Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          yGwhLZtlEaWhCe8yOxklvstEllEKLC5E/SsCbubEYfk=
Subject key identifier:   E7:C5:33:FC:11:6E:CC:8C:6A:5A:DB:3D:1D:DF:DF:B4:E0:43:9D:DC
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       74FD79356D4ED36013956B599BA9C7FE40F71D02
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:27 +0000
ROA not before:           Thu 07 Nov 2024 04:00:27 +0000
ROA not after:            Thu 06 Nov 2025 04:05:27 +0000
asID:                     53038
IP address blocks:        177.154.181.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fd:79:35:6d:4e:d3:60:13:95:6b:59:9b:a9:c7:fe:40:f7:1d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:27 2024 GMT
            Not After : Nov  6 04:05:27 2025 GMT
        Subject: CN=E7C533FC116ECC8C6A5ADB3D1DDFDFB4E0439DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:f4:c4:65:2d:61:6c:0c:59:c3:56:69:a2:
                    e0:16:85:17:91:d2:20:a1:7b:9f:31:cd:ed:12:e3:
                    e6:76:3b:38:fc:69:b2:3d:d6:d3:fc:cc:45:9d:6f:
                    0e:7a:c0:64:e4:1f:af:d3:06:5f:73:0e:58:81:21:
                    ed:b6:c4:be:cf:24:1c:2e:8d:36:f2:81:00:a0:35:
                    7d:c3:a4:b9:20:90:f3:db:3f:c6:9f:da:11:58:cb:
                    5a:b0:34:24:c5:ec:20:b0:fb:3d:23:07:df:8d:f8:
                    a3:4a:2c:51:e1:a0:d9:1d:39:bc:37:9a:49:45:5f:
                    de:e1:c3:ce:0b:05:fc:22:76:f8:ce:79:cd:bc:7a:
                    12:db:9e:ad:74:62:6a:6b:e9:4d:cd:32:70:41:4e:
                    bf:ad:11:f0:6a:89:5b:05:4e:f4:cc:a6:ff:23:0c:
                    fb:0c:bb:e1:ab:e3:ce:71:90:96:05:11:8a:ff:5f:
                    2b:fc:a4:b1:7d:56:80:02:cc:62:a4:2a:69:67:ab:
                    f6:6c:7d:9a:f7:86:0c:49:76:a5:40:a4:ba:5e:bf:
                    09:0d:78:a8:c9:b8:1a:91:a3:93:29:81:df:de:29:
                    d7:ab:18:11:30:a7:2f:b2:e0:85:91:fd:10:d2:96:
                    33:1a:4f:45:9b:42:b1:67:5a:07:08:bb:7d:ea:1f:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C5:33:FC:11:6E:CC:8C:6A:5A:DB:3D:1D:DF:DF:B4:E0:43:9D:DC
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138312e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:92:26:23:e6:2a:8f:21:8d:e4:be:17:b4:c8:8b:16:91:3d:
         9f:aa:d8:42:79:5b:7e:1c:30:57:ce:dd:a6:de:ec:48:83:60:
         85:5f:94:18:68:5f:48:d4:7b:d6:e9:e3:26:3b:c1:4e:f0:36:
         90:39:f8:47:c8:4c:b2:43:7a:fe:3d:ac:d6:df:8e:57:d3:8a:
         10:63:b1:1c:3d:7f:51:ff:2f:8c:d5:bc:f7:1d:03:69:3e:7c:
         04:25:6f:74:b2:11:6d:9a:37:fa:21:92:8e:c7:a2:b8:71:87:
         b6:25:30:de:48:d0:35:ed:87:3b:83:03:ca:83:5f:73:71:10:
         87:1b:7a:8d:1b:33:88:84:cc:b5:a7:f5:37:74:96:36:f4:c1:
         fc:70:45:3e:88:d5:40:be:83:fc:74:d8:1d:bf:fc:22:78:2a:
         7e:c9:b3:08:e0:4e:3a:40:03:0a:14:d3:79:0b:f3:7e:2e:df:
         0a:e2:ff:d8:8d:3f:e0:f0:b9:b2:39:70:6a:2d:bd:00:7c:8d:
         53:e0:5c:d0:59:bf:7d:fd:7b:1d:49:6d:6f:94:2d:dc:90:5f:
         e8:10:f0:70:2d:7e:63:e5:9f:ff:ce:7f:eb:68:0b:5f:3c:d4:
         9a:01:28:ee:9d:7f:89:6c:5f:33:bf:15:f1:a0:95:69:fc:94:
         b3:04:61:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org