Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa
File:                     3137372e37332e3233362e302f32322d3232203d3e203533303338.roa (raw, json)
Hash identifier:          SSxUaMoxZ1645X5OoQsKJEMl1DBbaAJHZ6XbhJ0It3c=
Subject key identifier:   1D:40:7B:17:B9:B0:BC:56:8E:96:43:04:79:EF:F3:A2:9A:03:16:B3
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       1257D39BCD143936C33AEC977485404554BA948F
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:35 +0000
ROA not before:           Thu 07 Nov 2024 04:00:35 +0000
ROA not after:            Thu 06 Nov 2025 04:05:35 +0000
asID:                     53038
IP address blocks:        177.73.236.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:57:d3:9b:cd:14:39:36:c3:3a:ec:97:74:85:40:45:54:ba:94:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:35 2024 GMT
            Not After : Nov  6 04:05:35 2025 GMT
        Subject: CN=1D407B17B9B0BC568E96430479EFF3A29A0316B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d3:4e:7f:e2:78:51:9e:c2:14:fe:d0:34:c1:
                    34:b8:d6:54:20:fb:98:31:c1:21:6b:4f:3f:bb:6b:
                    96:a7:64:55:05:b2:1f:a6:63:40:00:9e:d0:cc:2e:
                    37:b2:49:34:12:9e:cd:90:04:db:34:33:da:18:d2:
                    ba:26:3c:53:71:80:4d:4c:64:a3:1b:8a:c3:26:3f:
                    af:bb:b4:3a:06:f9:43:2b:7f:35:60:ad:f9:64:c9:
                    46:98:5f:d5:0b:7a:21:83:d7:fc:1e:40:95:a8:cb:
                    3d:f1:9e:7f:06:c7:78:2b:0e:25:db:f2:97:70:c0:
                    83:4e:7a:e6:79:1a:80:f3:cc:2a:0c:1c:f0:da:6c:
                    7f:3e:c9:55:22:0b:c5:4c:59:2a:2e:be:02:05:d0:
                    e4:8f:a6:23:75:20:70:88:08:b2:ee:3c:6a:a3:4c:
                    80:a6:94:c5:15:22:90:cd:21:4c:7d:18:0e:b2:24:
                    35:3e:de:55:9b:9c:1c:b0:ca:35:41:82:7a:92:42:
                    6e:04:bf:a1:7e:cd:fe:98:7f:9d:5c:e8:4f:94:6a:
                    f9:e2:f8:07:04:99:10:34:ec:80:98:2e:0c:04:8c:
                    91:a8:fc:e2:e9:5a:00:21:13:f2:68:3d:64:ed:ec:
                    70:8e:96:57:3a:17:46:4a:36:8c:46:bf:a0:af:50:
                    bd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:7B:17:B9:B0:BC:56:8E:96:43:04:79:EF:F3:A2:9A:03:16:B3
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233362e302f32322d3232203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:ee:03:fc:73:60:71:27:d4:6c:8c:9d:86:4d:dc:ef:eb:
         5e:e2:7a:8f:d8:c9:ef:0b:6d:5f:3e:88:1b:d5:e1:e0:8c:c5:
         32:95:13:18:f5:8f:74:ad:5a:98:bd:1e:a7:b4:ab:72:39:22:
         f2:38:21:ac:c7:ff:1a:fe:75:b9:63:08:f5:fb:4d:c4:2f:bd:
         f7:08:93:7b:db:ad:69:a6:d9:82:de:fe:2e:7f:07:d5:db:13:
         72:b0:61:c3:d7:4b:2c:98:c3:62:bd:1b:dc:49:df:4c:ec:dd:
         ca:ec:d7:3e:96:5c:ee:53:e9:d3:43:76:65:b3:54:58:8b:e7:
         bf:99:40:aa:62:2c:d4:60:06:3e:49:76:11:01:b9:c4:86:4f:
         26:f6:fd:99:a9:62:98:58:60:46:77:9b:57:ec:ec:4b:bd:e7:
         94:4c:73:4d:ce:69:09:dc:9e:86:52:a0:be:23:f0:49:8d:e9:
         2b:41:e0:7a:6d:b6:75:02:b6:df:0e:31:1c:a3:64:65:51:4e:
         79:e9:7c:15:ea:47:9f:6b:22:07:8d:9d:98:04:72:50:53:57:
         d0:b3:e7:b8:4f:35:9f:9a:ab:38:4e:b1:a3:94:99:bf:07:fe:
         5a:cf:1b:ca:3d:08:e5:f2:52:ea:86:38:62:9c:8e:6f:c6:dd:
         7e:6b:a8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org