Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138322e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138322e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          hAWTPfYiOIgZbuFd6xNUjse3DJUUlvqX/BVAiMVC5V4=
Subject key identifier:   56:15:07:72:79:CF:D9:30:8D:17:D4:40:6C:A4:3B:45:0F:B8:E9:60
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       67BA7959D59B44BFFE2E791B0B23E7550326F228
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138322e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:32 +0000
ROA not before:           Thu 07 Nov 2024 04:00:32 +0000
ROA not after:            Thu 06 Nov 2025 04:05:32 +0000
asID:                     53038
IP address blocks:        177.154.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:79:59:d5:9b:44:bf:fe:2e:79:1b:0b:23:e7:55:03:26:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:32 2024 GMT
            Not After : Nov  6 04:05:32 2025 GMT
        Subject: CN=5615077279CFD9308D17D4406CA43B450FB8E960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:49:de:7f:39:cb:4b:04:84:f7:6e:3e:63:
                    ad:f4:5b:a0:6c:9f:52:8b:f1:a4:11:b9:2f:7d:d0:
                    10:9f:d5:aa:ee:d4:ba:fb:5f:5e:1f:9f:ca:d3:c1:
                    98:d7:98:17:1d:0b:a2:12:56:f3:09:19:19:c6:0b:
                    a2:b2:7c:7c:cf:5c:47:47:22:3b:20:92:89:9e:d2:
                    9e:53:81:aa:ce:81:8b:5b:38:e5:8c:c0:39:8d:fb:
                    f8:7c:5b:51:66:91:f9:7c:81:ee:20:2c:ce:97:18:
                    40:c3:42:63:1c:c1:0d:6d:0c:3a:79:9c:d8:1b:3b:
                    c0:95:56:dc:89:5f:9c:88:37:21:1e:63:7f:3b:0d:
                    d9:1e:f1:09:68:74:d2:79:b1:cc:c0:a0:ca:91:86:
                    cd:10:b4:78:26:de:f5:35:ab:99:b6:e8:47:0a:21:
                    1d:b7:e5:ee:03:20:09:cf:3f:41:91:15:86:5e:0b:
                    65:55:40:32:5f:27:3a:89:6b:b4:1b:ca:c9:56:8a:
                    c7:ad:72:95:e7:01:7d:4e:f4:1f:e8:6a:29:e6:db:
                    4e:40:94:84:35:8f:ae:d6:60:2e:3f:97:d5:88:d8:
                    da:f2:f9:f5:87:fd:29:e1:27:6b:0b:08:ba:06:97:
                    52:23:3e:43:92:62:94:2c:63:bd:7b:fd:ca:79:ec:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:15:07:72:79:CF:D9:30:8D:17:D4:40:6C:A4:3B:45:0F:B8:E9:60
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138322e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:58:b7:d1:b2:f5:91:c2:9a:96:38:50:f2:8e:c1:6f:a4:97:
         b1:9d:4b:12:53:6e:41:8c:d8:cb:50:f6:33:eb:45:17:3b:fa:
         7a:d8:d6:40:28:da:ef:0c:5a:e7:b3:41:09:02:ad:66:83:a0:
         13:ca:9b:24:69:fb:58:c6:1c:30:b6:4b:57:c6:36:12:40:63:
         6b:57:d5:69:bf:e1:76:df:a9:74:cf:34:2c:f5:cb:b8:67:3a:
         60:aa:43:55:98:6e:0e:55:50:30:39:ae:fa:d6:03:46:d2:8b:
         84:bb:c7:2a:25:2c:8e:cc:de:f1:d9:01:d0:62:a8:77:d2:7d:
         5f:cb:ad:21:b3:83:ed:87:13:0c:fa:a8:60:0f:50:b5:b6:c9:
         aa:b8:5a:df:93:e9:15:97:56:0d:38:0f:0a:5e:25:39:a1:a5:
         2b:aa:18:74:f2:53:32:a4:04:72:9f:6e:30:e3:e5:41:d4:18:
         f8:ae:ef:49:71:cd:ce:25:c4:08:8b:0b:b5:2b:99:07:ec:6c:
         9e:d5:3d:28:d8:c4:ae:f5:20:5c:46:b7:93:cf:b5:e5:4e:b6:
         c7:93:61:9e:68:87:f8:83:84:37:c2:d7:cb:bf:d5:29:8d:00:
         29:a9:4f:45:b0:e3:e4:4d:a9:b4:ff:af:a9:2c:2f:de:15:cd:
         a2:8e:27:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org