Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137382e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137382e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          vPJX5V/aScCdRg8n0/CXJBXFVMou9Mb1Wxbz/F7zV68=
Subject key identifier:   09:16:0A:EB:D7:AA:C4:34:3A:B6:7F:A4:FB:22:64:A6:8C:2C:28:E8
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       28B6F6610D7B6527244DFF4165B8F4A4F29ACBB3
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137382e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:29 +0000
ROA not before:           Thu 07 Nov 2024 04:00:29 +0000
ROA not after:            Thu 06 Nov 2025 04:05:29 +0000
asID:                     53038
IP address blocks:        177.154.178.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b6:f6:61:0d:7b:65:27:24:4d:ff:41:65:b8:f4:a4:f2:9a:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:29 2024 GMT
            Not After : Nov  6 04:05:29 2025 GMT
        Subject: CN=09160AEBD7AAC4343AB67FA4FB2264A68C2C28E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:73:f5:bf:40:37:9f:76:ef:6c:d4:93:7f:
                    68:3f:0b:b9:53:32:dc:54:82:38:b5:eb:10:91:30:
                    54:c7:97:e6:c2:cf:2c:61:39:c2:ca:05:a0:c9:e9:
                    cc:b8:64:e8:2c:10:6e:5c:6c:79:6a:9b:3f:f7:73:
                    e9:49:ff:81:53:d9:2f:53:e7:c8:1a:87:b9:d8:7f:
                    63:2a:7d:c5:89:cd:f3:27:d2:d8:67:26:72:00:d9:
                    f0:4a:60:65:28:e9:c8:04:70:01:17:52:cf:67:05:
                    aa:af:3c:76:b3:d2:0a:8e:a6:c7:dd:8d:41:c6:07:
                    6d:fb:6e:46:66:49:b7:1e:fd:be:e1:4c:b6:2c:f8:
                    06:0a:9b:10:e8:33:ec:1a:e9:e5:06:db:6e:fa:9d:
                    4e:0e:90:9d:76:a7:b3:8c:45:5f:7a:2d:74:cd:64:
                    fc:a1:e3:3c:dc:3e:00:b4:19:13:88:65:53:3d:6e:
                    a2:8d:45:b7:9f:bd:52:4c:58:74:91:8e:f4:41:ed:
                    c6:7f:61:4d:46:1f:b7:c2:63:a0:38:39:49:dd:2e:
                    2c:61:eb:63:c1:02:8a:08:67:68:07:60:3d:3e:55:
                    ba:b9:74:58:32:aa:21:3d:fa:69:55:a5:0c:78:6f:
                    3e:c4:74:fe:89:68:f8:87:3c:bc:a6:80:3b:09:9a:
                    2e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:0A:EB:D7:AA:C4:34:3A:B6:7F:A4:FB:22:64:A6:8C:2C:28:E8
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137382e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:39:b2:b6:66:a5:73:7e:83:06:94:f0:14:71:bb:37:4b:
         61:2c:2f:fe:33:3d:c1:8b:02:a2:a9:c6:03:95:8a:e5:3c:39:
         4f:69:4e:98:18:97:75:50:b9:da:d8:5d:35:21:24:32:1d:3b:
         95:50:e8:0a:0d:76:20:bb:bc:70:97:e4:30:f4:ba:d2:50:1b:
         25:6b:73:0e:3b:c0:9a:58:05:79:0f:4c:a7:3f:1c:e3:6d:be:
         e2:f5:00:f4:e0:b7:a8:5c:48:6b:1f:9f:ad:ca:00:29:43:29:
         59:db:23:11:4b:9f:83:43:dd:49:e7:a7:ee:a6:2d:69:e5:5b:
         cb:5f:b6:01:55:c3:48:6e:e9:97:9e:46:03:91:ad:76:7e:40:
         4e:91:89:57:f9:4e:1d:ad:d4:3e:0e:70:65:8c:bc:c7:ab:d5:
         dc:1b:ce:4f:8d:7f:d2:c2:93:30:f1:8f:0e:fb:2f:ce:2a:13:
         7f:cb:6a:f0:7b:2f:95:ec:f7:70:de:05:71:59:83:7d:d6:09:
         38:33:0c:09:dd:77:c4:3b:e2:c3:d6:12:0b:83:14:46:76:7a:
         55:92:65:c6:3b:eb:20:61:93:77:45:ea:ea:cd:2b:47:b4:b1:
         cb:a4:6a:b4:65:3e:85:fa:46:b7:ca:a8:ac:0f:9d:38:36:9e:
         f5:0b:42:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKLb2YQ17ZSckTf9BZbj0pPKay7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMjlaFw0yNTExMDYwNDA1MjlaMDMxMTAvBgNV
BAMTKDA5MTYwQUVCRDdBQUM0MzQzQUI2N0ZBNEZCMjI2NEE2OEMyQzI4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mHP1v0A3n3bvbNSTf2g/C7lT
MtxUgji16xCRMFTHl+bCzyxhOcLKBaDJ6cy4ZOgsEG5cbHlqmz/3c+lJ/4FT2S9T
58gah7nYf2MqfcWJzfMn0thnJnIA2fBKYGUo6cgEcAEXUs9nBaqvPHaz0gqOpsfd
jUHGB237bkZmSbce/b7hTLYs+AYKmxDoM+wa6eUG2276nU4OkJ12p7OMRV96LXTN
ZPyh4zzcPgC0GROIZVM9bqKNRbefvVJMWHSRjvRB7cZ/YU1GH7fCY6A4OUndLixh
62PBAooIZ2gHYD0+Vbq5dFgyqiE9+mlVpQx4bz7EdP6JaPiHPLymgDsJmi4pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCRYK69eqxDQ6tn+k+yJkpowsKOgwHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmrIwDQYJKoZIhvcNAQELBQADggEBAG9ZObK2
ZqVzfoMGlPAUcbs3S2EsL/4zPcGLAqKpxgOViuU8OU9pTpgYl3VQudrYXTUhJDId
O5VQ6AoNdiC7vHCX5DD0utJQGyVrcw47wJpYBXkPTKc/HONtvuL1APTgt6hcSGsf
n63KAClDKVnbIxFLn4ND3Unnp+6mLWnlW8tftgFVw0hu6ZeeRgORrXZ+QE6RiVf5
Th2t1D4OcGWMvMer1dwbzk+Nf9LCkzDxjw77L84qE3/LavB7L5Xs93DeBXFZg33W
CTgzDAndd8Q74sPWEguDFEZ2elWSZcY76yBhk3dF6urNK0e0scukarRlPoX6RrfK
qKwPnTg2nvULQhI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org