Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35322e302f32342d3234203d3e20323632343933.roa
File:                     3137372e35352e35322e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          WcJhmG5dxvCU36Q417HHo8vzVSaF/z0wrTAqvxAHwqw=
Subject key identifier:   15:08:DD:CE:6C:6F:65:48:EB:F0:C8:B1:7D:8A:C5:43:6E:C0:6E:E4
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       2996D4A21AEA738004B388D529E53A8DC9DD2535
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35322e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:52 +0000
ROA not before:           Mon 09 Sep 2024 14:59:52 +0000
ROA not after:            Mon 08 Sep 2025 15:04:52 +0000
asID:                     262493
IP address blocks:        177.55.52.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:d4:a2:1a:ea:73:80:04:b3:88:d5:29:e5:3a:8d:c9:dd:25:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:52 2024 GMT
            Not After : Sep  8 15:04:52 2025 GMT
        Subject: CN=1508DDCE6C6F6548EBF0C8B17D8AC5436EC06EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:18:92:62:73:10:21:9a:56:66:85:eb:9c:22:
                    81:16:ff:c4:1c:4d:2f:14:2b:b3:e8:3b:ef:83:e0:
                    9e:48:0e:07:dd:48:5d:79:33:75:f0:66:d6:82:0e:
                    b0:29:98:2f:82:b2:80:77:bc:f4:7e:e6:42:6e:ef:
                    3d:ad:0f:78:9d:e8:5d:c1:ed:57:c3:05:57:93:f1:
                    63:2a:86:07:8e:52:8a:cf:e4:35:1d:7a:cd:ed:fe:
                    f3:92:2a:1c:ee:b2:ec:b8:66:7f:f8:44:62:33:c9:
                    4d:3c:97:10:ee:da:a0:fe:5c:0e:5b:38:4d:f3:39:
                    27:c9:43:c5:35:04:9e:1b:e4:f2:7a:38:50:63:37:
                    39:8b:c8:cb:a7:5d:1b:5a:40:4c:48:da:85:b9:4d:
                    c9:10:98:88:cd:5d:cf:bb:cb:3b:f9:74:64:c9:44:
                    cd:9b:e5:76:af:7d:c0:6b:d8:ad:0e:44:21:a2:4a:
                    39:7f:5a:52:59:7a:cd:87:84:41:f2:2d:ae:89:8c:
                    77:24:dd:f5:03:b3:10:6d:9f:c2:b6:1d:5b:c3:1a:
                    cc:fc:c7:76:39:31:29:e9:04:f4:6f:34:ce:a4:56:
                    8e:19:65:cf:bc:69:60:33:9f:09:50:78:65:a5:2e:
                    62:ed:96:ef:5b:dc:7c:6f:bc:41:fa:9f:7d:ca:54:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:DD:CE:6C:6F:65:48:EB:F0:C8:B1:7D:8A:C5:43:6E:C0:6E:E4
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e35352e35322e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:71:b6:3e:6c:9b:3b:a7:9a:e1:d7:0c:d3:ae:f8:08:0e:d8:
         5a:7d:42:e0:9e:f6:fb:27:4b:32:e5:88:a1:65:ea:35:96:28:
         2b:6a:6a:f6:c9:c0:4d:13:99:6d:28:09:b1:db:4c:6b:1b:f8:
         aa:8b:48:55:15:6e:26:08:66:9b:62:03:5f:2b:0f:c1:fe:74:
         a6:1e:aa:ba:dc:f5:f2:fd:1e:08:08:fc:b4:b7:ca:dc:9d:96:
         84:a0:bd:11:de:31:12:2d:c9:c5:9a:33:fc:00:fc:9d:92:85:
         0b:45:1e:95:f6:08:d6:50:9c:a3:67:af:d8:bb:bd:e8:f3:19:
         86:07:ea:5b:4e:be:c0:cf:03:c4:89:54:d2:17:92:84:aa:77:
         a3:f8:65:c4:7e:9d:7d:d3:80:90:9d:31:0d:77:27:56:26:04:
         bc:5b:3e:55:b4:e0:4d:41:3d:e6:d6:cc:f8:a2:23:bb:a5:41:
         6b:61:c5:60:46:cf:72:01:19:e8:8e:05:67:09:7c:0f:a9:79:
         49:aa:00:f4:4d:e4:03:c6:d5:64:00:a5:61:c8:e4:a2:5b:e5:
         52:58:27:38:21:73:fc:c3:d0:80:15:ae:87:a1:d5:e5:55:8c:
         38:0f:ae:48:1d:db:ad:5a:7c:96:d3:47:97:9e:73:30:0a:47:
         c7:b8:83:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org