Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233352e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          XNaDWcy7zkOEjNiO+XZxJeFQLo63neuaqHjSU9qrNgc=
Subject key identifier:   BC:BD:A7:F3:1F:14:9C:7B:6D:E6:E9:EB:14:31:4B:51:DD:6E:DE:BE
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       418CA3602D2745829ABF22F28D29B96E667940D0
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:32 +0000
ROA not before:           Thu 07 Nov 2024 04:00:32 +0000
ROA not after:            Thu 06 Nov 2025 04:05:32 +0000
asID:                     53038
IP address blocks:        177.73.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:a3:60:2d:27:45:82:9a:bf:22:f2:8d:29:b9:6e:66:79:40:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:32 2024 GMT
            Not After : Nov  6 04:05:32 2025 GMT
        Subject: CN=BCBDA7F31F149C7B6DE6E9EB14314B51DD6EDEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d5:16:b5:e5:d5:7b:de:22:b4:93:40:47:bb:
                    aa:bd:b6:3b:75:09:6e:9b:df:80:59:f2:57:0c:64:
                    65:15:0b:4d:a8:bc:5c:bd:f9:d0:a1:d2:81:32:83:
                    57:f7:83:01:9f:c8:68:0e:92:08:e1:e4:c9:36:a4:
                    f3:79:84:24:ed:c4:7b:e5:49:a3:14:e7:fb:62:0d:
                    4f:1b:bb:9c:bf:e4:08:6c:b5:fc:46:b9:fc:ff:6f:
                    f9:69:ea:e7:c8:49:4c:b7:44:15:d4:e4:a0:98:9a:
                    0a:c4:a8:c6:53:0d:09:ce:81:c1:c5:5d:10:de:a0:
                    2b:d7:a1:65:1b:37:e4:3f:e2:e5:c7:a8:9b:c6:b4:
                    fa:46:8f:e1:05:a9:c7:a5:a7:be:18:68:7c:78:e9:
                    49:43:0c:e3:ab:9f:84:e2:f6:06:1d:c3:a3:22:d2:
                    33:c9:9d:02:48:72:67:a4:93:b6:8e:90:9e:10:e5:
                    ab:c9:29:4d:a2:46:0b:db:e4:1a:ad:22:d2:2f:de:
                    51:84:c1:33:00:14:a1:1e:03:4c:31:d9:9d:e3:c1:
                    5c:8e:1c:87:8d:1e:97:dc:d1:c6:39:bd:78:43:8a:
                    bc:c5:7d:1d:b5:69:aa:a7:42:40:51:26:44:97:bb:
                    c1:ab:58:01:62:84:96:92:f1:b5:f9:22:54:8d:5e:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BD:A7:F3:1F:14:9C:7B:6D:E6:E9:EB:14:31:4B:51:DD:6E:DE:BE
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233352e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d5:5a:c7:0d:fe:1c:19:df:9d:d9:5e:53:99:b4:9b:35:2a:
         ee:10:f0:e6:53:28:b7:7d:ac:7a:19:da:ab:ba:88:02:58:37:
         8e:0f:3e:7e:5a:fb:de:20:83:78:b1:b9:be:e9:25:ec:e5:7d:
         5e:40:ba:a9:2f:95:64:7f:76:75:af:ae:9a:d5:38:43:35:7c:
         21:12:d1:93:63:c1:b4:98:f8:3b:fb:dd:54:cb:db:da:a2:8c:
         03:2f:11:2c:0a:bc:5d:d7:9d:b5:1b:b6:8e:2b:61:56:d1:99:
         d5:f3:0b:19:e0:08:94:3e:7e:e1:54:3f:17:38:9d:f5:4a:30:
         64:ac:1e:55:d1:50:cd:62:29:1a:ce:dc:7f:ef:4c:d3:5c:f5:
         cb:28:7e:a6:39:19:21:14:a4:94:cc:3e:4c:eb:9e:a8:00:62:
         47:b8:54:b9:a5:33:35:d1:6f:5d:cb:7a:ed:bc:6a:d1:66:cd:
         5b:c4:c9:34:4e:20:ca:e3:32:c7:59:d3:53:10:d4:1b:a2:ab:
         9e:76:b6:79:4e:8b:eb:c8:27:8c:fb:fa:c2:4a:c4:07:9e:be:
         29:5e:e5:35:ab:9a:95:b4:1e:f0:e7:12:bf:48:99:09:85:c1:
         06:23:cb:e1:7b:1e:dc:b3:c7:9f:d3:c3:83:64:bc:23:8a:96:
         2c:62:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org