Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/1/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa
File:                     32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa (raw, json)
Hash identifier:          hCEXPKn0IqcqS/Q8OjAN15EHgLp15QQBabonEN6DLDo=
Subject key identifier:   8B:45:37:8C:E8:8A:A9:F0:ED:A8:83:C8:68:90:F2:FF:EA:8C:A0:6F
Certificate issuer:       /CN=55A77C322BB57207D19D2E1A462B09F3ADB96733
Certificate serial:       27B6BEB6876C125175A1F25FBB86985FAC19C007
Authority key identifier: 55:A7:7C:32:2B:B5:72:07:D1:9D:2E:1A:46:2B:09:F3:AD:B9:67:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55A77C322BB57207D19D2E1A462B09F3ADB96733.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/1/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa
Signing time:             Wed 03 Apr 2024 19:05:30 +0000
ROA not before:           Wed 03 Apr 2024 19:00:30 +0000
ROA not after:            Wed 02 Apr 2025 19:05:30 +0000
asID:                     270497
IP address blocks:        24.152.116.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b6:be:b6:87:6c:12:51:75:a1:f2:5f:bb:86:98:5f:ac:19:c0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55A77C322BB57207D19D2E1A462B09F3ADB96733
        Validity
            Not Before: Apr  3 19:00:30 2024 GMT
            Not After : Apr  2 19:05:30 2025 GMT
        Subject: CN=8B45378CE88AA9F0EDA883C86890F2FFEA8CA06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:2d:32:20:58:e8:e8:d5:1d:ef:04:36:2d:
                    2f:a4:2c:8e:19:91:6c:8e:31:3e:c7:76:85:26:cf:
                    ca:cb:7a:65:b2:ac:13:9b:2d:59:9c:22:3a:44:92:
                    a3:9b:36:50:cb:5e:d2:0d:28:82:f8:c6:91:a3:3b:
                    5e:5f:fb:27:a1:95:b7:ad:e5:f9:49:ff:cf:dc:94:
                    85:c2:d3:3b:0f:c8:3e:65:f7:41:26:f8:30:d2:2c:
                    3b:3c:6b:28:e9:6e:e6:32:02:04:0a:08:c0:07:0b:
                    2d:71:11:4d:39:bc:45:12:34:00:b6:d4:fa:ab:b8:
                    b4:7f:0d:4d:43:ab:61:ab:f3:58:b5:f8:fd:9f:4e:
                    be:4f:78:63:62:86:63:02:64:1c:4c:83:38:b2:f6:
                    8b:cf:b1:54:17:01:7d:26:41:e5:a2:bf:45:1e:b3:
                    f3:24:cc:d7:66:0d:8a:6e:96:b6:00:f6:9c:4b:f9:
                    5c:25:ba:bd:3c:bd:92:01:5e:6d:17:1a:b0:21:b5:
                    2d:57:67:28:10:9f:04:e5:14:67:c3:d2:89:be:55:
                    8b:ad:c3:28:dc:4e:65:74:f7:5e:fe:8f:0a:04:35:
                    5c:3b:35:1d:14:e6:7b:5c:a5:77:db:4b:a2:4d:3e:
                    e4:03:b0:76:36:01:c4:05:65:ef:d9:b2:09:87:e1:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:45:37:8C:E8:8A:A9:F0:ED:A8:83:C8:68:90:F2:FF:EA:8C:A0:6F
            X509v3 Authority Key Identifier:
                keyid:55:A7:7C:32:2B:B5:72:07:D1:9D:2E:1A:46:2B:09:F3:AD:B9:67:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/1/55A77C322BB57207D19D2E1A462B09F3ADB96733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/55A77C322BB57207D19D2E1A462B09F3ADB96733.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/1/32342e3135322e3131362e302f32332d3332203d3e20323730343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:db:4c:9a:84:96:9b:8f:58:6d:df:12:55:bf:d2:e4:a5:
         a1:84:54:64:78:ab:c0:3e:fa:17:00:6e:80:29:70:b6:18:0d:
         f4:c0:67:c7:d3:65:83:9b:5c:bb:0d:30:73:a8:59:ed:16:fc:
         12:ab:8e:aa:7e:1a:80:45:4e:00:4f:7a:11:22:6c:ae:e8:09:
         31:fe:63:8e:06:47:07:4e:9d:c7:b1:ee:f8:75:e3:1d:17:73:
         5c:6f:85:a8:5e:23:a5:58:9e:fa:57:e0:f5:b6:38:1f:7b:ab:
         34:7d:04:f5:ef:29:4c:f1:16:3e:d1:d3:87:9d:08:60:35:c3:
         bc:95:40:51:22:5f:2b:43:25:52:3a:72:27:3b:aa:e0:ca:2b:
         2c:ed:c2:80:a5:e7:bd:98:ec:ad:6b:68:66:39:e4:5f:0a:b9:
         26:aa:13:2b:88:00:dd:61:5f:06:c7:22:d2:55:e1:aa:ce:84:
         88:79:6c:4d:f4:d0:cf:21:61:81:13:e0:02:99:4c:37:49:99:
         67:b6:c4:4c:1a:7b:15:62:0f:69:f7:25:98:b8:7d:23:ea:4c:
         bc:e7:e3:02:06:d8:44:11:13:61:f6:fb:9a:90:29:6a:c7:56:
         db:7b:8c:7a:17:08:20:24:cd:f1:af:03:9e:92:d3:01:0c:3c:
         a2:ab:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 09:40:35 2024 by rpki-client on console-ams.rpki-client.org