Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233382e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          OLUaZrF8BiUTS6uBlsm5xcgWAhJRUFAbvABV8b9i74k=
Subject key identifier:   C8:3C:48:A1:D2:60:8B:6F:A0:37:1F:E9:09:E6:16:F5:34:AD:10:DC
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       64F136E42998DEAE4E536D428725E8F5C6172C81
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:29 +0000
ROA not before:           Thu 07 Nov 2024 04:00:29 +0000
ROA not after:            Thu 06 Nov 2025 04:05:29 +0000
asID:                     53038
IP address blocks:        177.73.238.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f1:36:e4:29:98:de:ae:4e:53:6d:42:87:25:e8:f5:c6:17:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:29 2024 GMT
            Not After : Nov  6 04:05:29 2025 GMT
        Subject: CN=C83C48A1D2608B6FA0371FE909E616F534AD10DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:15:84:6e:11:62:76:2e:fb:8a:dc:21:75:
                    cf:9b:34:47:02:98:d9:38:40:68:04:f9:fc:65:6f:
                    6b:f2:6c:e6:d1:0e:f1:0b:dc:db:55:8b:a8:8c:d0:
                    fa:37:ff:6b:bb:d0:02:b7:be:d2:d8:20:0a:e1:fb:
                    5e:18:c8:bc:7d:4f:45:f4:c3:6c:1c:d2:de:d0:ca:
                    50:f2:db:09:bf:a1:81:96:44:c2:32:98:7f:c9:de:
                    f8:97:9c:2a:36:93:20:cf:4d:18:33:94:68:ce:15:
                    91:b2:f9:71:b4:7b:f0:98:13:e1:04:74:f8:90:56:
                    e1:65:cf:bb:fc:68:0f:72:d4:cc:1a:05:01:0f:2c:
                    52:30:3a:b5:3c:90:04:75:f2:aa:6d:5f:6a:33:b6:
                    84:cb:12:17:fb:4f:ab:0d:d2:1a:5f:55:f0:0f:5c:
                    94:e8:d4:9b:e4:6a:f2:4a:e2:6a:5d:ef:93:7e:43:
                    aa:55:35:52:ba:97:f4:f6:7e:df:b5:49:11:30:ea:
                    32:32:3b:5b:29:a6:66:bb:25:bd:74:8e:55:1a:5b:
                    d4:3a:f0:23:be:cf:6a:66:47:7e:3e:29:25:be:b8:
                    05:80:38:7d:a5:ca:fd:02:21:84:2d:e1:1f:0e:c8:
                    01:c5:9b:15:84:dd:6e:0d:e8:f5:ed:98:a7:4b:41:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3C:48:A1:D2:60:8B:6F:A0:37:1F:E9:09:E6:16:F5:34:AD:10:DC
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233382e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:96:cd:84:45:95:b8:9c:59:68:1a:5a:c0:ee:52:3d:f4:
         81:bd:e6:ee:90:94:b2:45:db:4b:90:c4:a8:c3:7b:58:53:ea:
         91:57:f2:0e:ea:9a:07:03:8b:fe:3b:61:78:ea:01:ed:47:63:
         4b:04:62:0a:63:00:55:0c:06:38:a7:be:9b:ac:9b:24:a8:3a:
         54:9c:11:5f:d0:e1:5b:ab:e2:99:93:5c:4e:a2:d5:e0:7f:36:
         ad:1f:0c:5d:ea:41:81:1a:cb:58:ab:29:bd:48:b8:7b:1b:e1:
         5f:6f:1e:cf:61:81:2b:ba:79:19:1a:7a:7c:c2:fb:8c:f4:44:
         6a:14:75:99:dc:25:f0:22:77:c3:25:ce:17:47:0f:9a:1b:3a:
         2a:63:b8:13:da:61:41:7b:4d:3a:e3:b4:c4:69:bb:51:c6:9e:
         12:10:77:a2:73:89:6f:7d:59:7a:03:0c:5a:bd:e3:d4:0d:99:
         04:ef:8f:47:2d:39:bc:1b:8f:e7:65:df:e1:df:96:ad:3b:fd:
         92:37:2e:3f:b4:a4:60:f4:eb:ba:cb:59:b4:56:dd:aa:36:bf:
         45:bf:28:90:86:60:5d:f3:64:bb:7a:00:cf:49:95:50:a8:37:
         b4:6c:24:36:31:26:02:d2:6a:98:7b:70:20:0b:c6:21:e8:be:
         c7:ef:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:05 2024 by rpki-client on console-ams.rpki-client.org