Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
File:                     3137372e37332e36302e302f32322d3234203d3e20323633343638.roa (raw, json)
Hash identifier:          mlnyWBO/SG4Zzy9aluu9MAu0XFrkNb8zgrdRoPawtyY=
Subject key identifier:   85:85:0C:6E:40:15:C5:AD:00:93:1B:97:5C:4D:3B:75:5E:9B:3F:64
Certificate issuer:       /CN=F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E
Certificate serial:       086E53E2379A65CA7E52F774F1DFBE48412D885B
Authority key identifier: F5:4B:CA:C2:B5:E4:1C:5B:45:10:52:14:EA:BE:F2:AE:21:24:ED:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa
Signing time:             Thu 07 Nov 2024 13:35:26 +0000
ROA not before:           Thu 07 Nov 2024 13:30:26 +0000
ROA not after:            Thu 06 Nov 2025 13:35:26 +0000
asID:                     263468
IP address blocks:        177.73.60.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6e:53:e2:37:9a:65:ca:7e:52:f7:74:f1:df:be:48:41:2d:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E
        Validity
            Not Before: Nov  7 13:30:26 2024 GMT
            Not After : Nov  6 13:35:26 2025 GMT
        Subject: CN=85850C6E4015C5AD00931B975C4D3B755E9B3F64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:0c:ce:ea:b3:52:bc:d9:e7:f9:97:43:7b:
                    0a:4b:d7:4c:a2:f2:d6:ee:12:e5:5d:8a:36:2b:3f:
                    aa:34:c5:c7:b5:28:b4:0a:6d:c2:d5:23:77:72:d0:
                    0d:2c:34:86:de:4e:66:53:5c:5e:17:dd:2c:b3:41:
                    5a:d0:bb:6b:29:e4:79:54:0f:66:4c:cd:9d:7a:2f:
                    43:2f:ee:10:4f:50:43:df:c7:20:d6:44:69:a7:23:
                    93:0a:54:f9:bf:ae:a0:49:eb:27:a1:5e:6e:91:98:
                    d3:cf:d5:d2:b9:dc:0f:0a:d0:fe:c1:d8:19:d6:f7:
                    8b:d8:c7:8f:d4:a3:09:29:80:e4:fd:3d:48:31:30:
                    f0:3d:59:c6:e5:bd:d8:25:75:e0:a3:a3:c3:88:66:
                    93:c6:18:51:08:f4:a7:14:f5:f2:8c:89:b8:97:88:
                    b9:96:58:f9:49:24:d2:68:dc:9f:72:4e:a3:31:2a:
                    fd:ba:65:98:42:b0:30:10:3a:2d:86:ba:be:8f:bd:
                    14:24:b5:a3:97:45:16:1a:57:02:64:24:c4:65:8e:
                    7d:bf:51:05:d1:e2:d5:1e:4e:17:bf:2b:68:49:72:
                    8f:bc:1d:80:dd:4f:33:69:7c:69:1c:2c:4e:94:c0:
                    7c:ac:58:97:ff:bc:e8:3e:ec:cf:79:8c:05:e3:d2:
                    dc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:85:0C:6E:40:15:C5:AD:00:93:1B:97:5C:4D:3B:75:5E:9B:3F:64
            X509v3 Authority Key Identifier:
                keyid:F5:4B:CA:C2:B5:E4:1C:5B:45:10:52:14:EA:BE:F2:AE:21:24:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3137372e37332e36302e302f32322d3234203d3e20323633343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:e6:f8:34:f2:fd:fb:46:9f:26:9f:2c:32:fe:f6:b3:33:
