Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          D/5G51g4IhgTXOJGRvsdrhVDocY0hWuakQ5+j7kxoQY=
Subject key identifier:   61:B1:48:C4:9D:5D:24:DB:DE:8E:0E:FC:5C:D4:EF:C4:24:D3:24:20
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       57C5427EF4FC7E5F10CDD86FA70BF7B2279712EA
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:34 +0000
ROA not before:           Thu 07 Nov 2024 04:00:34 +0000
ROA not after:            Thu 06 Nov 2025 04:05:34 +0000
asID:                     53038
IP address blocks:        177.154.176.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c5:42:7e:f4:fc:7e:5f:10:cd:d8:6f:a7:0b:f7:b2:27:97:12:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:34 2024 GMT
            Not After : Nov  6 04:05:34 2025 GMT
        Subject: CN=61B148C49D5D24DBDE8E0EFC5CD4EFC424D32420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:f2:91:00:e1:34:4d:c7:ea:26:7b:c7:28:
                    af:be:c0:c1:22:de:d8:9f:35:d2:c1:d3:81:a4:92:
                    78:4d:19:e8:f3:72:45:e2:35:c8:d8:53:d5:96:bb:
                    94:11:94:7f:ab:2a:2a:27:00:69:63:b7:ba:6a:fe:
                    c8:ce:d5:62:1b:b3:15:1e:6b:f5:d4:93:b4:f8:ec:
                    24:8d:67:ca:55:5d:eb:63:f7:f1:6d:e1:d9:14:58:
                    0b:93:a2:73:9e:93:0a:6f:54:08:a7:b4:1a:56:5c:
                    4b:0d:e6:8a:7a:a0:22:bb:a4:98:bc:30:0f:19:f9:
                    82:37:ac:62:cd:c1:20:a1:f7:04:9f:5f:03:5a:05:
                    58:0a:2a:a4:ec:5f:01:4d:49:c7:51:8a:13:85:d2:
                    be:cd:79:6a:82:fd:5e:22:c1:db:8f:e7:d1:a4:8e:
                    a3:7c:4f:0e:23:f7:c5:e7:90:d1:fa:7d:ea:1a:3c:
                    ee:df:61:ee:da:f4:90:ef:a2:50:25:66:7d:bc:af:
                    65:6f:53:e2:62:33:eb:32:f8:31:7c:f2:8f:91:7b:
                    5c:d2:4a:2a:04:b7:4c:76:36:d5:20:90:fe:b5:4f:
                    5a:2e:93:94:89:40:db:d6:13:2e:c9:1e:ba:fd:c6:
                    11:b7:d4:f6:c9:26:51:a1:55:1a:92:b1:73:d8:a9:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B1:48:C4:9D:5D:24:DB:DE:8E:0E:FC:5C:D4:EF:C4:24:D3:24:20
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:fa:a0:a2:0c:12:52:43:4d:4d:da:85:e3:5e:61:af:1a:
         83:0c:ac:28:45:f5:da:14:73:e5:d1:21:ce:0e:53:4f:7e:fb:
         dc:5c:49:bf:4a:8d:27:58:86:cb:ca:4f:63:8d:22:a7:d5:3a:
         0a:bf:41:9b:3a:80:0a:6f:75:b3:df:96:83:5e:87:ac:c8:84:
         65:90:d4:82:ad:53:10:4b:d4:54:4b:47:77:89:f6:98:bd:73:
         51:2b:4b:72:5c:e7:07:ff:45:2b:9e:5b:b9:3a:23:ae:1a:b8:
         01:1d:c5:fd:2e:29:11:9b:be:8b:1b:89:d7:08:b4:33:91:81:
         67:3a:91:6d:20:50:1c:41:80:17:d2:b3:0a:42:75:62:4f:14:
         f8:96:eb:fb:fd:2a:b3:cb:8f:cf:44:e4:c9:f1:09:e6:6b:d7:
         c7:96:29:2d:6b:d5:17:90:86:0b:51:cc:7a:94:5a:c6:63:c9:
         6f:e2:dc:d4:63:53:87:24:57:b7:b3:a5:2e:16:75:ac:e2:2d:
         d9:3c:98:3e:49:a6:f0:4a:b9:fa:a8:4d:09:8e:c5:09:03:bf:
         dc:c1:36:23:e0:d4:95:d4:93:ec:2f:5e:8b:61:a1:cf:6c:d7:
         42:80:d8:f1:ca:af:4b:d5:92:60:52:73:2a:00:bc:2a:75:ad:
         f8:58:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org