Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
File:                     3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa (raw, json)
Hash identifier:          JG1gva8uhQhCzm5xrQSX6jeudHQsegDBqUXGik1Je2o=
Subject key identifier:   5E:CE:6E:CC:09:0E:47:01:3A:E0:E8:11:19:32:C6:31:B4:88:F5:E7
Certificate issuer:       /CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
Certificate serial:       65915C24586FBEFA9C255F0CC8D9806DCF59C455
Authority key identifier: AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa
Signing time:             Thu 04 Apr 2024 11:03:45 +0000
ROA not before:           Thu 04 Apr 2024 10:58:45 +0000
ROA not after:            Thu 03 Apr 2025 11:03:45 +0000
asID:                     263462
IP address blocks:        177.190.184.0/21 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:91:5c:24:58:6f:be:fa:9c:25:5f:0c:c8:d9:80:6d:cf:59:c4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB9F9158B8623535AF95D0D282ACBB1552914A4E
        Validity
            Not Before: Apr  4 10:58:45 2024 GMT
            Not After : Apr  3 11:03:45 2025 GMT
        Subject: CN=5ECE6ECC090E47013AE0E8111932C631B488F5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:e3:a7:78:fb:e6:e0:e6:2b:e0:77:37:87:
                    d7:49:95:b1:32:d3:8b:bf:fe:86:a2:69:d5:e9:0b:
                    eb:ba:9b:aa:d2:41:1d:6b:13:3f:48:4c:cb:fb:67:
                    9f:49:25:82:2f:7f:3f:ab:40:d4:33:31:6d:d9:5d:
                    b2:43:fa:e8:3b:08:52:9d:3f:4f:5c:35:9d:56:95:
                    21:01:e4:e6:ba:71:b0:0e:61:43:e8:d2:29:66:1a:
                    93:3d:85:68:3e:32:3b:a9:b5:6e:85:96:22:be:64:
                    d3:24:d8:c7:75:b0:a2:f4:91:98:13:00:f8:1e:52:
                    06:15:5c:27:7e:5a:bd:53:3d:25:d4:ce:e3:ef:ba:
                    69:bf:34:25:64:78:5c:ff:a3:e9:17:36:5d:ec:47:
                    21:2c:de:f4:db:b8:3c:95:80:bf:57:52:6f:09:30:
                    72:10:9a:5b:44:d0:ca:51:da:aa:43:16:84:e9:b8:
                    c5:eb:6e:c2:64:4f:d3:02:08:09:97:3b:bd:d2:41:
                    30:8e:b9:b4:f6:8b:5d:67:fe:74:8e:d2:73:cb:a4:
                    43:17:2e:97:9f:fa:ca:96:3c:92:a6:d5:0a:cc:c6:
                    e6:91:c2:dc:44:b3:4a:cb:cb:6b:78:3e:e0:d4:07:
                    12:1b:f0:fb:9d:23:93:11:a2:35:32:06:83:3d:c8:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CE:6E:CC:09:0E:47:01:3A:E0:E8:11:19:32:C6:31:B4:88:F5:E7
            X509v3 Authority Key Identifier:
                keyid:AB:9F:91:58:B8:62:35:35:AF:95:D0:D2:82:AC:BB:15:52:91:4A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB9F9158B8623535AF95D0D282ACBB1552914A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/pHQPrHVB7VHg5mLMGnVUYfvkbVqtzE2ted8C7gGFXYp/1/3137372e3139302e3138342e302f32312d3233203d3e20323633343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:b0:c1:9b:d2:1a:3e:00:0e:29:3d:5e:17:ac:ab:5e:8c:ce:
         b2:b5:8d:3c:80:8b:d7:45:bc:0e:0a:0d:0c:f7:63:69:1d:00:
         54:f5:78:3e:8a:c6:0d:30:9e:7f:be:41:99:2b:1a:ac:2a:66:
         b9:01:44:f1:e9:3d:e8:da:b5:16:92:f1:32:bd:8f:b9:0f:70:
         15:cd:8e:b8:c1:6b:a7:36:e5:4a:a5:01:be:55:d2:2c:6e:bc:
         72:a3:af:72:63:02:e9:a2:91:42:4e:64:39:c5:9b:6d:a5:1d:
         30:fc:7b:cf:0a:3f:74:38:63:ab:67:7e:6f:df:00:28:a1:00:
         fc:78:a6:59:b7:ee:d6:49:e9:17:6b:ee:94:40:66:ae:a4:81:
         4a:ab:59:ba:ff:77:15:32:bb:56:7d:ce:66:aa:85:b6:99:e6:
         84:e4:ff:08:25:ef:7f:70:58:de:bf:9f:63:ac:e3:37:2c:b9:
         81:0d:ae:87:42:ea:ab:69:74:89:4b:09:24:b8:9b:41:51:6e:
         a1:b3:7f:0d:05:aa:c7:40:3b:ac:cc:6d:4e:85:26:17:9a:54:
         7e:00:fd:0d:13:b3:b1:91:19:62:6a:b8:00:d2:cd:4d:6c:5d:
         f5:db:89:16:28:be:f6:f2:84:73:bb:90:66:a0:84:ea:a2:b4:
         4e:56:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 12:18:40 2024 by rpki-client on console-ams.rpki-client.org