Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231392e302f32342d3234203d3e20323633353733.roa
File:                     3137372e3138342e3231392e302f32342d3234203d3e20323633353733.roa (raw, json)
Hash identifier:          Age8tSFPclGFl9KF3Z2YG/teOrVVRE4a95dL0usa/6I=
Subject key identifier:   C0:F2:77:7D:69:C3:95:15:17:09:EE:DA:56:B2:2D:F8:5E:70:A3:E3
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       22D8949E150DC4F37FACA5FB5FE5C46881AF5901
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231392e302f32342d3234203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:21:56 +0000
ROA not before:           Wed 12 Jul 2023 14:16:56 +0000
ROA not after:            Wed 10 Jul 2024 14:21:56 +0000
asID:                     263573
IP address blocks:        177.184.219.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d8:94:9e:15:0d:c4:f3:7f:ac:a5:fb:5f:e5:c4:68:81:af:59:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:16:56 2023 GMT
            Not After : Jul 10 14:21:56 2024 GMT
        Subject: CN=C0F2777D69C395151709EEDA56B22DF85E70A3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:79:20:e6:9a:27:bd:95:29:8d:55:35:c3:
                    1a:d7:94:d3:a0:c3:58:c7:7b:bd:62:50:4d:c5:d0:
                    66:97:d9:8d:49:dd:26:b8:c1:a6:07:6b:1b:aa:c6:
                    08:6d:5c:2d:1e:f6:bf:d2:b9:83:ff:5b:cc:a3:f5:
                    81:ba:ef:0e:f6:04:15:46:4f:e6:f2:a4:2e:54:e2:
                    11:2e:a8:2f:d6:41:a4:1f:9b:61:bb:49:a3:0a:b6:
                    f5:00:e3:1d:d3:aa:ac:52:05:e1:64:34:bf:71:5e:
                    d3:8c:ee:1b:44:b8:1e:b6:5d:8c:e3:e6:0c:0a:18:
                    d7:d4:50:fe:56:fd:e9:c0:57:85:62:a8:fa:8a:dc:
                    fe:62:a6:7f:50:2a:48:02:44:c9:fe:7d:8b:31:e2:
                    66:24:ec:94:4e:d2:4d:9d:92:9b:43:cd:ff:73:f0:
                    b4:29:77:29:1c:1f:d8:ca:6a:63:ce:9d:b6:0d:f1:
                    e8:5c:13:f7:17:35:c3:d5:3e:b6:8b:5d:19:a9:f6:
                    ab:74:cc:32:d5:b0:90:2c:3a:02:52:9d:25:32:8c:
                    00:62:57:2c:a1:05:04:db:e1:8d:85:8c:26:84:f3:
                    2b:ca:ee:4d:5d:17:7f:58:ac:21:6c:ae:99:04:70:
                    9b:b7:cd:39:10:6c:d4:5f:e0:5d:77:3a:dc:2a:4b:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F2:77:7D:69:C3:95:15:17:09:EE:DA:56:B2:2D:F8:5E:70:A3:E3
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231392e302f32342d3234203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:da:fc:58:16:b1:f5:4d:af:8a:84:7c:dc:05:08:71:e4:2e:
         2e:df:10:1d:7a:49:6a:77:42:47:6d:4a:5a:26:a2:80:d0:a7:
         27:d1:10:a0:77:d5:31:84:39:cc:6c:29:2a:11:a9:8e:4c:06:
         cd:c4:01:cf:1e:e5:ad:a0:d1:d6:1d:ec:cc:8b:fe:77:54:1f:
         97:aa:03:a9:9d:fb:a4:3c:54:5c:10:c1:c0:21:f6:76:72:4f:
         ba:e3:37:9f:89:9f:7a:42:76:ba:eb:f8:9a:58:e7:47:4a:e2:
         3d:cc:7a:2d:e3:9e:33:a3:7e:61:12:f0:2d:c5:4a:c7:5a:d2:
         63:65:96:88:31:19:cb:a2:af:da:a3:8a:cb:b7:9f:97:d5:29:
         82:bb:37:7a:ac:03:e6:f3:b8:5f:b2:9e:af:b6:fb:b7:67:2a:
         26:57:c2:2b:f1:31:0b:cd:b2:c9:a9:cb:e8:86:ed:3c:7d:72:
         cb:60:c4:12:09:96:d3:16:1e:85:fe:b1:a4:17:35:ec:a0:b2:
         05:7a:be:5c:7f:03:ad:2e:3e:75:52:26:8e:87:b9:c3:c6:d0:
         e6:63:48:82:79:97:d4:b6:fb:e4:59:28:25:1f:e6:e7:fc:0a:
         93:3e:f0:55:6f:cf:eb:75:16:71:17:47:28:95:f2:ec:1b:09:
         83:47:02:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:38:28 2023 by rpki-client on console-fra.rpki-client.org