Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa
File:                     3137372e35342e34342e302f32332d3233203d3e20323632383839.roa (raw, json)
Hash identifier:          XuqUM7qt04ZqEaxLE6af+wDWN7m56LzifdSttQf383w=
Subject key identifier:   FF:09:BE:DB:D0:4D:2D:78:32:1F:3B:4D:D7:E6:29:00:BE:0F:05:C5
Certificate issuer:       /CN=775E2D53FE491AF48D77BAA9A57AF6A8936211DE
Certificate serial:       1CA5911C0BC55C3D3E2A9C5B1BF930830E89E65C
Authority key identifier: 77:5E:2D:53:FE:49:1A:F4:8D:77:BA:A9:A5:7A:F6:A8:93:62:11:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa
Signing time:             Wed 09 Oct 2024 13:58:44 +0000
ROA not before:           Wed 09 Oct 2024 13:53:44 +0000
ROA not after:            Wed 08 Oct 2025 13:58:44 +0000
asID:                     262889
IP address blocks:        177.54.44.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a5:91:1c:0b:c5:5c:3d:3e:2a:9c:5b:1b:f9:30:83:0e:89:e6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775E2D53FE491AF48D77BAA9A57AF6A8936211DE
        Validity
            Not Before: Oct  9 13:53:44 2024 GMT
            Not After : Oct  8 13:58:44 2025 GMT
        Subject: CN=FF09BEDBD04D2D78321F3B4DD7E62900BE0F05C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:19:b9:47:d5:56:cb:c9:b8:6f:42:96:89:0b:
                    80:e5:fe:52:89:c7:fe:63:b9:af:d6:4d:f3:e8:dd:
                    cf:ab:5b:a8:74:e6:21:03:02:87:6e:a3:5e:33:2a:
                    e1:28:a9:62:e2:1f:15:ce:c0:b6:df:12:0b:c3:ee:
                    85:7f:69:c2:92:eb:06:34:bf:3c:20:27:03:c4:6e:
                    78:8f:7b:25:4b:d6:97:3c:6d:56:99:09:ca:51:bd:
                    ba:1a:dc:1e:e3:2a:23:b0:f7:8a:d8:a2:14:6a:86:
                    ec:51:d6:41:a1:ec:8d:3d:24:fa:11:78:77:ac:03:
                    d4:91:88:65:be:1c:35:93:09:35:18:83:f4:c7:54:
                    14:48:36:75:2b:86:f4:06:c7:59:d4:38:c1:fa:d8:
                    1a:b3:b6:df:ea:f9:4f:29:54:51:43:63:ad:75:4d:
                    0a:7f:29:94:39:ae:e7:e4:ff:86:a1:72:70:c4:a8:
                    5d:52:f5:a8:74:8e:97:fb:8b:93:84:9b:3c:7d:7d:
                    ce:f1:32:89:6f:1b:47:62:c6:58:8d:20:50:a3:23:
                    47:4b:90:37:42:c3:83:f3:c4:a1:d6:2a:c5:b8:dd:
                    83:55:4a:1d:06:77:84:f8:83:e6:25:f7:d3:ee:7f:
                    6e:f3:36:15:12:13:6b:59:50:bf:03:3c:cf:b7:aa:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:09:BE:DB:D0:4D:2D:78:32:1F:3B:4D:D7:E6:29:00:BE:0F:05:C5
            X509v3 Authority Key Identifier:
                keyid:77:5E:2D:53:FE:49:1A:F4:8D:77:BA:A9:A5:7A:F6:A8:93:62:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34342e302f32332d3233203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:e9:cb:cc:ea:4b:c6:1d:bc:3e:6f:90:0f:56:3d:dc:48:
         2b:80:b8:c4:ca:a7:be:3f:23:62:db:72:bf:5d:68:af:f0:74:
         8c:96:69:4c:81:a3:52:54:84:47:9a:c1:1c:51:2f:fe:af:03:
         59:6c:59:0d:5b:55:57:e4:e6:5f:43:0e:e4:c6:8d:7b:41:1d:
         c6:b1:1d:3e:4d:e7:f5:46:fc:ad:24:24:6d:8e:97:f1:74:9f:
         14:b8:9d:3c:ad:92:42:4f:b8:57:9b:12:8d:05:4c:b2:05:00:
         5d:d5:14:8a:4f:e6:4e:36:dc:98:71:31:7d:a5:cd:6c:02:90:
         5b:63:b2:ce:ee:68:53:8f:57:e7:42:e6:66:7e:28:71:c4:0e:
         9c:bc:e9:0f:6b:57:3f:91:d9:42:cc:d2:4e:c4:99:2e:11:20:
         56:85:63:d5:16:7d:31:2c:29:fa:53:02:60:2c:3f:ca:15:c2:
         ca:f6:26:53:b2:f8:7f:50:63:d6:9d:78:2d:df:76:c3:ba:01:
         f5:7d:9b:e3:45:9a:30:34:a2:e0:7f:d6:dc:1e:3c:ed:52:9e:
         4a:59:14:f3:6f:0a:42:5b:6b:8c:4a:af:4c:8c:b6:e0:e8:43:
         0b:2c:cb:de:e7:8d:91:d3:2a:e6:5e:e8:6f:e7:88:46:9c:a0:
         7d:fe:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org