Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          STgGAHmnCOQN1rlYEmSdQnPs5R2xoIRfaCUda5MaNnI=
Subject key identifier:   AE:31:D6:C0:09:3E:34:A8:A4:58:56:A9:B6:4A:FA:DC:42:40:99:49
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       5A81AB646AACDA559A734E7B7036ABAB594804A0
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:07 +0000
ROA not before:           Thu 04 Apr 2024 06:24:07 +0000
ROA not after:            Thu 03 Apr 2025 06:29:07 +0000
asID:                     262452
IP address blocks:        177.52.218.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:81:ab:64:6a:ac:da:55:9a:73:4e:7b:70:36:ab:ab:59:48:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:07 2024 GMT
            Not After : Apr  3 06:29:07 2025 GMT
        Subject: CN=AE31D6C0093E34A8A45856A9B64AFADC42409949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:d0:fe:44:ce:93:25:97:9f:09:e3:a3:cf:
                    93:8c:b3:9f:a0:93:fc:f0:2f:a4:c2:34:a9:e9:48:
                    40:07:14:26:01:cf:e9:6d:cb:3f:81:9d:e4:81:85:
                    56:af:4f:fd:8e:eb:8f:96:eb:da:0e:7a:df:2a:61:
                    be:ac:f7:e8:5d:67:a8:4c:2f:85:8f:8a:e8:19:db:
                    b9:6d:89:6f:74:66:c2:b6:82:53:e1:3c:c3:ea:b7:
                    69:35:4c:6f:62:29:2b:a6:ce:40:da:1a:51:1d:d8:
                    a6:52:eb:a1:82:34:a4:6a:59:a0:66:36:93:3b:bf:
                    1c:d4:07:cd:86:20:4e:4b:03:d4:76:bf:26:54:9f:
                    5e:b7:4a:30:21:e7:08:a3:6e:7c:35:6c:96:61:c4:
                    ad:44:55:bd:76:08:9d:53:06:a2:22:74:dd:ec:c6:
                    09:be:84:e7:f7:19:68:1a:4b:a1:23:c4:f8:ae:7d:
                    48:19:46:87:9c:71:17:ac:bb:18:24:5b:09:c1:95:
                    9b:91:ab:e8:30:f7:c9:18:10:28:81:b7:8e:28:e6:
                    a2:28:8b:a7:dc:9b:8f:9f:5b:85:56:06:52:b5:ae:
                    29:d8:44:07:ff:c8:be:5d:ea:18:3b:e4:af:e8:b6:
                    48:5a:1d:9a:6f:50:de:56:03:6b:77:96:b2:1e:e7:
                    5b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:D6:C0:09:3E:34:A8:A4:58:56:A9:B6:4A:FA:DC:42:40:99:49
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231382e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:20:aa:ce:54:22:12:29:77:98:4e:6c:8d:57:4f:26:e0:8e:
         43:9d:5b:3a:ab:69:69:09:de:96:d2:e1:83:b4:23:36:89:45:
         39:30:43:db:ea:2a:6b:91:4e:f6:dc:68:7f:6a:de:40:25:91:
         02:f2:d1:85:d4:3d:5b:7d:1a:04:4e:5a:eb:0e:a6:46:60:f0:
         2f:30:66:66:43:b5:84:48:ff:b6:b9:7f:3e:85:48:02:97:3e:
         36:d8:bd:1c:89:34:ee:c1:6d:a1:89:68:30:8f:7d:cb:39:56:
         97:17:ab:95:3a:37:c2:2c:72:f2:b5:b1:f5:ac:c5:ff:da:ac:
         4f:d3:10:2b:40:01:ef:94:4e:93:f5:bc:28:3b:0c:fb:e6:e1:
         d9:9a:68:4e:b5:10:55:17:01:fd:b8:a3:30:f4:1e:71:5b:a5:
         bd:ab:22:2f:7d:b8:86:35:8c:e2:4a:33:41:9e:0d:e9:c7:c4:
         76:58:c5:23:96:54:e2:56:5e:b3:50:53:b2:1a:38:3b:80:5c:
         fd:e7:de:2c:08:56:55:b9:e6:65:0b:8b:3c:13:c2:91:3c:ad:
         e9:95:79:0d:ff:cf:20:3d:b1:32:bb:70:45:19:15:6c:d5:4f:
         49:76:3e:a7:77:63:a5:81:4c:32:40:5d:1d:67:15:ce:8c:5a:
         00:68:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 02:39:20 2024 by rpki-client on console-fra.rpki-client.org