         0d:10:72:18:50:78:c8:27:ee:44:09:8f:84:76:d7:d6:f5:6f:
         e3:69:55:3f:50:93:28:2e:1b:52:65:11:c0:ca:49:52:76:d6:
         ea:6b:94:f4:d8:de:70:33:bd:bb:d6:74:7c:12:30:e3:6a:d7:
         4b:b9:13:37:b6:98:6f:4d:fd:ab:c7:55:22:23:dc:86:7d:b5:
         b2:27:82:27:3a:93:46:4b:f5:d9:8e:ef:88:64:51:0a:17:68:
         e9:f6:00:22:64:d7:8a:0b:2b:66:27:25:18:b1:82:54:15:43:
         c1:8e:e0:e1:3b:8f:1b:3b:0b:48:e0:43:a6:f9:8e:44:f2:de:
         b8:3e:be:e7:b9:15:0b:0c:ca:69:68:d7:10:6c:9a:bc:d5:0f:
         5b:31:60:bb:fc:4d:e4:aa:4f:b2:1b:ae:cb:d7:2e:69:17:f1:
         97:0f:d6:fb:39:2b:e4:4c:ae:24:1f:a2:a1:7d:d8:e1:b6:65:
         61:df:4e:37:27:e8:ee:30:32:18:5e:fc:6d:80:1e:ae:3b:be:
         3f:81:42:3d:f9:43:d8:59:f0:5d:9d:a9:ee:0a:9f:df:ae:4c:
         93:56:b0:bc:ce:bd:7f:1d:55:55:82:39:5c:f0:90:bd:9d:d7:
         02:b5:b6:58
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCG5T4jeaZcp+Uvd08d++SEEtiFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU0QkNBQzJCNUU0MUM1QjQ1MTA1MjE0RUFCRUYyQUUy
MTI0RUQ2RTAeFw0yNDExMDcxMzMwMjZaFw0yNTExMDYxMzM1MjZaMDMxMTAvBgNV
BAMTKDg1ODUwQzZFNDAxNUM1QUQwMDkzMUI5NzVDNEQzQjc1NUU5QjNGNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftAzO6rNSvNnn+ZdDewpL10yi
8tbuEuVdijYrP6o0xce1KLQKbcLVI3dy0A0sNIbeTmZTXF4X3SyzQVrQu2sp5HlU
D2ZMzZ16L0Mv7hBPUEPfxyDWRGmnI5MKVPm/rqBJ6yehXm6RmNPP1dK53A8K0P7B
2BnW94vYx4/UowkpgOT9PUgxMPA9WcblvdgldeCjo8OIZpPGGFEI9KcU9fKMibiX
iLmWWPlJJNJo3J9yTqMxKv26ZZhCsDAQOi2Gur6PvRQktaOXRRYaVwJkJMRljn2/
UQXR4tUeThe/K2hJco+8HYDdTzNpfGkcLE6UwHysWJf/vOg+7M95jAXj0twbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhYUMbkAVxa0AkxuXXE07dV6bP2QwHwYDVR0j
BBgwFoAU9UvKwrXkHFtFEFIU6r7yriEk7W4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk41WTYyNWduVEFOUGlWbVRMdE54NVA2UkpIdE1FUmNlc0tjZzNxY0Vh
blkvMC9GNTRCQ0FDMkI1RTQxQzVCNDUxMDUyMTRFQUJFRjJBRTIxMjRFRDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1NEJDQUMyQjVFNDFDNUI0
NTEwNTIxNEVBQkVGMkFFMjEyNEVENkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJONVk2MjVnblRBTlBpVm1UTHROeDVQNlJKSHRNRVJjZXNLY2czcWNFYW5ZLzAv
MzEzNzM3MmUzNzMzMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsUk8MA0GCSqGSIb3DQEBCwUAA4IBAQCMtOb4NPL9
+0afJp8sMv72szMNEHIYUHjIJ+5ECY+EdtfW9W/jaVU/UJMoLhtSZRHAyklSdtbq
a5T02N5wM7271nR8EjDjatdLuRM3tphvTf2rx1UiI9yGfbWyJ4InOpNGS/XZju+I
ZFEKF2jp9gAiZNeKCytmJyUYsYJUFUPBjuDhO48bOwtI4EOm+Y5E8t64Pr7nuRUL
DMppaNcQbJq81Q9bMWC7/E3kqk+yG67L1y5pF/GXD9b7OSvkTK4kH6KhfdjhtmVh
3043J+juMDIYXvxtgB6uO74/gUI9+UPYWfBdnanuCp/frkyTVrC8zr1/HVVVgjlc
8JC9ndcCtbZY
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org