Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139392e302f32342d3332203d3e203532383333.roa
File:                     3137372e35332e3139392e302f32342d3332203d3e203532383333.roa (raw, json)
Hash identifier:          E2efhkVxGhlqxrg1keM/VVWvUArA+zWMF2LuBdrnvSg=
Subject key identifier:   44:D2:06:89:AA:2F:54:85:53:99:54:D4:CD:34:24:46:98:65:F1:5E
Certificate issuer:       /CN=D2316250FCE6226188A17FFE2BFE6230E715A267
Certificate serial:       029B9C54FD409F1E574890A98B455286F073DC0F
Authority key identifier: D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139392e302f32342d3332203d3e203532383333.roa
Signing time:             Fri 13 Sep 2024 13:44:42 +0000
ROA not before:           Fri 13 Sep 2024 13:39:42 +0000
ROA not after:            Fri 12 Sep 2025 13:44:42 +0000
asID:                     52833
IP address blocks:        177.53.199.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:9c:54:fd:40:9f:1e:57:48:90:a9:8b:45:52:86:f0:73:dc:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2316250FCE6226188A17FFE2BFE6230E715A267
        Validity
            Not Before: Sep 13 13:39:42 2024 GMT
            Not After : Sep 12 13:44:42 2025 GMT
        Subject: CN=44D20689AA2F5485539954D4CD3424469865F15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:59:be:12:1f:65:7d:cf:16:90:e8:06:c7:4d:
                    89:5e:1e:28:2e:66:47:17:be:4f:85:01:38:06:7a:
                    74:db:dc:b9:10:87:4d:bc:1d:dd:db:2d:d9:45:02:
                    ea:2f:ed:8e:b7:f8:37:c4:3f:19:2a:3a:44:3b:01:
                    1c:34:44:b5:2d:4c:ac:c5:de:a7:27:0f:53:40:86:
                    34:8a:9a:b6:d9:98:41:53:91:ee:ef:b1:d7:02:82:
                    e7:ce:12:27:d8:70:9b:02:34:00:fa:af:3d:0c:e0:
                    d8:7e:b8:63:89:4e:e5:71:75:f1:6a:4f:80:c3:21:
                    81:d2:92:4a:5c:89:41:8c:eb:4b:7f:06:85:bd:cc:
                    8e:a6:a9:e7:b4:d0:ce:52:b4:f4:0c:1e:00:77:77:
                    a5:64:33:36:cc:85:04:04:54:a0:c3:b0:dc:50:61:
                    84:e5:62:8b:2d:ef:3c:7d:aa:31:2c:7a:f8:57:75:
                    19:a5:19:02:96:13:03:92:ac:9c:a9:19:0d:eb:61:
                    a0:55:e4:58:dc:41:96:29:8c:fe:a9:a1:de:a7:51:
                    1c:fe:e9:0c:e3:48:2d:7f:75:ca:18:21:9e:ca:0b:
                    f9:04:ee:36:7a:be:7b:77:cd:e2:ef:44:19:ad:e0:
                    de:9f:4c:c0:80:c6:34:d6:38:07:56:24:ea:79:f1:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D2:06:89:AA:2F:54:85:53:99:54:D4:CD:34:24:46:98:65:F1:5E
            X509v3 Authority Key Identifier:
                keyid:D2:31:62:50:FC:E6:22:61:88:A1:7F:FE:2B:FE:62:30:E7:15:A2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/D2316250FCE6226188A17FFE2BFE6230E715A267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2316250FCE6226188A17FFE2BFE6230E715A267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhTtcTiwonURnAN8DweXJPWMTzESrjLXLJJdxribnfMt/0/3137372e35332e3139392e302f32342d3332203d3e203532383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:02:1a:d9:0d:a0:1a:7e:5d:d5:d1:1c:8a:ca:b6:5a:70:
         df:2b:61:06:ca:c8:e2:95:cd:8a:f0:24:69:19:47:33:31:68:
         ab:21:f7:99:56:93:12:54:39:a2:76:ae:a8:51:1e:c1:5f:ed:
         00:69:5c:a2:b6:f5:78:e1:f0:84:91:3b:93:3d:fb:c4:b5:30:
         af:45:24:d6:15:67:5c:9d:dc:2d:4c:b9:4f:24:a9:6b:70:3d:
         23:f0:be:53:8d:e4:e4:aa:27:a2:63:ba:19:88:68:af:26:69:
         ea:f6:da:12:9c:cd:12:ff:d5:c4:52:c2:c4:41:ef:f5:be:a9:
         c7:27:98:a7:a9:c5:21:f6:99:8e:dc:79:23:93:5c:c3:c4:6e:
         26:cb:d6:54:01:6c:eb:83:09:ad:58:b5:fd:44:fa:d2:a5:c2:
         76:95:3f:90:dd:c2:10:25:be:6f:a9:2f:e6:9a:2b:75:81:e1:
         65:57:a0:28:c9:63:5d:45:17:7e:4e:b8:8a:90:46:ad:64:c0:
         9b:b7:bd:21:8a:f7:30:a5:5c:e4:7e:fd:70:03:b9:30:ee:91:
         af:f7:35:75:5e:08:d5:33:95:6d:bf:ac:43:68:83:46:5d:27:
         d4:a3:93:e2:07:37:c5:7d:43:6c:4e:7c:b9:7f:ae:30:e4:a0:
         ce:8e:c1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:59:28 2024 by rpki-client on console-ams.rpki-client.org