:4e:16:c3:04:c6:4d:a5:9b:80:a1:ec:86:c8:
         a4:12:1e:55:2d:70:8a:66:d8:f2:e9:de:06:8f:17:1b:21:4c:
         e0:e3:3b:62:45:08:dc:cf:ad:2b:6c:46:a4:14:59:36:a2:d7:
         c5:1e:e2:fd:33:63:35:21:d2:24:f8:a9:84:9a:2e:e7:c1:1e:
         81:a3:8d:c1:91:c8:d3:7a:0f:a1:e7:33:c1:d6:48:bc:52:fe:
         15:f9:2e:0e:53:8d:31:56:bb:65:99:e5:dd:6f:ba:44:c5:62:
         4f:0a:97:87:7d:4a:fa:11:b5:60:a2:aa:68:ca:fc:60:48:ed:
         e8:a1:ea:57:0c:01:32:c0:de:26:68:f5:db:66:64:89:a7:1b:
         ca:02:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:03:34 2024 by rpki-client on console-fra.rpki-client.org