Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa
File:                     3137372e35352e39302e302f32342d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          hjQ4HuGw3LDb0W1R3B6BEuDJPcOAt/ahUAJ+/QI16Q0=
Subject key identifier:   C3:3B:77:2C:AC:E8:6C:73:D4:88:48:7A:A5:C5:F6:47:C3:23:82:5A
Certificate issuer:       /CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
Certificate serial:       3FD5B7C3A2FD99A350EDD4A6373229FA6C3DED7B
Authority key identifier: 45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa
Signing time:             Sat 16 Nov 2024 14:51:06 +0000
ROA not before:           Sat 16 Nov 2024 14:46:06 +0000
ROA not after:            Sat 15 Nov 2025 14:51:06 +0000
asID:                     263571
IP address blocks:        177.55.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d5:b7:c3:a2:fd:99:a3:50:ed:d4:a6:37:32:29:fa:6c:3d:ed:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E77B80E717DC2AF79EA5C03072487CF2DFF790
        Validity
            Not Before: Nov 16 14:46:06 2024 GMT
            Not After : Nov 15 14:51:06 2025 GMT
        Subject: CN=C33B772CACE86C73D488487AA5C5F647C323825A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:10:d4:ae:b5:26:3a:e2:63:a9:e4:56:fa:
                    a9:2d:45:c1:be:db:db:ec:f3:77:85:e8:17:61:eb:
                    32:d9:f7:a8:2f:94:71:1f:be:48:71:51:bc:e4:fb:
                    fe:e1:26:cb:4f:63:c8:14:2d:b2:ab:08:73:04:29:
                    7a:93:86:ec:81:2a:31:fd:16:ee:3b:63:1d:84:16:
                    61:61:a0:46:e0:63:6c:8f:9b:56:3a:ba:7c:29:10:
                    29:e3:0c:c4:29:03:c0:b6:f3:bb:72:f6:09:02:64:
                    ac:d7:0e:57:20:86:84:91:7a:f5:3d:14:6b:9b:25:
                    61:e3:a9:68:ad:a2:4a:ff:3b:ef:9d:1f:1d:59:90:
                    e7:d9:9c:96:83:65:66:d0:e9:83:69:4a:84:29:65:
                    17:93:3b:90:64:05:ae:bd:97:42:65:c2:b0:8e:ec:
                    4b:e0:b7:9f:13:54:71:9e:69:e8:c4:ce:c1:c2:f4:
                    46:f8:71:e9:63:28:78:3e:5b:0c:08:fc:23:ab:ec:
                    5e:e9:f2:6c:cc:a9:20:56:43:0f:44:32:0a:c5:b5:
                    9d:be:c1:b9:86:04:38:bd:29:66:04:0a:8c:8a:75:
                    80:b2:ac:39:82:01:67:58:3e:ab:8f:22:61:30:d3:
                    7a:fc:89:61:7d:0e:be:1d:d0:41:6b:4d:25:40:29:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:77:2C:AC:E8:6C:73:D4:88:48:7A:A5:C5:F6:47:C3:23:82:5A
            X509v3 Authority Key Identifier:
                keyid:45:E7:7B:80:E7:17:DC:2A:F7:9E:A5:C0:30:72:48:7C:F2:DF:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/45E77B80E717DC2AF79EA5C03072487CF2DFF790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45E77B80E717DC2AF79EA5C03072487CF2DFF790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39302e302f32342d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:0c:68:90:c6:30:91:81:64:3a:4f:45:28:8d:85:e8:11:
