Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          +Lft3i00PwcIrHTyx6I1TzkPgcoTmdw0rp83C40Q+KQ=
Subject key identifier:   60:31:1D:B2:F7:E3:4D:31:95:55:25:E6:CC:0C:FE:B2:BC:08:D7:C0
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       58E85299D8177E913AD33DBD40DFF2A0B9FE129D
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:30 +0000
ROA not before:           Thu 07 Nov 2024 04:00:30 +0000
ROA not after:            Thu 06 Nov 2025 04:05:30 +0000
asID:                     53038
IP address blocks:        177.154.177.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e8:52:99:d8:17:7e:91:3a:d3:3d:bd:40:df:f2:a0:b9:fe:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:30 2024 GMT
            Not After : Nov  6 04:05:30 2025 GMT
        Subject: CN=60311DB2F7E34D31955525E6CC0CFEB2BC08D7C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:2d:94:b3:08:d6:93:b9:de:9e:65:ad:3c:
                    bb:d6:1c:47:a6:94:22:f7:a8:0f:15:98:f0:14:7a:
                    28:9e:1c:46:84:5c:49:c7:9c:e4:2f:c1:a1:7a:fe:
                    80:a7:a1:2f:7d:26:a9:f7:5c:78:b7:3b:80:c0:ae:
                    44:68:9d:8e:72:5a:0a:94:c1:74:63:7a:33:1e:fd:
                    f0:3a:b3:9b:57:5b:cf:f4:39:f3:2e:39:81:83:cd:
                    6d:66:08:12:db:84:d2:fb:ec:b0:74:fb:c7:6c:c0:
                    98:18:be:37:a1:d4:bc:c3:4f:e9:f4:c0:e6:98:b6:
                    e8:dc:9a:bc:9b:35:29:1a:17:32:4d:3e:af:3e:c2:
                    98:28:fc:ba:c7:d3:1c:1d:25:59:bd:37:fc:0b:08:
                    9c:fe:5f:56:a2:19:b9:b3:69:19:d0:57:83:0f:c1:
                    be:6f:b0:bc:23:f1:d8:97:f0:2e:04:1b:ce:35:be:
                    c8:af:7a:73:63:b5:db:a8:bd:d0:b0:a4:34:05:da:
                    43:19:2e:08:ac:51:9a:25:75:19:4c:6c:1b:b2:58:
                    f0:f3:98:40:01:c9:ee:0d:96:d0:23:df:2e:a8:0c:
                    12:2b:97:8d:7b:6b:d5:d9:56:bd:db:ad:54:f5:45:
                    7e:5b:b6:ab:9e:81:bf:f6:92:eb:0c:65:b3:36:3f:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:31:1D:B2:F7:E3:4D:31:95:55:25:E6:CC:0C:FE:B2:BC:08:D7:C0
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137372e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:b1:42:9a:69:99:c5:c8:61:af:e0:68:c9:c5:91:bb:8a:
         70:e9:60:86:dc:61:76:dd:9d:2d:ca:b2:bd:b7:b9:df:ce:ab:
         bb:fc:75:92:04:e7:d6:3f:fc:21:40:18:bc:70:9e:b3:eb:8d:
         92:64:f0:ce:ce:af:43:47:96:a2:10:84:82:05:e6:43:28:69:
         86:2c:a3:8a:41:4b:7b:13:89:c8:02:d5:ad:46:dc:94:f2:41:
         8f:83:50:88:f0:ef:34:dd:1b:bf:b7:29:f9:80:c6:d4:ff:13:
         24:ba:6b:07:f1:1f:5a:af:f0:75:db:0f:0f:21:61:e6:8e:37:
         d6:90:06:24:5a:68:8a:71:fa:a9:42:69:dc:fb:ad:d7:ca:43:
         b7:34:1b:3c:97:13:f7:7a:04:6a:af:ae:69:52:a2:7a:3b:b8:
         9c:87:c5:7a:d4:4e:f2:22:da:37:ca:46:54:d1:b5:14:5c:c0:
         d7:eb:63:f8:f2:3d:8d:37:5e:ea:81:0b:a1:9e:4b:6d:d4:da:
         eb:a4:77:ce:92:99:4c:28:02:bb:da:ab:a1:92:f1:12:d0:54:
         2f:ff:72:f6:b7:44:60:a1:db:d4:98:bb:40:42:b9:74:21:0a:
         03:22:02:23:d9:34:12:2c:95:01:49:51:e6:2e:c1:4c:bd:41:
         28:78:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org