Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
File:                     3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa (raw, json)
Hash identifier:          FKEKJcNVZ7ZF+p3qBOZ7TAuju5GENm/nXhOEL9cctPU=
Subject key identifier:   1F:70:87:41:CB:3E:58:64:BC:7D:0A:43:BB:C6:6F:45:63:17:A9:E2
Certificate issuer:       /CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
Certificate serial:       AD87FE40EAA31C54F24A17B8CF6064E2C0A45D
Authority key identifier: B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa
Signing time:             Thu 04 Apr 2024 06:29:07 +0000
ROA not before:           Thu 04 Apr 2024 06:24:07 +0000
ROA not after:            Thu 03 Apr 2025 06:29:07 +0000
asID:                     262452
IP address blocks:        177.52.219.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ad:87:fe:40:ea:a3:1c:54:f2:4a:17:b8:cf:60:64:e2:c0:a4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5992D2AF10FB81ABCBCF02AD76969468B11F0F2
        Validity
            Not Before: Apr  4 06:24:07 2024 GMT
            Not After : Apr  3 06:29:07 2025 GMT
        Subject: CN=1F708741CB3E5864BC7D0A43BBC66F456317A9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:4e:f1:99:5f:a7:9a:9e:38:c5:3c:62:10:
                    76:08:c8:c2:d9:5c:b2:e0:e7:6c:fe:19:31:7d:ba:
                    b8:bf:51:f9:38:32:e8:a9:96:c7:42:e1:dd:b5:c9:
                    0a:67:50:2b:2f:54:35:c1:01:22:e2:7d:a8:41:ca:
                    e8:bf:46:86:60:62:3c:ba:e2:d8:b6:73:97:4d:3e:
                    55:f1:9e:ed:35:2a:ea:30:8e:d7:6d:55:70:83:70:
                    f3:fe:12:ef:39:b6:45:fc:b7:18:3a:69:0f:8e:fc:
                    24:bb:e6:3b:45:59:f2:1d:3c:ab:65:22:a9:96:02:
                    dc:7e:05:57:72:fd:fb:8b:ec:40:c6:79:f4:8c:8a:
                    4d:77:67:9f:68:3d:c1:7b:56:16:78:c8:b4:85:a8:
                    9d:25:98:be:96:64:81:01:87:43:0c:46:12:dc:d1:
                    a8:7b:5b:3c:7e:ac:63:5f:12:84:70:bb:0a:5d:58:
                    36:63:21:f7:ab:4c:49:ff:39:48:56:f1:5b:7b:71:
                    65:af:13:4c:a2:d1:44:1f:3a:3f:50:8b:0a:21:7b:
                    88:00:a5:c2:0d:c5:a8:8d:e4:b9:78:c3:31:79:d9:
                    43:4a:21:f7:f2:ed:31:e9:98:ed:5c:8f:69:28:c8:
                    da:c0:fb:bb:5e:d2:24:17:81:ed:ba:02:db:70:e9:
                    25:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:70:87:41:CB:3E:58:64:BC:7D:0A:43:BB:C6:6F:45:63:17:A9:E2
            X509v3 Authority Key Identifier:
                keyid:B5:99:2D:2A:F1:0F:B8:1A:BC:BC:F0:2A:D7:69:69:46:8B:11:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5992D2AF10FB81ABCBCF02AD76969468B11F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kF7uGsegGE132vVia74HT5ZaEBQQiZsYwhfw2Nfcmmf/1/3137372e35322e3231392e302f32342d3234203d3e20323632343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:af:b3:6a:f4:ef:26:60:54:f9:87:64:d1:20:ed:65:1c:c2:
         e9:50:6d:64:0f:c3:3f:ff:3b:40:5b:06:22:3f:80:33:c1:1a:
         bc:c2:e7:68:af:de:fc:fe:ac:01:85:d1:66:95:fd:97:cf:76:
         39:87:fb:b5:27:a4:46:09:a9:e9:47:de:0b:6a:5e:b1:ea:a6:
         f8:68:8c:98:65:6a:06:88:c5:9c:e0:dc:68:0e:05:0d:2d:be:
         1c:b0:e9:77:64:3f:80:dd:81:22:40:20:c8:35:20:1e:20:51:
         0d:59:c6:36:d9:b8:62:94:ba:d6:9f:e5:a4:50:f1:c2:39:db:
         ee:2e:18:10:a3:aa:24:a5:58:b7:5d:12:82:32:df:a2:ac:e3:
         e7:84:e2:19:04:93:b0:38:17:1f:be:fb:40:cc:da:0f:30:ec:
         d9:52:96:5b:d4:ac:34:3a:f5:a3:1a:cc:f2:27:c0:6f:c3:4d:
         83:04:86:2c:17:7e:26:7f:a0:b8:46:73:c6:94:59:a2:ca:95:
         d0:34:28:ef:03:95:1e:16:e8:be:ba:ad:4b:64:42:83:6a:62:
         d0:a1:38:c2:16:d7:cf:38:4b:d9:1c:04:35:18:ea:78:40:1e:
         c0:e1:b1:7b:07:e3:11:aa:9e:52:f6:89:4f:ee:28:59:fe:f1:
         18:82:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 02:39:20 2024 by rpki-client on console-fra.rpki-client.org