Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
File:                     3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa (raw, json)
Hash identifier:          8sCAIlT9dATC2POWNDCREkB9PyXAsAwPpvfgUdDvjnM=
Subject key identifier:   B8:D9:EC:8F:4E:71:E5:69:BC:5A:CF:C4:9B:CB:3F:02:96:1C:65:C3
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       06647C1C2D0679B5292222AE77D92E287D3CD551
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:07 +0000
ROA not before:           Thu 04 Apr 2024 06:24:07 +0000
ROA not after:            Thu 03 Apr 2025 06:29:07 +0000
asID:                     262452
IP address blocks:        177.52.216.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:7c:1c:2d:06:79:b5:29:22:22:ae:77:d9:2e:28:7d:3c:d5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:07 2024 GMT
            Not After : Apr  3 06:29:07 2025 GMT
        Subject: CN=B8D9EC8F4E71E569BC5ACFC49BCB3F02961C65C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:e9:38:1e:b0:b7:b0:e8:de:45:26:d1:d8:
                    0e:4e:e1:27:95:e5:dc:66:10:50:f4:9f:a1:7a:66:
                    b6:57:f2:ab:99:d5:c9:af:b6:b5:e1:9b:c4:02:d7:
                    cb:91:7c:39:cd:f6:87:03:f1:5f:8e:f2:de:2c:52:
                    7d:bc:78:ee:1d:52:aa:78:e3:b3:38:93:ce:8d:60:
                    c2:bc:35:6f:c7:40:0c:57:c4:ec:0e:7c:c4:58:68:
                    33:38:60:e1:64:f2:63:20:80:61:74:5c:ad:60:63:
                    1d:23:e8:d1:e9:43:5a:b9:d5:0f:a6:c3:ef:0e:ca:
                    da:4f:8e:bd:19:66:6b:13:ae:57:ff:e0:82:c8:78:
                    64:d2:64:ae:42:85:7c:f2:11:19:a8:bd:a3:7e:b1:
                    1a:3a:75:7e:e4:58:55:43:4c:f6:4c:ba:35:41:1f:
                    48:61:4d:23:52:74:cb:c7:fa:bd:61:37:0f:8c:d3:
                    80:da:f6:a5:cc:7b:64:46:e2:26:a6:e0:c0:e3:00:
                    f8:13:5e:ee:af:eb:72:a2:38:97:e5:dc:6e:cc:10:
                    69:d6:f6:45:af:75:a8:0e:7e:d0:a6:e3:7a:c5:8a:
                    52:ce:5b:75:87:55:3d:57:41:ac:b8:85:77:4a:03:
                    86:fb:02:58:7a:03:c1:bc:8d:c0:a2:0a:62:ee:af:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D9:EC:8F:4E:71:E5:69:BC:5A:CF:C4:9B:CB:3F:02:96:1C:65:C3
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231362e302f32332d3233203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:63:4e:a3:dd:33:30:11:38:2d:47:3e:e6:79:3d:ea:e2:
         34:f4:21:22:6f:59:f5:27:63:af:6f:60:43:c8:f7:1d:35:b4:
         d4:15:7c:b2:34:9a:e4:e8:cb:6e:6c:4e:8e:c7:61:36:15:3a:
         6e:5a:a2:48:1e:8d:c8:5e:c1:94:e9:73:9b:6c:7f:ac:a7:4c:
         5f:f8:74:e9:65:fd:c2:e0:2e:56:e3:32:b5:d2:36:df:60:21:
         13:ab:f7:23:83:57:a1:40:9e:4d:37:80:41:9a:05:c5:67:d1:
         d8:75:34:df:dc:61:03:24:20:44:cf:e9:ee:d2:98:70:d3:02:
         38:30:98:cf:a6:73:cf:41:bc:7d:ea:17:3c:ee:25:13:a9:11:
         cb:db:d6:65:0b:6b:e0:62:da:d2:09:ec:17:01:3c:47:70:4e:
         71:0b:06:bb:9e:15:04:20:4b:da:e2:03:a9:9f:97:a8:26:dd:
         d4:71:75:bb:db:1e:44:d0:43:da:78:fd:9f:f8:20:83:75:63:
         a9:12:3b:dd:0d:09:63:aa:5d:e8:5b:b7:79:5a:24:fb:74:f4:
         92:38:ac:bb:8e:56:45:e5:6b:7f:e5:9c:4e:2f:6d:f1:53:21:
         31:99:0d:28:1e:af:5a:1f:be:44:49:8b:3b:ec:71:dd:52:00:
         53:84:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 00:38:21 2024 by rpki-client on console-ams.rpki-client.org