Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa
File:                     3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa (raw, json)
Hash identifier:          bNBxz6LUfo9hl5nQTpBnZOQ84QxyLx65shmMcOFXMZ4=
Subject key identifier:   D4:C5:90:A9:97:70:84:92:02:61:F1:E8:F8:AD:1D:B3:78:F3:DD:85
Certificate issuer:       /CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
Certificate serial:       166605B5AAA60BA23351C36C2FDA80E0D377DAB9
Authority key identifier: 14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa
Signing time:             Thu 04 Apr 2024 15:39:43 +0000
ROA not before:           Thu 04 Apr 2024 15:34:43 +0000
ROA not after:            Thu 03 Apr 2025 15:39:43 +0000
asID:                     270595
IP address blocks:        177.152.111.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:66:05:b5:aa:a6:0b:a2:33:51:c3:6c:2f:da:80:e0:d3:77:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14F987C7F3964A2F6A098312E90B376D61A9AA2C
        Validity
            Not Before: Apr  4 15:34:43 2024 GMT
            Not After : Apr  3 15:39:43 2025 GMT
        Subject: CN=D4C590A9977084920261F1E8F8AD1DB378F3DD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:06:0d:74:7f:b8:fe:5c:ef:af:99:5f:0c:
                    3c:42:35:c0:6e:20:32:53:5a:9d:fe:38:f6:81:08:
                    0f:66:92:0b:5d:02:50:96:1c:b5:ae:8e:2d:57:e9:
                    21:d3:5f:56:57:13:08:2c:6a:7d:6a:76:25:e9:ed:
                    69:49:c8:65:b0:97:fe:60:a9:ff:5a:4d:89:a8:54:
                    3e:54:e1:98:2b:39:09:2e:3e:44:d4:be:e6:22:07:
                    f4:dd:69:dd:4b:43:2a:49:e4:b4:dc:47:03:63:26:
                    95:54:77:4f:26:37:a3:ee:fe:11:87:f2:82:02:9d:
                    9e:94:f0:86:64:73:68:c8:c0:eb:dc:b7:83:f4:2f:
                    9d:ac:68:3f:c5:31:1f:ee:48:06:c3:ac:8d:41:32:
                    25:a2:53:2e:e6:c8:83:1a:9e:7a:5e:e4:b4:9d:00:
                    93:2a:cd:42:78:8c:82:59:8e:80:78:26:90:2d:ae:
                    7b:05:df:54:72:90:5e:9a:c4:00:d9:1c:c6:72:88:
                    37:25:7b:fc:4d:cb:02:3c:a8:46:38:66:e3:69:81:
                    92:66:50:ac:5a:7b:62:31:a6:5c:3d:72:37:af:48:
                    d6:3e:81:f8:a6:f6:f8:85:2d:37:48:44:7d:f9:64:
                    65:2c:d8:ae:9a:4b:c8:62:dd:b3:24:89:05:8c:06:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C5:90:A9:97:70:84:92:02:61:F1:E8:F8:AD:1D:B3:78:F3:DD:85
            X509v3 Authority Key Identifier:
                keyid:14:F9:87:C7:F3:96:4A:2F:6A:09:83:12:E9:0B:37:6D:61:A9:AA:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14F987C7F3964A2F6A098312E90B376D61A9AA2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhY3YCDX37x9vLTGSM4xm8pSqnF5gUZ58wu5QHJCqRT8/1/3137372e3135322e3131312e302f32342d3234203d3e20323730353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:1a:aa:be:eb:1f:c5:4a:39:4d:b5:8f:fe:e1:78:c7:f4:
         06:c5:fd:54:49:01:a6:ec:5b:f2:85:7b:e8:82:1b:0b:9e:2a:
         8b:c3:e5:47:9c:d8:cc:91:48:c2:8e:69:ad:40:a5:34:ed:c8:
         aa:31:f1:d7:01:02:48:3e:8e:a9:bf:a2:47:95:ad:0c:4b:0c:
         41:32:b5:83:1c:92:83:b6:a8:85:26:99:2f:76:1d:4e:18:dc:
         dc:8c:9e:a4:cb:ad:b8:b6:cf:3e:d3:41:97:a8:c0:e9:da:03:
         3f:a3:e9:38:c7:d5:a4:fb:cd:0c:63:57:cf:f2:e7:c5:6f:9b:
         90:a1:19:d9:e6:d9:59:35:b2:a2:37:ff:54:5f:ad:c9:a0:95:
         d3:8a:0a:b7:9e:76:21:f6:16:c2:3c:78:5a:3d:dd:c2:61:74:
         15:f5:ce:3a:cc:9c:1b:30:37:58:f8:6b:a9:93:eb:28:e0:4e:
         0e:7f:72:bb:74:d3:fd:92:59:59:7c:f2:c9:f9:19:c8:25:3b:
         95:0f:e7:de:8c:4f:49:9b:de:aa:f6:f3:16:da:ae:1c:06:7f:
         1e:5b:c0:68:0a:31:22:ce:33:bb:d1:43:0e:2a:42:0d:0d:50:
         79:6d:f7:e6:4b:aa:49:cd:53:e7:ce:0d:77:19:20:a0:13:73:
         51:8d:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 03:32:21 2024 by rpki-client on console-fra.rpki-client.org