Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134352e302f32342d3234203d3e20323633343536.roa
File:                     3137372e3139302e3134352e302f32342d3234203d3e20323633343536.roa (raw, json)
Hash identifier:          qGjyv6trY1GsY/zKIJd3Npy4Ee3bN4qXdcdYKlYATAk=
Subject key identifier:   A6:A5:63:69:32:45:2F:64:C9:D0:81:69:2F:A9:11:A4:66:8E:68:F1
Certificate issuer:       /CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
Certificate serial:       71B299E96EA2CAE1D9B0B89942FDAE075B1DA64D
Authority key identifier: 01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134352e302f32342d3234203d3e20323633343536.roa
Signing time:             Tue 28 May 2024 12:18:13 +0000
ROA not before:           Tue 28 May 2024 12:13:13 +0000
ROA not after:            Tue 27 May 2025 12:18:13 +0000
asID:                     263456
IP address blocks:        177.190.145.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b2:99:e9:6e:a2:ca:e1:d9:b0:b8:99:42:fd:ae:07:5b:1d:a6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01D49D08A0B6576FA14AD618E6273454526E7BC9
        Validity
            Not Before: May 28 12:13:13 2024 GMT
            Not After : May 27 12:18:13 2025 GMT
        Subject: CN=A6A5636932452F64C9D081692FA911A4668E68F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:79:6e:b5:7c:f2:2c:ef:c7:23:ca:63:1b:
                    bb:88:91:57:00:c6:82:52:72:ee:66:65:9b:3b:aa:
                    1e:06:bc:e3:19:8b:2e:2e:ea:87:92:d0:4e:50:9f:
                    d0:a9:35:e6:f1:ea:32:a2:3b:cf:c6:75:ef:32:d2:
                    69:17:a9:a9:95:40:8a:21:9b:d6:26:b4:40:bc:e1:
                    98:31:5c:f4:32:bf:86:69:ec:99:6b:0f:a4:78:df:
                    0c:75:07:09:7b:4c:38:23:bf:ea:ab:b8:64:6a:58:
                    e5:dc:78:2d:d7:2b:81:f8:b4:19:22:55:0a:fd:6b:
                    d2:d7:66:fe:8c:c2:c1:d0:2c:64:53:59:f5:98:6b:
                    8e:6b:bc:19:d3:aa:a2:83:5b:62:cc:d1:7f:5c:22:
                    71:f7:e9:cf:84:c1:e1:00:18:96:a4:14:67:d3:6e:
                    d9:b7:28:10:02:b2:b7:e7:2b:83:fa:2d:27:4c:23:
                    36:b4:72:86:8a:c2:7f:14:33:02:99:85:ad:1e:d9:
                    43:7f:08:a0:78:2d:ce:ad:85:40:2f:ec:e6:3a:52:
                    20:2c:3d:b2:81:17:cf:7d:e7:ac:41:5e:0f:fc:d0:
                    50:37:ba:01:8b:ce:30:d3:d3:e5:52:f9:09:64:cd:
                    3f:ac:a1:eb:80:45:20:1a:fc:46:96:d1:02:5a:1b:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:63:69:32:45:2F:64:C9:D0:81:69:2F:A9:11:A4:66:8E:68:F1
            X509v3 Authority Key Identifier:
                keyid:01:D4:9D:08:A0:B6:57:6F:A1:4A:D6:18:E6:27:34:54:52:6E:7B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/01D49D08A0B6576FA14AD618E6273454526E7BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01D49D08A0B6576FA14AD618E6273454526E7BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKy4DUuLi2uhTkKsYRHeWepjmdPN1WVjGpVadAokgrm3/0/3137372e3139302e3134352e302f32342d3234203d3e20323633343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:85:23:21:c7:b6:8f:e2:93:dc:8c:e7:ef:ae:8e:a2:92:6c:
         b4:57:b3:af:4f:81:19:d0:22:be:a7:82:ce:34:6b:76:5e:69:
         60:58:88:dc:7e:06:0d:a3:04:fe:a7:25:d2:f1:fe:33:21:42:
         d8:7b:49:08:a4:ef:32:a3:58:16:0f:62:de:6b:75:c7:d2:72:
         26:00:48:85:e9:68:a9:1c:f2:04:57:d4:44:e2:75:10:27:26:
         5b:62:05:cb:f2:b4:89:65:9c:9f:31:03:44:9c:fc:35:05:c9:
         83:5e:ad:51:8c:98:15:7d:b4:fc:80:20:94:31:59:c1:4a:82:
         fe:44:01:85:e5:9e:a5:ce:99:be:4b:cb:0e:9f:f2:5a:72:15:
         d4:2f:5a:3b:aa:19:7a:ab:74:fb:e4:8b:e3:58:10:e1:46:6e:
         cf:28:15:a9:d3:f0:8d:63:8f:66:40:80:be:a4:f0:77:35:e0:
         92:50:6c:1d:bb:ff:3d:4b:e2:d4:85:09:13:84:4d:7c:f6:8f:
         60:b5:f2:2c:45:0c:6e:d7:bb:71:00:32:0d:28:c8:ea:50:ee:
         5b:c5:ef:e5:3c:09:2f:4b:64:37:0d:0d:78:c7:c3:5b:a4:20:
         84:f1:37:89:1d:f4:9b:44:50:b7:02:1a:53:aa:75:ce:4c:5d:
         08:bd:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 18:30:11 2024 by rpki-client on console-fra.rpki-client.org