Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34332e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e34332e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          7R+4Wskqoz8yl/DbsfxDCKTKFRz7kCo4Z4jLw7mkRlg=
Subject key identifier:   30:CC:FE:9E:17:61:E2:1E:4A:94:1B:22:A9:B6:FB:EB:8A:B5:8B:FE
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       6EFBDACA3E34B0014F8616B5748E691BAE8D5FDE
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34332e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.43.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fb:da:ca:3e:34:b0:01:4f:86:16:b5:74:8e:69:1b:ae:8d:5f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=30CCFE9E1761E21E4A941B22A9B6FBEB8AB58BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:c2:7c:32:e7:c7:15:71:58:cd:aa:16:ca:
                    fa:28:0f:4a:d7:fb:45:ae:02:55:9a:85:1f:43:bf:
                    c5:23:46:8c:38:cf:a6:3d:23:61:5d:5a:13:4f:c1:
                    81:05:5b:96:50:bb:22:01:53:65:d0:d5:c0:ec:2a:
                    8f:e9:15:f9:41:92:44:2b:30:95:c9:64:f8:b5:eb:
                    8b:6f:03:df:29:0b:1f:48:72:6c:85:1e:fa:74:96:
                    f6:d8:51:f6:a0:04:9d:4e:92:3c:3b:bc:e3:dc:be:
                    a2:0c:bc:4c:21:b5:e2:04:42:2d:c2:93:72:66:3c:
                    d6:09:9c:67:8b:9b:0e:52:4f:7a:c8:70:6c:0b:33:
                    47:98:be:6d:ae:9b:0c:45:97:1e:f5:60:85:e4:af:
                    1f:0a:32:0c:28:73:b4:27:99:d0:8f:11:76:5e:0a:
                    19:ff:22:c6:34:fc:53:74:b8:63:42:b1:26:71:f6:
                    04:b2:d4:0a:f2:85:de:a9:d8:67:c4:55:51:2a:70:
                    15:ab:52:78:b4:61:74:04:58:76:c4:12:02:e8:35:
                    48:7c:d1:e9:f5:ef:5d:44:95:31:88:9f:0a:cf:7f:
                    5a:89:47:6d:4d:ce:df:93:74:ca:c3:0e:2f:80:7a:
                    f1:60:79:eb:4b:7b:7c:5f:10:38:8a:e8:8d:0d:0a:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CC:FE:9E:17:61:E2:1E:4A:94:1B:22:A9:B6:FB:EB:8A:B5:8B:FE
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34332e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:61:35:57:36:57:06:e2:fb:7a:43:ee:ee:0d:d2:3e:92:cc:
         bf:fc:62:b8:fa:18:6b:33:7c:7e:cd:3c:75:a7:84:86:9d:8e:
         70:8d:c8:71:92:49:03:d0:da:0f:28:2f:41:c1:52:e2:48:ab:
         50:47:f5:af:db:5a:58:bc:eb:c8:d8:62:98:d9:2e:c5:26:e3:
         df:eb:ed:e3:40:2f:d2:3c:e9:00:75:13:db:95:33:46:cb:6f:
         25:21:c8:4e:68:62:98:fa:52:da:00:67:de:d3:ff:ee:49:29:
         8b:bc:31:3a:33:69:e5:da:5c:0a:e2:b7:b7:af:00:df:b4:32:
         d2:42:11:0a:6f:fc:33:2d:68:c5:bf:bb:15:1f:31:de:c5:3d:
         f6:7a:38:f2:a5:0c:1d:25:60:ff:d5:48:48:30:90:06:67:bb:
         ec:30:9b:48:4a:d7:a9:dd:fe:7f:2e:62:56:89:0e:9f:13:8b:
         c6:04:bb:b5:97:22:62:b4:b7:46:71:25:93:57:82:85:63:89:
         b1:d5:14:e4:28:ed:9c:ce:1c:f8:32:c0:18:7d:94:79:9c:c8:
         2b:91:74:12:23:b3:d0:77:88:d8:bc:5a:a0:0f:80:fd:c3:95:
         ec:0d:9c:77:3c:b0:b4:13:4d:39:9a:a9:f1:00:0d:04:82:39:
         30:13:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:29 2024 by rpki-client on console-ams.rpki-client.org