Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa
File:                     3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          zZJ1aDic3ENR1NT0DvvTPPdKmdxqxR73wpZAiGDbKao=
Subject key identifier:   16:FD:BE:D7:0C:52:84:F9:C2:7D:EF:A3:F6:EF:B6:2D:D6:1C:7D:9F
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       7E431FA59E5C03AB1000456F16AE237AF16147E6
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:28 +0000
ROA not before:           Thu 07 Nov 2024 04:00:28 +0000
ROA not after:            Thu 06 Nov 2025 04:05:28 +0000
asID:                     53038
IP address blocks:        177.154.189.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:43:1f:a5:9e:5c:03:ab:10:00:45:6f:16:ae:23:7a:f1:61:47:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:28 2024 GMT
            Not After : Nov  6 04:05:28 2025 GMT
        Subject: CN=16FDBED70C5284F9C27DEFA3F6EFB62DD61C7D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:69:45:6e:6a:67:f6:25:c9:50:87:7d:09:
                    46:03:8a:60:95:5e:7c:75:e8:b2:1f:be:bc:3c:26:
                    d1:40:81:8d:91:ed:3d:32:50:ce:68:2a:28:0b:6c:
                    29:c1:47:57:f3:4f:28:21:c2:46:47:c9:1b:2a:14:
                    c4:e4:6a:f2:b5:32:0e:43:31:a3:28:e9:8f:31:51:
                    fa:c8:1f:51:f1:50:ea:8d:5d:c4:26:01:46:b6:cc:
                    84:9f:2c:d9:7f:60:c6:8e:10:3d:7c:98:68:f0:c1:
                    36:75:54:a5:00:b6:fa:51:1f:03:a0:cd:ca:ed:5f:
                    8d:58:2e:49:47:e7:13:9c:e1:78:e2:dd:e1:dc:90:
                    0b:d5:a3:8a:18:65:5e:25:a4:d6:00:54:2e:ab:37:
                    41:af:64:74:60:75:74:41:3d:85:02:24:82:f8:42:
                    76:0a:c6:5c:9e:af:bd:fe:9f:2f:95:11:9c:ad:9f:
                    36:90:c8:02:60:36:0a:3c:67:6a:6a:52:5f:60:5e:
                    d9:04:6e:3e:69:4f:39:ae:98:84:5b:ef:79:95:f9:
                    df:27:41:01:c8:a1:37:ee:eb:ad:1d:e9:92:a3:77:
                    37:37:c5:79:a8:04:24:71:88:c5:41:e7:e7:ca:4e:
                    7e:8b:24:fa:df:b1:0d:29:2d:98:15:94:c9:10:74:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FD:BE:D7:0C:52:84:F9:C2:7D:EF:A3:F6:EF:B6:2D:D6:1C:7D:9F
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3138392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:d5:01:81:1a:e0:d2:9e:50:40:6b:f7:20:aa:f6:35:3c:
         15:a8:b2:28:eb:49:93:04:5a:54:9f:2d:6c:82:c3:ba:e1:cb:
         5a:ae:50:6a:78:be:b2:6d:f2:09:ac:90:ea:25:0e:c4:40:f7:
         68:71:d0:41:81:2f:26:66:6c:24:a4:18:26:35:46:36:a2:60:
         94:02:ff:20:1a:b1:70:ad:6f:6b:36:1c:8d:25:5b:16:c7:42:
         7d:f8:7b:d6:01:77:22:d0:f1:d5:de:51:2f:44:af:37:21:df:
         48:04:a8:d5:f2:2a:33:52:89:f5:60:10:ad:c5:ed:2e:91:47:
         4e:8b:0c:db:29:35:39:e5:bb:ec:3c:bc:dc:0f:05:0d:91:3f:
         b9:9a:3c:7e:9f:e2:5f:f7:74:9a:3d:b1:bb:4b:ef:2b:8a:51:
         2b:b0:b5:a2:ad:30:6f:a2:1d:ca:a0:51:a8:89:aa:ff:91:c2:
         eb:04:bc:28:7d:95:16:62:b9:ef:3e:02:27:79:de:83:cf:62:
         78:ae:71:22:a2:e1:df:01:fe:b7:6e:8b:2c:b4:d9:d9:df:bf:
         23:9e:82:d7:34:ba:6f:08:56:5e:ea:35:c4:42:e3:74:ec:ac:
         0d:fa:12:ea:c6:16:36:c2:57:2d:18:cd:30:89:61:25:2c:d4:
         49:bb:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org