Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33352e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e33352e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          Iaj5ZYz3z6hOH6cBfhHaBua8AZXDJnWRUsbk/mOB/6g=
Subject key identifier:   3B:88:99:30:09:CD:82:2C:1E:6B:82:98:84:75:81:9F:E3:2B:A7:CF
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       4DB4FDAE4B75605B8D22B67A8CA5594FC4AA7C81
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33352e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.35.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b4:fd:ae:4b:75:60:5b:8d:22:b6:7a:8c:a5:59:4f:c4:aa:7c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=3B88993009CD822C1E6B82988475819FE32BA7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:0b:9a:be:2b:a7:4c:78:d2:94:4c:6d:f2:
                    1d:8d:c5:98:4c:d9:26:d2:45:55:84:ca:2d:ec:c6:
                    ca:db:e5:e4:82:9e:bb:54:d6:85:19:68:63:99:f9:
                    fc:f4:3c:c2:5c:f9:61:4d:66:d7:74:8c:51:7a:96:
                    ee:2c:7f:67:7e:0f:03:c6:56:d7:4b:61:e5:5e:7d:
                    fe:67:fc:d7:cb:55:6c:82:e7:c4:84:4a:b7:8b:96:
                    59:88:eb:0f:78:7b:0a:1e:28:48:8d:82:c8:ca:c4:
                    da:b2:27:10:d8:69:5c:c9:66:ad:90:44:39:70:62:
                    e0:cd:55:b8:60:f8:f6:a8:5f:48:af:6d:5f:33:81:
                    18:c5:2e:11:bf:e9:84:7d:02:fa:26:c5:c9:75:9e:
                    ef:be:ba:79:90:2e:de:ba:e8:81:3e:6c:73:1a:3a:
                    1f:d1:c7:c7:79:14:1e:3d:83:61:52:fc:64:a6:79:
                    50:7f:7f:a5:47:fb:80:8e:7c:b2:0f:5f:ec:9d:76:
                    2e:46:77:99:42:9b:59:6b:44:8d:e6:20:50:2b:94:
                    b4:66:d6:6d:ba:0c:77:15:a7:b8:9d:84:4d:06:3f:
                    14:3a:7b:05:51:54:f9:92:f8:81:8e:ee:b8:97:a2:
                    c1:7f:f2:57:ca:97:a4:a3:56:c2:81:0b:f6:b2:5d:
                    1a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:99:30:09:CD:82:2C:1E:6B:82:98:84:75:81:9F:E3:2B:A7:CF
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e33352e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:91:7f:16:07:5e:8c:e1:08:4b:21:ff:35:97:76:0a:e4:5a:
         ba:55:e3:6b:a6:f1:7e:1a:c0:7e:ee:8f:53:0f:76:71:15:f5:
         f2:db:64:7d:b0:3c:df:f8:60:ef:73:98:df:cf:d3:54:8b:d0:
         01:79:79:53:74:97:ff:33:f0:ed:07:f6:0e:f2:b3:a3:74:5b:
         fc:a0:44:f3:45:ef:09:ef:a0:4a:14:3a:a5:b9:74:f5:d6:19:
         ac:25:43:de:22:96:a8:da:03:34:63:73:e9:b6:a7:fc:c4:97:
         e7:d7:71:10:e2:ab:78:d8:d7:a2:f7:bb:30:f0:cf:9b:11:5e:
         fb:3c:bc:1b:0c:26:50:53:03:77:f8:38:91:90:b6:a5:f5:a7:
         30:d5:29:98:8c:20:53:7d:22:1b:75:dc:75:ce:59:cd:00:a0:
         c7:57:33:64:87:97:5c:aa:5f:ea:7a:bd:b1:a7:e7:82:9d:c0:
         03:1b:2c:f6:d8:32:02:de:28:08:a3:9c:99:68:bb:82:14:23:
         8d:0d:ce:58:78:d5:0c:db:4a:b7:cb:ca:07:65:1b:e5:50:68:
         42:ff:18:58:17:83:3a:cf:3b:ea:9d:fc:31:18:74:02:e1:00:
         1d:25:9c:87:dc:b5:b0:f8:13:0d:68:1c:00:a4:0d:be:4a:10:
         1d:01:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:43 2024 by rpki-client on console-fra.rpki-client.org