Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          yfUPykZ5lUFHjf6deH9wV/Nc6hRa2gWwUbseMROZ0FU=
Subject key identifier:   C6:41:7C:2B:1F:79:0E:3C:58:F1:06:E9:03:AE:32:F2:4B:E5:AF:99
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       5AB7C1411D95A2BD125A1A466065521F76CFC727
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:35 +0000
ROA not before:           Thu 07 Nov 2024 04:00:35 +0000
ROA not after:            Thu 06 Nov 2025 04:05:35 +0000
asID:                     53038
IP address blocks:        177.154.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b7:c1:41:1d:95:a2:bd:12:5a:1a:46:60:65:52:1f:76:cf:c7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:35 2024 GMT
            Not After : Nov  6 04:05:35 2025 GMT
        Subject: CN=C6417C2B1F790E3C58F106E903AE32F24BE5AF99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:6c:0c:09:4a:81:84:f5:ab:d0:36:d7:65:
                    99:ef:e9:4c:14:92:b6:bf:db:ce:48:c0:14:1e:81:
                    3e:9e:d2:46:72:66:a4:22:41:48:2b:90:48:bd:ae:
                    8a:5b:c8:9a:84:d7:71:f0:bf:e9:07:9d:a4:3c:52:
                    db:47:2c:3e:c5:3c:17:a7:c9:88:7b:c6:b4:39:e8:
                    da:f2:19:c3:88:03:60:d8:39:37:e5:b4:64:03:9c:
                    ff:26:fd:94:83:5f:41:fd:65:0e:38:f7:97:f3:fd:
                    58:cb:f8:88:16:49:5b:05:26:b4:bd:6f:4b:5a:a3:
                    dc:6d:44:f7:4c:df:82:b2:08:90:73:fb:a3:67:f5:
                    41:20:19:e6:cd:52:a7:f5:74:4e:f8:0e:c3:13:6e:
                    a3:19:89:f7:91:2e:b7:b6:b5:7e:b9:2b:17:4f:c9:
                    37:13:cc:ff:2e:ae:cd:7b:f4:88:38:d8:fa:2f:57:
                    44:13:a3:ee:5a:b1:d6:4c:d1:6a:b7:29:32:1f:c5:
                    20:ea:39:61:c2:92:b6:51:07:9a:b0:8e:ac:15:f8:
                    8b:a6:9f:59:e1:b6:e5:a5:41:41:f0:de:e5:45:68:
                    3c:08:7b:7a:1a:67:1c:a8:a7:ff:4d:98:f3:09:d3:
                    5a:d0:8d:eb:67:1a:3c:0b:60:88:50:db:b2:de:b7:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:41:7C:2B:1F:79:0E:3C:58:F1:06:E9:03:AE:32:F2:4B:E5:AF:99
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138302e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:ed:23:d3:a5:37:ed:e1:8b:82:22:16:dd:86:e0:e9:50:
         a2:c2:0d:04:6c:fc:9e:6e:55:8e:f6:09:ae:32:25:0e:bd:0c:
         5f:f1:da:10:21:a1:ca:c9:ab:71:1d:7c:9a:a4:00:0e:b3:33:
         93:96:d5:05:aa:c1:ac:c0:06:0c:a3:d4:7a:07:03:4f:8b:92:
         75:eb:a0:27:d4:f1:c7:31:db:a1:55:b2:6d:7f:85:a7:1a:b7:
         c8:2c:89:84:2b:2b:4b:35:c6:f2:fd:b2:c9:c3:87:35:2f:24:
         80:9b:37:15:3c:da:44:1e:18:fd:71:f8:55:c4:98:0e:0b:72:
         b9:e1:7b:8e:67:84:14:2a:ce:55:8f:47:fe:9c:98:79:0d:e8:
         2a:62:01:d4:96:89:36:ea:2c:56:32:17:6a:8b:a4:6e:ca:8c:
         61:ae:6c:64:2a:78:40:c1:a3:05:55:9f:4e:71:db:8d:94:f4:
         0d:c1:74:17:c9:6f:bb:53:5d:42:2f:a0:67:8d:72:3b:77:bd:
         84:eb:b5:2f:da:4f:e7:f4:00:19:16:e7:7b:8a:49:ae:c4:76:
         4c:60:98:62:7b:9f:76:47:b7:1b:c2:96:d3:35:f6:92:2f:3b:
         f7:f2:b5:94:9e:ea:02:b9:47:80:44:57:e9:9d:9b:f3:05:21:
         45:23:3b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org