Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          VloecrYSLgaGtRvsKQNzVLs0PduBT++ZpGyEUu3JiwA=
Subject key identifier:   E1:AD:74:6D:7C:95:A6:BB:56:CA:93:42:30:25:B0:A5:6C:D1:0B:D9
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       0A12CDFCB4EBCC7B08F651E22C6DE80221708820
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:36 +0000
ROA not before:           Thu 07 Nov 2024 04:00:36 +0000
ROA not after:            Thu 06 Nov 2025 04:05:36 +0000
asID:                     53038
IP address blocks:        177.154.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:12:cd:fc:b4:eb:cc:7b:08:f6:51:e2:2c:6d:e8:02:21:70:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:36 2024 GMT
            Not After : Nov  6 04:05:36 2025 GMT
        Subject: CN=E1AD746D7C95A6BB56CA93423025B0A56CD10BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:ad:80:73:8f:5f:c6:ef:9f:06:a1:c1:ec:
                    54:6c:1c:0b:40:3f:47:5a:15:a5:05:ea:00:11:ff:
                    17:f2:e9:44:18:19:a0:fd:3f:b8:2c:d8:7e:f3:0d:
                    1f:35:37:9f:30:56:d0:f7:fc:7f:c2:4f:06:be:39:
                    ec:fd:56:38:8b:fa:d0:38:fb:7b:1f:ba:08:49:a1:
                    78:21:fe:1d:d2:5f:10:e8:d1:35:66:2e:19:1c:36:
                    0d:88:36:b8:f6:f5:5a:f0:af:4c:04:0d:8b:ab:97:
                    cb:0b:31:d2:40:51:e0:d7:67:e4:f9:6d:a0:e3:d5:
                    c8:53:73:7d:df:84:42:df:67:57:8e:a5:15:da:ef:
                    7b:e8:dd:7f:5a:88:ef:d4:b4:a2:67:c2:ae:2f:89:
                    b4:c4:a3:f2:36:34:24:0e:9b:0f:3a:c4:eb:20:2b:
                    b6:4e:3d:e7:a8:76:96:25:05:5e:db:cb:17:1d:a1:
                    71:cc:85:db:ee:b2:1c:68:d6:bb:bc:0e:c9:fd:e7:
                    ab:9f:29:f8:4c:c2:11:18:eb:e5:f0:24:f0:c4:b3:
                    31:87:64:77:02:54:f6:1a:b1:a1:3b:35:a9:d9:7a:
                    f9:b5:9a:66:2d:93:4d:c9:26:e3:da:0c:a5:e0:1c:
                    16:35:ec:ad:25:a3:99:d0:aa:62:b0:2b:3f:f9:23:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AD:74:6D:7C:95:A6:BB:56:CA:93:42:30:25:B0:A5:6C:D1:0B:D9
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:43:40:2d:62:b2:a8:12:74:d4:07:34:72:01:c7:21:df:d7:
         21:c2:52:c7:d9:56:44:5d:07:13:c0:e5:40:5d:95:cc:18:00:
         3c:ca:7d:66:0b:15:eb:23:5e:97:54:77:75:18:46:a8:bb:b9:
         b9:91:c1:d9:57:2a:a2:a9:35:01:c9:02:84:21:16:0c:bf:cf:
         7b:a3:1a:eb:e8:79:af:ee:8d:fa:f9:d5:50:50:8d:a6:b7:e8:
         af:2d:49:18:c0:f5:b9:65:57:84:8a:78:7a:8d:f8:e3:e6:41:
         d6:a4:83:7e:d7:ad:0f:65:53:6d:ba:90:eb:06:5a:bf:cf:83:
         41:1c:21:f6:05:ce:13:e2:90:61:af:6b:4e:f3:34:15:4e:8b:
         da:09:f1:48:ec:17:0a:48:86:6e:75:e5:3e:c3:05:fd:00:3e:
         c2:56:4d:b7:fd:5f:13:e9:1b:66:80:a2:7b:91:5f:31:3b:86:
         24:5e:7d:d0:fb:07:d1:c2:67:dd:e0:f8:50:a9:7e:6f:e4:6a:
         5c:a7:29:e7:55:f1:db:f3:c1:bd:0e:02:0b:8d:d5:48:6a:b3:
         ce:5d:f5:dc:a3:c1:0c:29:e4:8a:56:9b:fe:0e:c0:93:d8:06:
         39:86:74:84:bf:4f:0a:39:09:4a:e3:03:15:84:74:ae:1f:88:
         00:58:8d:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUChLN/LTrzHsI9lHiLG3oAiFwiCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMzZaFw0yNTExMDYwNDA1MzZaMDMxMTAvBgNV
BAMTKEUxQUQ3NDZEN0M5NUE2QkI1NkNBOTM0MjMwMjVCMEE1NkNEMTBCRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Fq2Ac49fxu+fBqHB7FRsHAtA
P0daFaUF6gAR/xfy6UQYGaD9P7gs2H7zDR81N58wVtD3/H/CTwa+Oez9VjiL+tA4
+3sfughJoXgh/h3SXxDo0TVmLhkcNg2INrj29Vrwr0wEDYurl8sLMdJAUeDXZ+T5
baDj1chTc33fhELfZ1eOpRXa73vo3X9aiO/UtKJnwq4vibTEo/I2NCQOmw86xOsg
K7ZOPeeodpYlBV7byxcdoXHMhdvushxo1ru8Dsn956ufKfhMwhEY6+XwJPDEszGH
ZHcCVPYasaE7NanZevm1mmYtk03JJuPaDKXgHBY17K0lo5nQqmKwKz/5Izb7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4a10bXyVprtWypNCMCWwpWzRC9kwHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmrMwDQYJKoZIhvcNAQELBQADggEBAMNDQC1i
sqgSdNQHNHIBxyHf1yHCUsfZVkRdBxPA5UBdlcwYADzKfWYLFesjXpdUd3UYRqi7
ubmRwdlXKqKpNQHJAoQhFgy/z3ujGuvoea/ujfr51VBQjaa36K8tSRjA9bllV4SK
eHqN+OPmQdakg37XrQ9lU226kOsGWr/Pg0EcIfYFzhPikGGva07zNBVOi9oJ8Ujs
FwpIhm515T7DBf0APsJWTbf9XxPpG2aAonuRXzE7hiRefdD7B9HCZ93g+FCpfm/k
alynKedV8dvzwb0OAguN1Uhqs85d9dyjwQwp5IpWm/4OwJPYBjmGdIS/Two5CUrj
AxWEdK4fiABYjZE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org