Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32342d3332203d3e203532383333.roa
File:                     3137372e35332e3139362e302f32342d3332203d3e203532383333.roa (raw, json)
Hash identifier:          lZVPeofqnp/lcGQ7E5Sn+h2IYg0x3WEe6x/cQoiZlQ0=
Subject key identifier:   D4:E1:64:5C:B2:44:C9:DA:C1:40:9C:19:D9:86:05:F6:E6:2A:7A:73
Certificate issuer:       /CN=D2316250FCE6226188A17FFE2BFE6230E715A267
Certificate serial:       428239F376D65D8C4C208C8A7793A9FBE48C0D5E
Authority key identifier: D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32342d3332203d3e203532383333.roa
Signing time:             Fri 13 Sep 2024 13:44:11 +0000
ROA not before:           Fri 13 Sep 2024 13:39:11 +0000
ROA not after:            Fri 12 Sep 2025 13:44:11 +0000
asID:                     52833
IP address blocks:        177.53.196.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:39:f3:76:d6:5d:8c:4c:20:8c:8a:77:93:a9:fb:e4:8c:0d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2316250FCE6226188A17FFE2BFE6230E715A267
        Validity
            Not Before: Sep 13 13:39:11 2024 GMT
            Not After : Sep 12 13:44:11 2025 GMT
        Subject: CN=D4E1645CB244C9DAC1409C19D98605F6E62A7A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:e1:2b:42:4f:19:32:73:0e:d2:38:06:35:
                    9b:a2:26:42:94:98:35:ab:ec:9f:37:71:8d:84:45:
                    8a:ae:bf:c2:32:cb:c9:ca:0a:80:d7:40:83:70:b9:
                    ed:06:2a:9b:06:40:b6:fe:24:97:d4:d7:37:63:f4:
                    c8:78:ac:29:ab:36:22:6e:9d:15:65:6a:3a:5e:2e:
                    27:6d:9d:26:f7:b0:2e:82:37:45:29:54:e7:df:cb:
                    80:cd:27:58:4d:16:8b:61:7c:f9:69:1e:35:ce:7c:
                    d1:24:b2:97:99:58:af:d5:bf:04:89:c5:ae:47:f6:
                    46:e5:7b:44:5c:31:cd:10:6f:fd:4a:aa:a4:59:81:
                    8b:24:cd:b2:a4:c5:3a:ab:0d:1b:89:ea:bd:80:1b:
                    bf:5f:bb:1d:28:82:a3:35:a9:94:df:13:2c:74:b5:
                    44:20:f6:88:2e:fb:33:ce:6f:47:84:fd:14:df:4c:
                    cf:35:de:75:5f:b3:d8:6a:9d:ee:5b:6a:f0:08:d8:
                    46:4d:2d:58:77:9c:8a:7c:09:c4:f5:fb:41:5b:7c:
                    45:3e:42:02:86:40:7f:de:e5:10:c9:57:64:d3:01:
                    b8:da:0d:dd:22:6b:05:ad:56:9e:63:aa:66:d6:3e:
                    84:3e:f5:54:6c:dd:94:3f:f7:f7:71:e1:58:9c:24:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E1:64:5C:B2:44:C9:DA:C1:40:9C:19:D9:86:05:F6:E6:2A:7A:73
            X509v3 Authority Key Identifier:
                keyid:D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/D2316250FCE6226188A17FFE2BFE6230E715A267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139362e302f32342d3332203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:49:1d:95:97:82:f8:16:df:11:c6:da:ae:25:90:32:8f:7a:
         53:71:5a:6a:63:e7:18:ec:56:14:f7:94:1d:44:14:60:67:a4:
         33:32:a3:64:04:af:11:e0:e2:a3:8b:7f:ea:8a:fa:0d:bc:f6:
         df:1d:65:01:92:7c:73:cb:9c:65:f6:5a:00:97:fa:17:42:54:
         02:30:e0:8c:b7:53:9e:33:e7:93:45:7a:4c:40:73:21:dd:3f:
         77:0d:4c:c1:b5:16:82:21:bb:88:9a:a5:de:e9:98:d3:e5:eb:
         55:bf:bb:48:8f:a8:02:d2:79:c9:bc:7b:18:7d:2b:6f:f0:cd:
         d7:07:ac:ce:db:3f:e3:54:42:74:6c:c1:70:1f:ee:39:8d:12:
         c3:e3:d4:a5:5c:9e:61:6b:7a:14:b9:98:7a:93:da:1c:c0:c0:
         82:70:75:f4:ca:5f:38:8e:f5:f2:97:4d:1a:12:56:cb:df:43:
         2d:99:85:7a:09:84:6c:df:e9:f6:59:44:80:8a:80:1f:12:2e:
         bd:47:c2:e4:33:ef:c7:35:e4:a6:0b:17:ba:52:11:4b:94:83:
         a8:ca:62:c5:d7:bb:11:11:10:51:1f:bb:86:7b:29:78:bb:e4:
         2a:e5:4e:7a:52:1d:6e:ad:d9:a0:51:60:45:37:da:af:71:40:
         ef:6e:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:45 2024 by rpki-client on console-fra.rpki-client.org