Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32332d3233203d3e20323633353733.roa
File:                     3137372e3138342e3231362e302f32332d3233203d3e20323633353733.roa (raw, json)
Hash identifier:          1O3zadsLAWXGtYVCVWeVacXAbfSggk+lPVH79leTLm8=
Subject key identifier:   F7:0F:F3:63:30:07:0E:7D:6B:94:03:8C:3A:CB:E6:05:04:E1:25:C4
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       0AB0A9AE71F431A0EEEA3FEEF3408F06F3A46F72
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32332d3233203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:24 +0000
ROA not before:           Wed 12 Jul 2023 14:15:24 +0000
ROA not after:            Wed 10 Jul 2024 14:20:24 +0000
asID:                     263573
IP address blocks:        177.184.216.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b0:a9:ae:71:f4:31:a0:ee:ea:3f:ee:f3:40:8f:06:f3:a4:6f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:24 2023 GMT
            Not After : Jul 10 14:20:24 2024 GMT
        Subject: CN=F70FF36330070E7D6B94038C3ACBE60504E125C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:52:c4:c8:88:58:9f:eb:6e:57:2e:f8:0e:ea:
                    41:ec:4f:42:8c:20:92:e9:42:b5:9c:73:e7:1c:24:
                    94:ae:e5:72:f6:70:74:3d:de:02:44:0b:27:b3:b6:
                    9a:49:85:1b:37:71:2e:42:2c:4e:72:86:7a:cb:42:
                    72:64:9c:57:08:ad:04:3d:4c:2a:6e:a0:12:49:65:
                    b1:ec:0e:78:14:d3:49:5f:59:2f:83:47:b4:d6:f4:
                    d2:46:5b:6b:67:72:ca:a0:cd:4e:66:bd:0d:5c:7c:
                    9b:68:f5:da:a5:d1:9e:62:c3:f8:68:c6:47:66:c4:
                    8f:d3:5f:e3:95:3e:9f:36:57:02:cd:0e:2d:7c:63:
                    a0:50:dd:15:10:e1:45:87:10:97:65:e8:07:57:a7:
                    c0:be:7e:9f:2f:47:67:bb:e1:70:f6:5b:ab:dc:da:
                    e9:3d:30:4b:d8:f9:60:96:15:db:d4:d0:03:f8:f7:
                    f4:81:ab:05:2e:d5:f7:68:6f:cd:72:ff:0a:2d:c9:
                    d4:be:1c:4e:6f:d6:26:21:dc:d4:8e:bd:38:6f:0b:
                    ef:e5:38:8e:2b:e0:24:2d:32:75:e0:5d:8d:f3:55:
                    8e:03:c2:3d:7e:b2:53:be:bf:0d:8b:6f:ab:2f:ff:
                    76:5e:e1:ec:4d:9b:db:12:42:18:e4:0e:ef:63:33:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0F:F3:63:30:07:0E:7D:6B:94:03:8C:3A:CB:E6:05:04:E1:25:C4
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231362e302f32332d3233203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:1b:47:ac:1f:f1:38:79:76:7c:45:13:08:40:d8:70:6b:
         ba:7e:23:66:47:3a:80:0a:c8:a9:7f:d0:d5:b8:3e:90:90:ac:
         b3:54:d7:ef:69:9c:a5:90:6a:84:92:20:45:02:95:e0:0c:11:
         30:53:62:53:fe:c8:c3:d0:16:40:20:31:fd:d9:9b:cf:51:70:
         f9:02:7a:d8:44:56:b4:af:9f:b0:09:26:a1:9d:0e:ed:50:d8:
         8d:10:18:32:33:91:ad:ce:63:b4:d4:32:70:f8:ce:db:df:4d:
         83:01:c7:cb:a1:97:57:b3:1b:53:24:b9:b6:03:61:8b:79:da:
         00:30:17:2c:08:69:77:c6:4c:39:60:2d:c2:0c:bf:13:5c:9c:
         11:74:90:94:4c:a1:3b:0f:47:fb:c8:b4:f1:e9:60:40:fa:00:
         ae:04:55:aa:2e:d4:6a:06:3f:d4:b4:10:96:1c:76:b7:dc:54:
         26:18:4e:a1:11:b2:04:20:c2:a9:66:e6:b4:d8:6a:7a:fb:51:
         95:fc:86:38:9e:f5:f5:78:01:ca:5e:20:06:be:ee:a5:a7:22:
         e3:ec:1f:d1:b4:6d:c3:1d:13:74:3f:9b:a0:78:58:8d:17:42:
         59:c7:57:89:68:cf:f4:28:94:03:9d:09:60:98:95:3d:76:34:
         75:df:84:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:23 2023 by rpki-client on console-ams.rpki-client.org