Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34362e302f32332d3233203d3e20323632383839.roa
File:                     3137372e35342e34362e302f32332d3233203d3e20323632383839.roa (raw, json)
Hash identifier:          TwaZD3MW+Viu6xHy4STf1n+PE6hfj6cb5OMTrbeykM4=
Subject key identifier:   E3:8F:C6:A9:09:7A:88:85:1F:52:8B:B0:8A:CB:B0:F6:48:73:53:63
Certificate issuer:       /CN=775E2D53FE491AF48D77BAA9A57AF6A8936211DE
Certificate serial:       6147D05B974733AE04680D0784A59FCA3F4D3B07
Authority key identifier: 77:5E:2D:53:FE:49:1A:F4:8D:77:BA:A9:A5:7A:F6:A8:93:62:11:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34362e302f32332d3233203d3e20323632383839.roa
Signing time:             Wed 09 Oct 2024 13:58:44 +0000
ROA not before:           Wed 09 Oct 2024 13:53:44 +0000
ROA not after:            Wed 08 Oct 2025 13:58:44 +0000
asID:                     262889
IP address blocks:        177.54.46.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:47:d0:5b:97:47:33:ae:04:68:0d:07:84:a5:9f:ca:3f:4d:3b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775E2D53FE491AF48D77BAA9A57AF6A8936211DE
        Validity
            Not Before: Oct  9 13:53:44 2024 GMT
            Not After : Oct  8 13:58:44 2025 GMT
        Subject: CN=E38FC6A9097A88851F528BB08ACBB0F648735363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:29:69:97:95:5c:dc:10:e5:94:1b:a8:49:
                    bb:74:a5:09:d7:2b:a6:37:1d:71:eb:04:66:af:c6:
                    0f:17:17:93:e0:ff:93:66:af:32:e7:9f:03:df:03:
                    1e:fe:8e:14:ee:22:3d:66:02:c9:78:28:32:01:ae:
                    46:0f:e3:b0:52:2f:57:70:9f:26:c0:af:1e:a1:7a:
                    50:fe:01:3c:f9:b6:03:49:1c:ff:2f:5f:55:3a:f2:
                    b8:de:a9:1c:6a:aa:92:59:36:87:c4:e3:b1:dc:1d:
                    e9:8a:5c:dd:94:c1:4f:80:c4:19:aa:70:c8:c5:79:
                    1d:2c:9f:a5:77:c1:37:d5:32:53:ce:6f:f9:3a:a2:
                    bc:c6:05:a2:3c:ce:82:f0:54:6f:e5:77:c4:b3:b0:
                    68:d7:bc:6f:21:38:1e:f5:15:7e:4c:40:76:c1:18:
                    76:6d:bc:fc:40:8d:c5:9c:fb:46:ec:e8:0a:01:fa:
                    5c:8c:94:79:db:bc:ef:4c:19:63:cf:e5:c2:22:84:
                    22:17:5d:16:ef:44:21:9d:0b:b4:05:49:22:60:30:
                    b8:9a:0c:0c:4a:07:9e:7c:6e:9a:72:9b:ab:97:a8:
                    b3:91:32:22:74:7c:41:9d:24:51:ea:cf:19:eb:c8:
                    85:18:b2:d5:67:f9:c6:a8:d8:6e:e1:be:7a:40:38:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8F:C6:A9:09:7A:88:85:1F:52:8B:B0:8A:CB:B0:F6:48:73:53:63
            X509v3 Authority Key Identifier:
                keyid:77:5E:2D:53:FE:49:1A:F4:8D:77:BA:A9:A5:7A:F6:A8:93:62:11:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/775E2D53FE491AF48D77BAA9A57AF6A8936211DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/0/3137372e35342e34362e302f32332d3233203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:83:0e:06:41:c3:f0:b0:b2:9d:52:e8:b1:d8:19:c2:2c:38:
         29:8b:c7:b1:ee:30:a3:9c:b2:88:05:bf:4f:1e:73:fc:80:a6:
         df:d4:72:a3:51:fa:03:a0:1e:90:19:c2:ce:77:77:e0:f3:9b:
         f4:f0:f7:d7:6c:52:d7:b5:f3:79:5d:3b:b0:00:92:bd:2e:51:
         25:68:77:0e:84:17:b0:75:05:ec:85:4b:74:db:d9:41:ea:d1:
         e6:81:4b:13:e8:b1:9f:63:2a:ea:95:81:eb:22:0f:c5:88:a7:
         bb:6b:17:20:a2:c0:69:bc:94:ab:b2:4f:e4:1b:55:25:9e:cf:
         ec:c7:b4:a2:9d:df:40:80:4d:8d:bf:79:d1:5d:4f:65:84:77:
         4d:6a:7b:f3:36:25:46:06:10:fc:d5:ab:b0:8d:17:53:d0:95:
         c0:5f:69:99:d7:f4:77:83:87:06:b9:26:9d:9b:3b:3b:67:4a:
         d2:44:7a:5a:12:64:11:74:28:a5:b4:05:9a:f2:d2:34:e3:09:
         bc:2e:20:5f:18:0a:3b:f8:a6:05:cd:f9:f7:b7:f0:14:64:4f:
         15:01:2f:3b:e9:31:b6:7b:5c:c6:12:cd:2f:56:ee:6f:e0:e3:
         ba:63:f7:8b:5a:d3:4f:36:cf:99:f7:a2:cc:3e:c6:50:d3:91:
         1b:37:90:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org