Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
File:                     3137372e37332e3233392e302f32342d3234203d3e203533303338.roa (raw, json)
Hash identifier:          vhgI0M38e6v5443lMTkPpmw3f4MT/j05wWtTsvkam8M=
Subject key identifier:   D8:E0:E8:E1:84:50:2D:88:4C:87:99:E7:B5:11:C9:01:8A:16:03:2C
Certificate issuer:       /CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
Certificate serial:       5F2A2C9FFCB04063F5A87A56810047183DDCD242
Authority key identifier: ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa
Signing time:             Thu 07 Nov 2024 04:05:28 +0000
ROA not before:           Thu 07 Nov 2024 04:00:28 +0000
ROA not after:            Thu 06 Nov 2025 04:05:28 +0000
asID:                     53038
IP address blocks:        177.73.239.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2a:2c:9f:fc:b0:40:63:f5:a8:7a:56:81:00:47:18:3d:dc:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6
        Validity
            Not Before: Nov  7 04:00:28 2024 GMT
            Not After : Nov  6 04:05:28 2025 GMT
        Subject: CN=D8E0E8E184502D884C8799E7B511C9018A16032C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:34:b0:f8:2e:ef:f6:c0:03:9f:8a:8d:7b:
                    bd:96:05:92:be:c1:f3:34:ce:13:59:6b:6f:f4:d5:
                    9f:02:66:eb:8b:54:35:fa:28:7a:0b:d7:40:e9:c3:
                    8c:39:98:1c:12:0e:83:fb:ac:e0:2c:ba:63:5d:56:
                    07:25:3c:a0:9e:9b:37:63:3d:9e:a1:3c:fe:9d:97:
                    c6:2b:5f:b3:36:c7:cb:a3:3f:c3:7f:7d:d1:7d:47:
                    82:80:f0:36:4c:b8:77:78:3c:e1:f5:ef:39:8a:30:
                    aa:9a:b7:3d:97:0d:20:96:9a:a8:f0:1a:07:8d:25:
                    b8:54:14:fb:b7:8a:15:b1:7a:c3:3b:51:3d:ff:b1:
                    d5:2a:52:63:5b:b8:5f:f7:80:4c:68:7a:e9:37:de:
                    7a:f1:91:51:ab:6f:6d:ca:24:1f:bf:d4:f8:33:c2:
                    51:9c:e8:db:37:9e:04:26:09:7b:b6:79:da:2f:87:
                    d3:a9:87:07:0c:bc:b8:00:02:3c:cf:7d:20:65:68:
                    4e:05:0a:c8:cd:54:1b:d3:10:b3:ec:cb:75:58:50:
                    79:94:e8:25:69:8e:09:3f:bd:17:d5:a6:05:74:7d:
                    38:df:0e:b9:32:09:5f:bc:70:97:71:a2:3c:ed:d8:
                    f8:44:93:5c:90:7f:3f:c5:3a:d1:1d:af:05:73:bb:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E0:E8:E1:84:50:2D:88:4C:87:99:E7:B5:11:C9:01:8A:16:03:2C
            X509v3 Authority Key Identifier:
                keyid:ED:A5:E8:A6:1C:C1:7C:0E:AB:73:FD:6E:3B:9D:1F:25:E4:34:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EDA5E8A61CC17C0EAB73FD6E3B9D1F25E4348CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e37332e3233392e302f32342d3234203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4a:05:f4:a5:35:c7:c3:bd:b6:ba:6d:b5:1a:10:4c:80:10:
         cf:59:3e:a8:ed:2a:ce:33:98:a6:39:9a:b6:0a:7d:92:e0:76:
         66:f2:2a:07:32:e4:5a:27:37:75:05:88:2c:33:24:40:27:11:
         b2:8d:7c:f6:e2:53:fe:b1:ff:60:9d:9f:10:e7:07:04:c0:b5:
         4b:df:e3:9d:7d:b4:bc:9a:af:cf:30:58:02:4c:c2:64:99:14:
         f9:c5:ad:db:ae:e2:b4:03:2f:ce:f0:b5:f4:50:96:65:42:aa:
         ca:78:8f:ae:ac:d0:4e:f5:b5:f7:a6:00:8d:c0:59:f3:80:f9:
         08:92:54:62:78:6d:45:db:ca:e0:c1:ec:33:73:56:f7:fc:f6:
         08:75:61:2d:50:3a:43:3f:ff:cf:4f:00:07:52:4f:10:73:f8:
         63:d1:e0:58:44:af:1e:52:83:51:ae:52:1d:61:3e:f0:46:4f:
         7d:47:57:57:47:98:20:9c:fd:06:a1:a1:c1:bc:d2:a2:e1:b3:
         39:e1:48:5f:fd:57:39:e5:f5:4b:fa:f7:ea:86:61:4c:6a:03:
         1e:33:f7:ab:c0:c0:f7:61:f0:2f:07:2a:94:7e:4e:43:8f:1a:
         f0:a7:99:23:a5:f5:1b:d7:d7:1d:a2:1e:a2:5d:45:98:e4:0e:
         9a:ce:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:55:28 2024 by rpki-client on console-fra.rpki-client.org