Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34372e302f32342d3234203d3e20323632383839.roa
File:                     3137372e35342e34372e302f32342d3234203d3e20323632383839.roa (raw, json)
Hash identifier:          /g6ZBEAs/DtsRGKxOZEwUWxSoiJsHEBlz3FQ3G75zac=
Subject key identifier:   AB:DC:97:E3:70:B5:0F:44:C8:5E:31:12:18:69:F5:8B:A0:AE:A2:89
Certificate issuer:       /CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
Certificate serial:       7DA251299362657267ED09D471AFDD8201D444CF
Authority key identifier: 4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34372e302f32342d3234203d3e20323632383839.roa
Signing time:             Thu 04 Apr 2024 01:55:19 +0000
ROA not before:           Thu 04 Apr 2024 01:50:19 +0000
ROA not after:            Thu 03 Apr 2025 01:55:19 +0000
asID:                     262889
IP address blocks:        177.54.47.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a2:51:29:93:62:65:72:67:ed:09:d4:71:af:dd:82:01:d4:44:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FE6AF58040381D7FE22C26DEE4E74D736F409DD
        Validity
            Not Before: Apr  4 01:50:19 2024 GMT
            Not After : Apr  3 01:55:19 2025 GMT
        Subject: CN=ABDC97E370B50F44C85E31121869F58BA0AEA289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:f4:d3:41:f6:74:2e:e9:a8:fa:52:42:b3:
                    6e:fc:31:f0:84:8f:3c:38:df:c3:46:ec:18:e6:aa:
                    92:b9:f6:d8:67:34:3b:1f:93:6a:59:5b:e5:49:7c:
                    df:52:23:b5:d8:cb:d9:0c:0b:6b:6d:40:e9:fa:96:
                    c7:74:f7:fd:30:77:06:ba:e9:6c:a6:96:05:12:e8:
                    a2:ce:8f:c3:16:67:32:a4:c4:ed:2f:23:55:f4:58:
                    57:64:b9:74:90:6c:49:cc:e5:93:12:e4:30:6f:97:
                    59:38:45:5e:62:cd:69:40:ce:c5:42:03:e3:b3:6c:
                    de:44:d2:8a:14:37:48:5f:f9:28:36:e9:45:ae:40:
                    50:4d:52:1b:00:21:09:67:52:32:58:76:e8:f1:24:
                    d4:7b:36:30:e3:03:cd:f5:5b:c9:9d:89:d4:18:d8:
                    9e:f7:42:41:55:50:e8:c7:99:f3:13:bf:60:72:8c:
                    af:62:04:cb:7e:83:b6:17:f4:59:95:ee:8b:13:09:
                    e7:76:2a:d9:23:f2:f0:29:71:db:58:85:27:3b:0c:
                    68:35:2a:18:ca:a3:3d:b7:a4:7a:f8:b9:f6:31:5a:
                    cd:10:2a:f3:cc:3c:a8:2b:e9:13:75:d6:af:9b:93:
                    89:27:a3:f6:0f:e0:01:01:40:06:16:33:82:48:bd:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DC:97:E3:70:B5:0F:44:C8:5E:31:12:18:69:F5:8B:A0:AE:A2:89
            X509v3 Authority Key Identifier:
                keyid:4F:E6:AF:58:04:03:81:D7:FE:22:C2:6D:EE:4E:74:D7:36:F4:09:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FE6AF58040381D7FE22C26DEE4E74D736F409DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DELz7MDYoCzdiT5deGApmjodADA19MrSv3BR3y9aCzcK/1/3137372e35342e34372e302f32342d3234203d3e20323632383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:9e:e6:e0:c7:d6:36:3a:8b:02:ad:b9:76:82:f0:ba:d4:26:
         41:08:92:70:86:fb:71:c4:99:43:7f:e5:fe:56:3e:ac:6b:a5:
         80:05:9d:a2:57:b3:38:6e:f9:7e:68:85:67:96:ad:d1:88:5a:
         13:4d:07:5b:fe:0f:7c:76:7b:c8:4b:8a:64:44:b0:b7:08:be:
         f3:9c:7b:2b:12:02:04:e6:87:4d:f8:a2:07:bb:07:9f:82:f0:
         1f:0b:da:b1:51:df:2e:f7:9f:28:f8:da:a7:d1:0f:ad:51:63:
         c5:9a:f2:58:6d:00:3c:c7:f8:bd:0d:04:37:d6:84:82:f2:0f:
         27:e0:37:6b:03:d3:35:7d:b9:35:a8:ac:04:6f:d1:bb:2d:b9:
         1d:fa:3f:95:70:12:4c:99:48:01:f5:d3:75:84:4d:e8:08:79:
         e1:8e:1f:3a:2d:83:82:fd:0e:e7:12:30:35:65:2a:7c:69:9e:
         d2:99:46:13:1a:2e:f6:fe:c3:82:23:b6:61:e6:ee:46:6a:55:
         b4:98:b4:02:b2:fb:bb:4c:3e:9c:a2:f9:6c:c4:1b:8c:d8:92:
         b3:aa:23:73:62:20:1f:33:fd:59:fe:50:3d:06:a1:3c:22:b1:
         86:a3:97:0d:5d:4b:16:b6:c9:b6:a6:f9:48:7b:26:47:21:6d:
         f6:06:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 17:15:43 2024 by rpki-client on console-fra.rpki-client.org