Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          Vt97I8wo9hJZuDxeJ1V44FVdXGd9R97Gf3X3bBq1Eh8=
Subject key identifier:   ED:E5:B5:EC:2E:25:88:AB:F1:88:E9:38:C6:8F:F0:47:7B:EF:BE:95
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       38050B1C2C2E55146056CD3944AFA88A828BE35C
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:33 +0000
ROA not before:           Thu 07 Nov 2024 04:00:33 +0000
ROA not after:            Thu 06 Nov 2025 04:05:33 +0000
asID:                     53038
IP address blocks:        177.154.188.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:05:0b:1c:2c:2e:55:14:60:56:cd:39:44:af:a8:8a:82:8b:e3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:33 2024 GMT
            Not After : Nov  6 04:05:33 2025 GMT
        Subject: CN=EDE5B5EC2E2588ABF188E938C68FF0477BEFBE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:b9:a4:db:72:94:a8:75:36:0e:88:10:7f:
                    21:d1:d9:52:cb:7f:44:42:d6:6a:8a:7d:b4:af:4b:
                    65:37:34:81:40:c4:b9:00:5b:e9:cf:a8:1b:84:7b:
                    0a:97:ab:fe:24:f5:b6:07:fd:0c:ca:1c:71:4e:5c:
                    95:ca:43:d8:63:73:89:3d:48:5a:7b:06:1b:e1:55:
                    ac:8f:85:d3:02:e8:05:09:f3:4f:f4:f1:03:ab:5b:
                    4b:97:26:1a:fc:ab:f8:86:08:18:38:fb:10:ff:cd:
                    46:a1:76:e4:25:25:dc:ce:ce:15:01:73:3a:9e:f9:
                    0d:26:d9:b4:58:b2:7f:1f:58:33:29:8c:f2:d9:81:
                    85:29:e3:92:8e:ef:f5:a9:f7:02:5c:0f:cb:7e:6b:
                    68:07:2e:c5:69:9b:02:6e:fb:71:53:c0:c3:25:63:
                    7b:49:0f:d5:0b:d1:be:99:9a:54:09:f8:ad:7f:16:
                    00:ac:12:31:97:7d:30:41:89:64:a1:9c:bc:9f:16:
                    cf:fd:17:13:46:6f:55:97:48:73:3a:86:73:5e:d7:
                    34:cd:19:1d:56:7e:93:6a:37:55:4a:02:44:08:d9:
                    28:65:53:ac:63:e1:ad:77:25:4e:a4:2e:fb:c9:36:
                    a4:f4:26:7d:26:ee:af:df:4a:12:58:5f:df:59:4e:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E5:B5:EC:2E:25:88:AB:F1:88:E9:38:C6:8F:F0:47:7B:EF:BE:95
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138382e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:25:ab:70:70:a1:63:81:f2:68:8c:46:77:01:0f:c4:b3:6c:
         62:16:ee:39:be:2b:ec:fe:64:ec:c1:d1:59:6e:d3:d7:eb:c7:
         e5:e9:d0:d8:c3:a0:f8:c8:e5:f6:c7:1c:21:e2:91:03:00:81:
         f9:c0:d2:e2:63:95:96:fd:5b:b9:34:20:e4:3d:28:6d:09:b7:
         51:80:99:a8:ad:a5:b6:aa:3e:78:10:82:87:d4:c0:c2:3c:4b:
         2d:10:3d:e4:d1:75:b5:4b:af:2a:e5:9f:b6:eb:36:34:09:d9:
         10:a2:3d:36:ab:8b:9a:ca:3e:94:fc:63:3d:93:02:e9:36:74:
         6e:bd:37:a3:81:b7:78:b3:39:79:9a:0a:50:2f:13:58:a3:4d:
         d2:61:fd:3c:d7:f9:5b:c1:9a:92:d8:ac:6c:7b:60:43:9e:b9:
         e1:0c:48:06:9e:04:ce:15:ab:8b:8b:51:d2:82:a9:94:60:14:
         13:49:fa:f2:ef:71:3e:25:ed:3c:13:a9:85:d7:c7:6d:da:eb:
         52:99:1a:e7:04:3e:3f:54:8f:77:00:07:64:8f:66:43:00:8f:
         a0:78:ea:47:9c:ff:a3:a8:bc:96:4e:df:9f:10:27:a0:06:04:
         6c:81:31:0b:4d:c2:55:0b:ee:60:ab:7c:a2:21:46:4f:b4:6e:
         04:f2:82:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOAULHCwuVRRgVs05RK+oioKL41wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBNUU4QTYxQ0MxN0MwRUFCNzNGRDZFM0I5RDFGMjVF
NDM0OENDNjAeFw0yNDExMDcwNDAwMzNaFw0yNTExMDYwNDA1MzNaMDMxMTAvBgNV
BAMTKEVERTVCNUVDMkUyNTg4QUJGMTg4RTkzOEM2OEZGMDQ3N0JFRkJFOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqS7mk23KUqHU2DogQfyHR2VLL
f0RC1mqKfbSvS2U3NIFAxLkAW+nPqBuEewqXq/4k9bYH/QzKHHFOXJXKQ9hjc4k9
SFp7BhvhVayPhdMC6AUJ80/08QOrW0uXJhr8q/iGCBg4+xD/zUahduQlJdzOzhUB
czqe+Q0m2bRYsn8fWDMpjPLZgYUp45KO7/Wp9wJcD8t+a2gHLsVpmwJu+3FTwMMl
Y3tJD9UL0b6ZmlQJ+K1/FgCsEjGXfTBBiWShnLyfFs/9FxNGb1WXSHM6hnNe1zTN
GR1WfpNqN1VKAkQI2ShlU6xj4a13JU6kLvvJNqT0Jn0m7q/fShJYX99ZTkK5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7eW17C4liKvxiOk4xo/wR3vvvpUwHwYDVR0j
BBgwFoAU7aXophzBfA6rc/1uO50fJeQ0jMYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZYSFljcW1yVDVhMWhlbkpBdERpR0JDbkFhNGpYVHZqRGlLekIxY3E3
alUvMC9FREE1RThBNjFDQzE3QzBFQUI3M0ZENkUzQjlEMUYyNUU0MzQ4Q0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEQTVFOEE2MUNDMTdDMEVB
QjczRkQ2RTNCOUQxRjI1RTQzNDhDQzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmWEhZY3FtclQ1YTFoZW5KQXREaUdCQ25BYTRqWFR2akRpS3pCMWNxN2pVLzAv
MzEzNzM3MmUzMTM1MzQyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMDMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxmrwwDQYJKoZIhvcNAQELBQADggEBANYlq3Bw
oWOB8miMRncBD8SzbGIW7jm+K+z+ZOzB0Vlu09frx+Xp0NjDoPjI5fbHHCHikQMA
gfnA0uJjlZb9W7k0IOQ9KG0Jt1GAmaitpbaqPngQgofUwMI8Sy0QPeTRdbVLryrl
n7brNjQJ2RCiPTari5rKPpT8Yz2TAuk2dG69N6OBt3izOXmaClAvE1ijTdJh/TzX
+VvBmpLYrGx7YEOeueEMSAaeBM4Vq4uLUdKCqZRgFBNJ+vLvcT4l7TwTqYXXx23a
61KZGucEPj9Uj3cAB2SPZkMAj6B46kec/6OovJZO358QJ6AGBGyBMQtNwlUL7mCr
fKIhRk+0bgTygtU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org