Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa
File:                     3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier:          uMGQtX1D/HHf2yboedmnsrQ4rEfz0NxowU87QN+uF6I=
Subject key identifier:   D7:15:DA:7A:1D:BD:18:12:0B:A7:E0:83:08:52:48:BE:28:CA:BE:EC
Certificate issuer:       /CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
Certificate serial:       54A40845C663D4B5577A23B21CB8727C5F66E50E
Authority key identifier: 14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa
Signing time:             Thu 04 Apr 2024 15:39:42 +0000
ROA not before:           Thu 04 Apr 2024 15:34:42 +0000
ROA not after:            Thu 03 Apr 2025 15:39:42 +0000
asID:                     270595
IP address blocks:        177.152.108.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a4:08:45:c6:63:d4:b5:57:7a:23:b2:1c:b8:72:7c:5f:66:e5:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
        Validity
            Not Before: Apr  4 15:34:42 2024 GMT
            Not After : Apr  3 15:39:42 2025 GMT
        Subject: CN=D715DA7A1DBD18120BA7E083085248BE28CABEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:f8:e4:f7:eb:c7:84:65:28:22:95:98:78:
                    45:5d:4a:ce:27:23:0f:84:d5:6e:fb:61:55:ca:9c:
                    b0:24:30:9f:26:ea:44:74:fd:3f:45:07:2e:7c:9f:
                    de:3c:92:f5:b2:b7:54:8b:b2:7c:c3:b8:6e:31:c9:
                    c0:76:b9:a1:5a:3a:85:43:1f:7a:fb:ed:43:be:49:
                    df:ba:de:b5:cd:54:dc:19:33:20:cc:67:b3:b5:90:
                    9c:db:99:ad:f5:f7:9e:fe:14:4f:ab:33:c3:ab:c9:
                    95:f9:d6:3c:16:ae:8e:86:6e:42:9a:08:10:ee:41:
                    89:9d:de:ee:5a:15:9c:0c:ef:86:a3:13:4f:9c:75:
                    92:0b:15:b1:44:18:ac:c2:06:c0:8a:16:c5:fb:11:
                    b0:b6:fd:7e:ea:0f:37:55:f4:39:4b:84:02:08:d4:
                    31:36:54:f3:2d:8c:bd:56:6a:12:58:41:52:02:c6:
                    7c:f0:0e:33:50:d5:db:ef:63:65:72:57:c2:70:6c:
                    57:50:dc:e6:aa:46:aa:fc:9d:ac:fb:4d:7f:ea:b5:
                    3d:54:f0:2f:f0:c5:f0:1a:b6:36:fa:97:80:81:43:
                    6a:98:f4:5b:30:40:08:98:c1:40:21:a9:75:ca:7d:
                    25:09:9a:cb:5b:69:81:6a:96:71:e9:fa:71:cf:cf:
                    de:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:15:DA:7A:1D:BD:18:12:0B:A7:E0:83:08:52:48:BE:28:CA:BE:EC
            X509v3 Authority Key Identifier:
                keyid:14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3130382e302f32342d3234203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:14:bb:9e:c9:c6:10:1a:e0:bc:ae:9d:8d:a3:10:cf:6a:
         d2:f2:68:72:50:e4:31:11:68:03:7a:61:4b:49:dc:b4:f0:b8:
         ff:f2:c4:04:cc:4d:c2:10:6f:55:40:0d:6a:7c:5b:18:2e:75:
         87:c2:74:09:36:61:71:db:af:57:45:ce:81:b8:1c:dd:af:20:
         73:67:82:7c:0e:90:87:1a:c4:ae:01:ce:f1:3d:38:b5:b6:99:
         d1:91:a1:fd:d5:c4:42:14:15:34:20:78:56:ad:8b:0c:86:d7:
         57:3f:8f:96:4b:0e:13:b1:db:68:7f:3e:35:22:71:ff:55:ee:
         f5:2a:ab:ca:33:e8:24:07:20:91:20:d9:98:79:a7:98:b0:aa:
         ce:f9:43:e8:15:58:89:7e:da:37:41:d6:08:a4:68:88:fe:9f:
         47:81:5f:d1:f6:bd:8a:76:1d:d2:17:52:c6:51:7f:c9:ef:bb:
         51:59:3b:7d:62:45:66:f5:d0:05:49:68:e8:2f:92:8e:e6:f9:
         a7:06:5a:db:24:cf:4c:ad:14:aa:38:49:5f:1b:92:4e:91:dc:
         62:57:c4:03:14:c3:3d:89:76:18:e7:2f:8a:38:2f:3b:3c:26:
         6a:54:af:5c:a8:ac:0e:b7:32:b4:7c:1d:3a:8a:97:7e:92:c2:
         ed:d8:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 03:32:21 2024 by rpki-client on console-fra.rpki-client.org