Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3232203d3e20323633353733.roa
File:                     3137372e3138342e3231362e302f32322d3232203d3e20323633353733.roa (raw, json)
Hash identifier:          ks8ERl/jt/8Bu4g+b06dqsUyNTPg9baL1gJ7E6Yfqzs=
Subject key identifier:   66:D9:69:BE:48:81:D7:1E:71:19:F6:62:F5:D3:18:FD:AA:15:12:DF
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       40103BC42AB812BC2B54DFD749F451952A34A752
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3232203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:22 +0000
ROA not before:           Wed 12 Jul 2023 14:15:22 +0000
ROA not after:            Wed 10 Jul 2024 14:20:22 +0000
asID:                     263573
IP address blocks:        177.184.216.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:10:3b:c4:2a:b8:12:bc:2b:54:df:d7:49:f4:51:95:2a:34:a7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:22 2023 GMT
            Not After : Jul 10 14:20:22 2024 GMT
        Subject: CN=66D969BE4881D71E7119F662F5D318FDAA1512DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:f6:16:5e:93:34:20:0f:49:15:58:57:dc:
                    28:0d:2a:03:62:bd:68:d4:cf:a4:af:43:04:26:8c:
                    14:2d:c3:6f:f3:7d:a3:43:f6:fe:87:44:ac:c5:bb:
                    78:86:49:7c:69:45:77:d7:36:13:5b:aa:3a:92:83:
                    24:20:a5:0b:4b:70:9e:de:82:58:da:3c:e7:9d:8b:
                    a3:80:64:b8:e2:94:1e:8b:23:7e:4c:6f:1c:9c:56:
                    19:fd:17:43:d8:0b:be:d0:ce:d0:6e:24:73:0f:8e:
                    50:5e:4f:15:0d:cf:b9:bf:52:24:c7:27:e2:cb:e3:
                    21:23:51:fe:d5:b4:1f:8d:8a:53:e6:69:ab:5b:ee:
                    f3:29:ff:f1:6f:25:44:9d:c7:07:ba:fb:6e:4d:69:
                    5a:88:ec:d0:95:43:d1:37:83:15:11:62:23:bb:19:
                    7a:cf:13:cd:c1:5a:0f:28:62:b9:e9:07:ac:03:25:
                    f7:42:c6:1c:4d:c0:c7:9e:66:63:fd:3c:cf:42:ee:
                    0e:eb:97:a9:27:9c:6d:a2:11:d5:42:5a:bf:a7:24:
                    3c:c5:33:fd:cc:60:05:7d:f5:85:4b:61:c8:a4:81:
                    91:96:5f:75:ae:83:47:69:0a:f5:74:5b:24:8d:72:
                    e4:b4:7c:b7:a8:1c:35:91:8d:09:0d:a3:ac:37:d0:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D9:69:BE:48:81:D7:1E:71:19:F6:62:F5:D3:18:FD:AA:15:12:DF
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32322d3232203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:67:31:fb:a3:0f:40:5b:d1:2a:f0:c8:2e:5e:9d:54:9b:ff:
         9c:82:7e:bc:4b:4a:8c:49:9d:8e:7c:7e:d1:c0:45:e5:5b:da:
         4c:54:35:5f:e4:f4:b6:a3:df:0a:2e:72:4b:4c:b7:7a:b9:e5:
         18:1d:db:8b:12:79:e4:b9:f9:33:7f:7d:bd:2b:0e:0f:f4:0e:
         48:f7:07:aa:b4:c2:7b:55:89:01:77:d8:a4:37:6f:88:f5:f2:
         92:f6:cb:e0:f8:93:fc:a4:6c:05:33:b6:83:4b:ac:78:de:3e:
         66:75:e5:25:4f:50:8f:a7:0a:2b:12:c4:c1:04:a1:93:f8:bc:
         3b:bf:cf:29:5e:31:af:04:6f:a4:ee:67:d8:02:87:ff:d7:45:
         c4:58:19:84:84:ea:0f:c6:0f:7c:9e:8f:b6:8e:2e:a3:a2:6a:
         36:d9:6c:19:f7:08:21:0a:39:9b:21:ba:08:f1:2f:fd:d4:34:
         c2:06:68:e3:76:31:9f:42:2c:60:8c:9d:6b:b5:36:8b:90:1f:
         a9:e5:c0:0f:9c:8f:15:18:ae:cf:d5:b6:92:78:35:46:48:57:
         d5:0a:45:27:e8:bc:ca:ea:fa:dd:ad:bb:f3:a4:ec:95:93:d0:
         32:a7:c5:bb:30:05:c4:50:a3:53:60:b7:7c:17:1a:e7:31:7a:
         7e:b0:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:23 2023 by rpki-client on console-ams.rpki-client.org