         d2:36:c4:48:15:55:97:1f:cb:0b:32:62:41:da:54:50:9f:87:
         34:da:0d:cd:10:93:3a:d4:6b:65:e1:ac:e3:54:49:26:3b:dd:
         bc:37:9b:8b:70:09:86:53:4b:f9:aa:ab:e6:ae:36:b9:6e:b1:
         6f:c7:5c:65:32:1c:d4:5c:1c:a3:63:cd:58:ea:6a:5c:bc:a2:
         74:32:84:f9:36:3c:bd:73:02:0a:ea:69:d7:ed:4b:55:e6:61:
         37:c4:e4:74:37:aa:df:6c:95:ae:2e:8e:9e:7f:ed:8c:7a:c1:
         c1:e7:bb:60:4d:ef:5e:90:5a:25:ae:49:2b:d2:cd:ae:12:c8:
         84:6e:ae:d3:82:64:ed:ad:f5:7a:86:b4:02:69:16:85:c9:3f:
         b5:f3:c2:90:33:cc:e7:ad:0c:57:58:65:e8:99:58:5b:20:3a:
         6a:d6:a7:4b:39:da:90:6f:1e:df:e3:7c:e1:8d:0b:fd:1f:8b:
         c0:b0:92:94:5d:b2:fe:f9:f0:1e:24:fc:24:49:30:6b:76:04:
         e8:39:9e:75:f8:d7:4e:70:16:a7:56:11:06:27:94:84:43:fe:
         5d:58:00:0c:ee:0d:e0:f8:90:8f:56:18:98:e1:96:58:44:f5:
         30:9e:3c:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUP9W3w6L9maNQ7dSmNzIp+mw97XswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFNzdCODBFNzE3REMyQUY3OUVBNUMwMzA3MjQ4N0NG
MkRGRjc5MDAeFw0yNDExMTYxNDQ2MDZaFw0yNTExMTUxNDUxMDZaMDMxMTAvBgNV
BAMTKEMzM0I3NzJDQUNFODZDNzNENDg4NDg3QUE1QzVGNjQ3QzMyMzgyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAThDUrrUmOuJjqeRW+qktRcG+
29vs83eF6Bdh6zLZ96gvlHEfvkhxUbzk+/7hJstPY8gULbKrCHMEKXqThuyBKjH9
Fu47Yx2EFmFhoEbgY2yPm1Y6unwpECnjDMQpA8C287ty9gkCZKzXDlcghoSRevU9
FGubJWHjqWitokr/O++dHx1ZkOfZnJaDZWbQ6YNpSoQpZReTO5BkBa69l0JlwrCO
7Evgt58TVHGeaejEzsHC9Eb4celjKHg+WwwI/COr7F7p8mzMqSBWQw9EMgrFtZ2+
wbmGBDi9KWYECoyKdYCyrDmCAWdYPquPImEw03r8iWF9Dr4d0EFrTSVAKc3fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwzt3LKzobHPUiEh6pcX2R8MjglowHwYDVR0j
BBgwFoAURed7gOcX3Cr3nqXAMHJIfPLf95AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXI2UGJ5d0tVWDZ4U2txN3ZSZTlHWkNhNzFLMUtKakpjR25CVWlzM3J5
SEEvMC80NUU3N0I4MEU3MTdEQzJBRjc5RUE1QzAzMDcyNDg3Q0YyREZGNzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RTc3QjgwRTcxN0RDMkFG
NzlFQTVDMDMwNzI0ODdDRjJERkY3OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVyNlBieXdLVVg2eFNrcTd2UmU5R1pDYTcxSzFLSmpKY0duQlVpczNyeUhBLzAv
MzEzNzM3MmUzNTM1MmUzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzUzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTdaMA0GCSqGSIb3DQEBCwUAA4IBAQBvzgxokMYw
kYFkOk9FKI2F6BHSNsRIFVWXH8sLMmJB2lRQn4c02g3NEJM61Gtl4azjVEkmO928
N5uLcAmGU0v5qqvmrja5brFvx1xlMhzUXByjY81Y6mpcvKJ0MoT5Njy9cwIK6mnX
7UtV5mE3xOR0N6rfbJWuLo6ef+2MesHB57tgTe9ekFolrkkr0s2uEsiEbq7TgmTt
rfV6hrQCaRaFyT+188KQM8znrQxXWGXomVhbIDpq1qdLOdqQbx7f43zhjQv9H4vA
sJKUXbL++fAeJPwkSTBrdgToOZ51+NdOcBanVhEGJ5SEQ/5dWAAM7g3g+JCPVhiY
4ZZYRPUwnjxE
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:32 2024 by rpki-client on console-ams.rpki-client.org