Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e34302e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          w8/SLkOLbgDb2D7MW5SOLncubKEtnXZC1q0ovx+x3CA=
Subject key identifier:   A8:3E:13:96:CD:EB:3E:25:29:C0:65:D4:7C:B4:D0:D1:BD:34:F8:DC
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       4F302080886E3AE9F3E563ACB6F95FEBBA7947B0
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:18 +0000
ROA not before:           Thu 04 Apr 2024 01:50:18 +0000
ROA not after:            Thu 03 Apr 2025 01:55:18 +0000
asID:                     262889
IP address blocks:        177.54.40.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:30:20:80:88:6e:3a:e9:f3:e5:63:ac:b6:f9:5f:eb:ba:79:47:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:18 2024 GMT
            Not After : Apr  3 01:55:18 2025 GMT
        Subject: CN=A83E1396CDEB3E2529C065D47CB4D0D1BD34F8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:3e:31:b1:0e:26:f7:ca:f2:b4:7a:46:ac:
                    8c:5e:6a:a6:fb:ba:07:ea:30:ff:8d:19:16:52:dd:
                    c5:c7:66:cd:da:c4:c7:4c:eb:70:e5:57:97:9a:2a:
                    e4:a5:74:87:a5:6e:f6:37:a6:23:87:0a:cb:83:9d:
                    59:5b:f2:46:cb:40:57:a8:5b:0b:4b:01:db:db:1a:
                    47:ad:f7:46:17:b5:74:c5:af:3d:5f:57:ca:d7:40:
                    f7:ce:f4:a5:3d:71:5d:32:38:19:0e:90:69:18:5a:
                    0d:a0:ca:ca:d9:f6:f2:1a:d3:12:8a:30:e2:70:b1:
                    b6:32:21:25:6b:73:78:26:9b:7f:fa:dd:8c:cd:e3:
                    f2:ab:39:96:9e:16:fa:53:25:b2:db:e6:14:c5:e2:
                    38:0b:09:c6:a1:c3:b3:6b:95:80:f1:eb:3c:d7:09:
                    0e:aa:89:24:05:fd:65:f4:7f:e8:ff:ec:a8:24:dd:
                    4c:da:56:b5:e4:0c:c7:4b:19:6a:fc:c6:d8:c2:20:
                    7c:d8:2a:c5:f6:0c:86:b1:8f:f1:29:0d:17:13:6b:
                    93:6a:29:d6:50:5f:df:f9:0b:3f:b6:00:2c:00:55:
                    d7:f0:ad:4c:05:d7:5c:5e:ad:d7:11:28:3a:7c:20:
                    dc:2f:2f:70:c6:19:3a:4b:b0:27:70:d6:99:0d:38:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3E:13:96:CD:EB:3E:25:29:C0:65:D4:7C:B4:D0:D1:BD:34:F8:DC
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34302e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:d1:23:02:d7:93:c3:45:82:61:f6:cf:26:0e:de:e6:78:
         04:e6:18:11:a0:e7:b5:b4:ad:30:5a:93:dd:fa:8b:51:1e:2f:
         60:07:07:b8:4f:8d:46:42:87:71:07:65:9c:80:8b:cb:53:f1:
         ae:17:e9:05:86:a5:ed:79:5f:76:37:65:04:85:58:83:4f:f1:
         ee:b0:d9:31:e2:76:6d:c1:bc:47:39:92:6e:a8:aa:2d:15:f1:
         f6:a2:41:03:26:c9:e8:c4:3a:3e:43:21:df:3f:33:8b:e2:c8:
         e8:41:f3:30:41:24:49:ea:13:a9:74:c4:94:0e:ba:10:fa:f4:
         6a:24:f4:2f:b3:e2:81:d5:8c:ca:f1:b2:2f:c1:7c:06:ae:89:
         76:c3:6a:91:01:d2:12:10:b5:c2:71:2c:51:00:b2:34:87:a9:
         4b:bc:30:f0:8d:7f:db:03:e1:88:4e:d6:38:e4:ca:5d:02:07:
         6e:b6:45:82:48:e9:80:af:c5:8f:41:0c:c4:c1:f7:14:00:e3:
         6d:1b:26:85:82:50:47:cf:ba:ee:ac:43:b6:f9:b1:ff:8d:54:
         f0:cd:17:bb:60:aa:9f:4d:86:28:78:09:98:88:85:fc:21:0c:
         05:ea:be:a0:50:bb:14:03:5c:33:54:ca:03:76:4b:38:d0:c2:
         be:f6:79:a9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTzAggIhuOunz5WOstvlf67p5R7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZFNkFGNTgwNDAzODFEN0ZFMjJDMjZERUU0RTc0RDcz
NkY0MDlERDAeFw0yNDA0MDQwMTUwMThaFw0yNTA0MDMwMTU1MThaMDMxMTAvBgNV
BAMTKEE4M0UxMzk2Q0RFQjNFMjUyOUMwNjVENDdDQjREMEQxQkQzNEY4REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUz4xsQ4m98rytHpGrIxeaqb7
ugfqMP+NGRZS3cXHZs3axMdM63DlV5eaKuSldIelbvY3piOHCsuDnVlb8kbLQFeo
WwtLAdvbGket90YXtXTFrz1fV8rXQPfO9KU9cV0yOBkOkGkYWg2gysrZ9vIa0xKK
MOJwsbYyISVrc3gmm3/63YzN4/KrOZaeFvpTJbLb5hTF4jgLCcahw7NrlYDx6zzX
CQ6qiSQF/WX0f+j/7Kgk3UzaVrXkDMdLGWr8xtjCIHzYKsX2DIaxj/EpDRcTa5Nq
KdZQX9/5Cz+2ACwAVdfwrUwF11xerdcRKDp8INwvL3DGGTpLsCdw1pkNOATbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqD4Tls3rPiUpwGXUfLTQ0b00+NwwHwYDVR0j
BBgwFoAUT+avWAQDgdf+IsJt7k501zb0Cd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREVMejdNRFlvQ3pkaVQ1ZGVHQXBtam9kQURBMTlNclN2M0JSM3k5YUN6
Y0svMS80RkU2QUY1ODA0MDM4MUQ3RkUyMkMyNkRFRTRFNzRENzM2RjQwOURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGRTZBRjU4MDQwMzgxRDdG
RTIyQzI2REVFNEU3NEQ3MzZGNDA5REQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RFTHo3TURZb0N6ZGlUNWRlR0FwbWpvZEFEQTE5TXJTdjNCUjN5OWFDemNLLzEv
MzEzNzM3MmUzNTM0MmUzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTYoMA0GCSqGSIb3DQEBCwUAA4IBAQC4ctEjAteT
w0WCYfbPJg7e5ngE5hgRoOe1tK0wWpPd+otRHi9gBwe4T41GQodxB2WcgIvLU/Gu
F+kFhqXteV92N2UEhViDT/HusNkx4nZtwbxHOZJuqKotFfH2okEDJsnoxDo+QyHf
PzOL4sjoQfMwQSRJ6hOpdMSUDroQ+vRqJPQvs+KB1YzK8bIvwXwGrol2w2qRAdIS
ELXCcSxRALI0h6lLvDDwjX/bA+GITtY45MpdAgdutkWCSOmAr8WPQQzEwfcUAONt
GyaFglBHz7rurEO2+bH/jVTwzRe7YKqfTYYoeAmYiIX8IQwF6r6gULsUA1wzVMoD
dks40MK+9nmp
-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:43 2024 by rpki-client on console-fra.rpki-client.org