Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa
File:                     3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa (raw, json)
Hash identifier:          cscHJAy+gvubyeh3TTczr/b4BP5TItyH2GamZial+Ds=
Subject key identifier:   EA:B6:61:B7:E5:DE:8B:FC:92:55:2D:48:56:F5:5F:A0:A1:EF:26:1D
Certificate issuer:       /CN=DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC
Certificate serial:       1F1D2BFC1FBDB2275AF4A0D1DAA1D751C3B169BC
Authority key identifier: DA:9C:5E:CB:39:C3:3F:26:56:1B:05:C5:E2:B3:29:93:AE:50:A7:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa
Signing time:             Thu 04 Apr 2024 02:49:12 +0000
ROA not before:           Thu 04 Apr 2024 02:44:12 +0000
ROA not after:            Thu 03 Apr 2025 02:49:12 +0000
asID:                     271357
IP address blocks:        177.124.108.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1d:2b:fc:1f:bd:b2:27:5a:f4:a0:d1:da:a1:d7:51:c3:b1:69:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC
        Validity
            Not Before: Apr  4 02:44:12 2024 GMT
            Not After : Apr  3 02:49:12 2025 GMT
        Subject: CN=EAB661B7E5DE8BFC92552D4856F55FA0A1EF261D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:07:a1:cc:f7:5d:a2:79:51:40:84:6c:05:
                    28:62:78:1d:34:ea:8a:86:e2:85:08:51:66:85:4b:
                    3e:7e:c1:97:5a:b8:1b:0a:c7:ce:9c:57:0f:00:93:
                    6a:0c:d2:e3:58:9b:02:05:af:db:64:fe:85:43:99:
                    6c:b1:4f:9e:d9:5d:a9:6c:32:54:32:69:0b:dc:ba:
                    3a:84:80:04:6b:b4:69:c2:2b:ee:cd:5e:98:b1:b0:
                    74:78:ec:85:21:e7:16:74:41:1a:b3:2d:34:ff:3a:
                    ef:a4:79:aa:60:3d:bf:62:77:19:8b:1c:a1:c5:b0:
                    b3:11:b9:f0:19:de:f9:8d:7b:6a:7f:02:0f:e2:92:
                    bd:34:93:73:51:b9:e3:e8:60:4b:0c:09:04:1d:51:
                    b0:25:bf:61:05:19:5f:72:e0:8e:90:41:ff:0b:23:
                    52:52:ea:e2:ea:4b:89:fe:6f:c5:23:c2:ab:9e:26:
                    dc:01:44:fa:cd:6c:7d:f9:4c:da:62:3e:de:27:16:
                    7c:d8:02:da:44:5f:d0:0c:6e:5d:64:31:05:73:4f:
                    db:e4:ab:0a:8f:c5:49:dc:a6:a2:0e:d1:8f:f7:83:
                    0b:cb:d7:cf:59:f6:e8:bd:d0:67:6b:7f:1c:54:89:
                    88:61:e2:51:37:95:60:53:b3:19:09:f7:2a:2e:69:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:61:B7:E5:DE:8B:FC:92:55:2D:48:56:F5:5F:A0:A1:EF:26:1D
            X509v3 Authority Key Identifier:
                keyid:DA:9C:5E:CB:39:C3:3F:26:56:1B:05:C5:E2:B3:29:93:AE:50:A7:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA9C5ECB39C33F26561B05C5E2B32993AE50A7BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/1/3137372e3132342e3130382e302f32332d3332203d3e20323731333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:d2:01:ef:22:e7:e1:85:bf:75:94:19:8c:ea:31:97:70:
         76:c4:5d:d2:cb:32:5c:c9:23:03:40:c6:6b:48:88:7a:ae:a7:
         80:b0:b8:ef:f2:f3:28:98:ec:11:26:07:74:b9:d0:b7:e3:61:
         81:11:e2:5d:53:56:cb:43:f2:2a:c5:5b:0c:43:64:9c:14:28:
         da:8c:38:fd:8a:43:7a:39:5a:75:ba:36:4b:f3:32:6d:26:6c:
         15:38:94:6b:cd:b1:92:9b:49:1c:d4:02:00:a9:57:ee:83:5a:
         71:a5:65:64:de:ea:8c:38:5b:91:b2:8b:ae:db:a5:11:2d:3b:
         28:f0:52:2b:8a:fc:e7:f9:a3:75:75:4d:e8:04:36:6f:22:04:
         3a:4c:6a:f7:4d:88:cb:87:f7:18:7f:d1:44:2b:70:c9:d6:93:
         09:2a:b4:f9:b6:4c:77:9b:69:67:4e:d5:93:0d:72:c7:bd:5a:
         09:f8:b5:11:6a:b8:84:5d:9f:e8:05:94:8e:c8:ac:f1:a2:f2:
         eb:11:80:b5:30:0c:5b:dc:aa:68:85:09:00:3f:86:b3:40:f0:
         d0:20:b6:55:a4:23:47:ba:c9:fb:01:f9:d4:55:50:76:65:64:
         d3:56:12:ad:fa:1d:3c:ef:fc:f5:b8:28:e2:b3:f2:d0:e3:57:
         d7:26:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 03:53:44 2024 by rpki-client on console-ams.rpki-client.org