Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          oVGml65Js8jmqOJyVu9tq+A5hnXpbidAjXLEfoCLB6U=
Subject key identifier:   71:FD:39:07:8C:65:30:42:B6:7F:B6:2D:E5:3D:5E:5F:93:67:18:69
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       644A66CFE97B004F96AD244288D3B9B986FBD2EB
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:07 +0000
ROA not before:           Thu 04 Apr 2024 06:24:07 +0000
ROA not after:            Thu 03 Apr 2025 06:29:07 +0000
asID:                     262452
IP address blocks:        177.52.217.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4a:66:cf:e9:7b:00:4f:96:ad:24:42:88:d3:b9:b9:86:fb:d2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:07 2024 GMT
            Not After : Apr  3 06:29:07 2025 GMT
        Subject: CN=71FD39078C653042B67FB62DE53D5E5F93671869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:ba:e5:32:d2:db:45:56:3e:c0:5b:28:02:
                    b4:a1:e2:f1:7f:6e:7e:db:ee:14:0d:d5:1a:76:b3:
                    5f:f5:1e:fa:42:ce:6f:04:0b:9b:12:83:97:9f:ff:
                    e5:5b:f3:ce:37:ae:f5:a9:26:b3:d0:72:c8:98:6f:
                    d6:ef:6a:fa:33:2a:49:40:cd:bc:5a:ae:af:6c:11:
                    6e:19:29:99:ab:55:f8:f4:ba:59:af:da:b4:83:df:
                    49:2f:41:e9:1a:13:5b:44:10:29:c4:57:cb:e5:89:
                    b0:72:ed:2d:3f:3a:1a:5e:4a:85:81:e8:1b:17:b3:
                    e5:8d:3b:db:3c:96:8a:63:2f:0a:6d:5e:55:58:71:
                    7a:c4:dd:f0:ff:53:69:2d:ef:e0:a9:1c:c1:31:bc:
                    b4:d8:09:ca:ff:ab:91:14:d5:cc:2d:6c:10:af:0b:
                    17:12:a0:16:42:4e:46:a4:3a:c9:ce:bd:b3:b4:d2:
                    11:91:72:1b:f3:d6:b0:94:aa:00:56:08:22:08:17:
                    f0:47:49:1d:c9:82:d9:fb:75:81:7e:7f:dd:86:3d:
                    02:ae:9a:de:5e:c7:01:2f:97:22:55:08:a3:af:ad:
                    a6:7f:9c:1a:0c:c2:cb:c9:fd:b0:09:10:1a:80:a5:
                    b7:b2:e0:84:2a:85:f7:bf:3b:82:e4:8c:40:6d:96:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FD:39:07:8C:65:30:42:B6:7F:B6:2D:E5:3D:5E:5F:93:67:18:69
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231372e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:76:21:dc:33:91:c8:c3:59:5b:a0:3e:0b:a0:f9:3e:76:
         bd:f2:19:50:35:9c:e8:e1:15:dc:6b:5c:43:d2:39:45:3f:d8:
         39:09:a6:3e:98:96:0b:1f:a1:c5:c7:ff:46:f7:18:23:49:6c:
         24:3c:b9:9c:ae:e6:e7:d9:54:aa:12:0a:dc:53:28:d1:0f:d1:
         97:69:e1:06:19:cf:3e:6a:b0:86:fe:23:ca:65:1f:1a:7b:c1:
         26:70:af:9a:c4:1c:57:c2:50:be:a3:73:e2:a8:57:df:e7:d4:
         67:95:c8:02:e8:c0:c6:3e:45:1b:fa:7a:aa:67:d1:99:ff:f6:
         5b:13:cd:8b:85:ad:01:8d:dd:90:83:14:9f:27:75:82:bc:c4:
         84:c2:3a:35:75:fb:ca:7b:e9:82:a5:45:03:fe:b9:41:6a:bb:
         b8:32:93:0b:40:94:3a:63:a1:ce:3e:7a:bd:ff:91:7f:77:cd:
         c3:40:00:90:a3:43:5e:c6:44:d6:e2:8a:65:4e:c4:c6:24:7b:
         9e:28:10:32:ee:aa:c6:5b:b7:22:e1:8d:5c:d5:15:24:03:a4:
         1f:ca:72:b4:30:15:be:ec:53:b2:af:49:92:e0:3f:f1:6d:fb:
         a8:6a:16:7c:d4:55:eb:58:7f:8c:65:2b:e1:53:c5:ac:1a:f5:
         4d:48:00:4b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZEpmz+l7AE+WrSRCiNO5uYb70uswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU5OTJEMkFGMTBGQjgxQUJDQkNGMDJBRDc2OTY5NDY4
QjExRjBGMjAeFw0yNDA0MDQwNjI0MDdaFw0yNTA0MDMwNjI5MDdaMDMxMTAvBgNV
BAMTKDcxRkQzOTA3OEM2NTMwNDJCNjdGQjYyREU1M0Q1RTVGOTM2NzE4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujLrlMtLbRVY+wFsoArSh4vF/
bn7b7hQN1Rp2s1/1HvpCzm8EC5sSg5ef/+Vb8843rvWpJrPQcsiYb9bvavozKklA
zbxarq9sEW4ZKZmrVfj0ulmv2rSD30kvQekaE1tEECnEV8vlibBy7S0/OhpeSoWB
6BsXs+WNO9s8lopjLwptXlVYcXrE3fD/U2kt7+CpHMExvLTYCcr/q5EU1cwtbBCv
CxcSoBZCTkakOsnOvbO00hGRchvz1rCUqgBWCCIIF/BHSR3Jgtn7dYF+f92GPQKu
mt5exwEvlyJVCKOvraZ/nBoMwsvJ/bAJEBqApbey4IQqhfe/O4LkjEBtltVFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcf05B4xlMEK2f7Yt5T1eX5NnGGkwHwYDVR0j
BBgwFoAUtZktKvEPuBq8vPAq12lpRosR8PIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWtGN3VHc2VnR0UxMzJ2VmlhNzRIVDVaYUVCUVFpWnNZd2hmdzJOZmNt
bWYvMS9CNTk5MkQyQUYxMEZCODFBQkNCQ0YwMkFENzY5Njk0NjhCMTFGMEYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1OTkyRDJBRjEwRkI4MUFC
Q0JDRjAyQUQ3Njk2OTQ2OEIxMUYwRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVrRjd1R3NlZ0dFMTMydlZpYTc0SFQ1WmFFQlFRaVpzWXdoZncyTmZjbW1mLzEv
MzEzNzM3MmUzNTMyMmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxNNkwDQYJKoZIhvcNAQELBQADggEBALA0diHc
M5HIw1lboD4LoPk+dr3yGVA1nOjhFdxrXEPSOUU/2DkJpj6YlgsfocXH/0b3GCNJ
bCQ8uZyu5ufZVKoSCtxTKNEP0Zdp4QYZzz5qsIb+I8plHxp7wSZwr5rEHFfCUL6j
c+KoV9/n1GeVyALowMY+RRv6eqpn0Zn/9lsTzYuFrQGN3ZCDFJ8ndYK8xITCOjV1
+8p76YKlRQP+uUFqu7gykwtAlDpjoc4+er3/kX93zcNAAJCjQ17GRNbiimVOxMYk
e54oEDLuqsZbtyLhjVzVFSQDpB/KcrQwFb7sU7KvSZLgP/Ft+6hqFnzUVetYf4xl
K+FTxawa9U1IAEs=
-----END CERTIFICATE-----
Generated at Wed Aug 21 02:39:20 2024 by rpki-client on console-fra.rpki-client.org