Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33332e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33332e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          9LP8/PZDmnALvvI9qBy2aTtd9aHhi07jrNrSrqooNyo=
Subject key identifier:   71:B0:A8:59:7E:5C:D7:4A:B0:25:58:9A:1F:B6:E2:E1:20:57:F9:32
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       42F3B254F05A7F9FA6BC456D83EFB10CFDFEC625
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33332e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.33.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f3:b2:54:f0:5a:7f:9f:a6:bc:45:6d:83:ef:b1:0c:fd:fe:c6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=71B0A8597E5CD74AB025589A1FB6E2E12057F932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:c2:b8:b8:eb:19:5f:3d:94:0f:16:57:6c:
                    fd:5b:46:6f:23:30:b2:c1:5b:14:01:61:d9:89:c1:
                    5c:12:f5:25:0e:88:4c:80:7f:07:71:8e:0a:43:16:
                    7c:09:bc:bd:e0:f3:cc:f8:23:7e:74:df:3d:4e:24:
                    7b:0e:bf:e7:22:c2:89:20:56:79:25:7e:f1:30:78:
                    03:08:d0:52:6c:1d:32:b9:b2:74:c4:44:f2:2e:56:
                    cd:a2:d2:d2:d7:6b:c7:08:14:9a:d3:64:73:06:af:
                    1c:cf:2f:b2:15:55:ae:19:0b:0e:1e:ca:68:ce:59:
                    18:fc:f3:75:ae:bd:88:90:03:f5:ff:c0:14:38:bb:
                    af:8f:5c:ff:d1:0a:40:25:db:8c:5d:06:d6:e6:a1:
                    9d:b9:fa:01:41:35:52:4a:c4:e7:ca:d7:5a:b8:ce:
                    8f:29:f4:08:81:fb:b0:98:5e:85:3c:7f:16:53:4b:
                    54:b6:7b:4a:85:f1:48:6e:92:a2:e0:ce:cf:28:3f:
                    5a:76:76:25:da:fd:16:fa:0b:62:8b:b0:31:63:ef:
                    26:7f:9b:04:0b:84:23:73:41:24:22:50:34:0e:4d:
                    66:6c:8f:1f:f4:16:51:20:b7:09:cf:45:5d:19:e3:
                    d8:ab:2a:35:ab:fb:0f:1e:0d:b4:a8:38:b9:91:14:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:A8:59:7E:5C:D7:4A:B0:25:58:9A:1F:B6:E2:E1:20:57:F9:32
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33332e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1f:a7:65:8b:b7:ed:37:58:f0:36:ab:73:1d:32:ef:a0:57:
         92:08:98:17:90:90:7d:fa:64:dc:91:cb:3e:0e:be:f3:76:40:
         e5:70:b7:ac:ca:bb:a3:03:30:03:02:67:76:d7:cb:73:b5:fb:
         c2:8d:6c:6d:06:87:bd:98:12:23:ec:e5:af:49:4f:ab:16:cf:
         a6:c2:ba:69:fe:f5:36:e1:8d:3a:06:cd:4b:aa:16:f4:0e:c3:
         05:65:0e:7d:eb:e2:44:39:db:0c:0d:b8:73:4d:33:03:4d:c9:
         fd:54:9e:09:9d:01:5d:e5:ef:79:12:53:7b:3d:ae:51:d0:9a:
         d2:e2:b5:5a:f6:34:ad:05:8e:80:d6:a9:e5:4c:d0:21:d3:59:
         1f:1f:44:8b:75:ce:e4:10:c1:36:c1:89:9f:ce:49:a8:cc:a4:
         e0:b5:c4:ff:01:f8:96:0f:81:22:1d:72:fd:91:e6:a9:d7:36:
         26:f5:b0:38:5e:d2:38:7e:1c:8e:85:c6:3d:90:9f:7b:e1:c3:
         27:29:8f:aa:73:47:e9:cc:2e:6f:a6:ed:0c:81:10:1e:c7:97:
         66:f6:8f:02:99:7d:dd:bf:61:66:dc:4a:9d:f1:b3:dc:de:88:
         6f:60:48:91:44:1c:bc:89:c3:7e:cb:4a:ae:27:57:c7:0b:85:
         46:be:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:29 2024 by rpki-client on console-ams.rpki-client.org