Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35332e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          VmygflamPTVwlWyhmFhOu9gPnJQ6qUj+4phiDOGQuU4=
Subject key identifier:   F4:59:CA:7C:C4:A6:E1:A2:F1:9B:4C:60:09:56:11:7D:D6:53:A0:E3
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       560A87BD36E5B59875F764C23CC45D19A8BE0EE5
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:51 +0000
ROA not before:           Mon 09 Sep 2024 14:59:51 +0000
ROA not after:            Mon 08 Sep 2025 15:04:51 +0000
asID:                     262493
IP address blocks:        177.8.53.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0a:87:bd:36:e5:b5:98:75:f7:64:c2:3c:c4:5d:19:a8:be:0e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:51 2024 GMT
            Not After : Sep  8 15:04:51 2025 GMT
        Subject: CN=F459CA7CC4A6E1A2F19B4C600956117DD653A0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:cb:bf:34:be:a7:6d:a2:4b:78:fc:b9:c8:
                    20:e8:61:17:39:bf:f1:82:75:1a:77:e2:f0:06:17:
                    5a:b4:c7:14:ff:ec:f0:0d:03:15:39:77:ce:fa:3f:
                    dc:9a:63:ca:15:59:05:2c:eb:55:b1:8b:9e:80:15:
                    fd:c5:78:e6:bf:15:a2:fc:a0:6b:51:bd:39:90:2c:
                    ef:48:a2:c9:81:a9:d9:b3:0c:80:09:9d:7c:fc:77:
                    a2:c1:40:c5:68:d0:4f:eb:91:72:2b:90:49:a3:c7:
                    bd:a4:48:ee:b6:b8:f7:15:88:76:7c:9f:2d:40:ae:
                    45:49:f8:1e:0e:30:1f:04:46:fe:0a:97:eb:2d:a3:
                    fb:34:18:68:7e:19:b3:37:1c:f4:9c:63:24:f5:ec:
                    4c:87:87:3f:84:2d:aa:0b:c1:19:ff:95:ed:ce:5c:
                    71:2d:a7:9a:82:15:5b:0d:2a:3b:73:b1:39:91:a7:
                    2b:58:e5:bb:c1:73:dd:29:0c:64:fa:ca:1f:2c:06:
                    c3:b4:e5:fb:a2:3a:d2:a0:b6:6f:37:f5:6b:e0:b2:
                    ac:6c:c1:56:ad:93:dc:ef:e5:fe:21:d2:8a:cd:33:
                    09:0e:fb:82:31:58:75:ed:c4:f4:6e:f5:10:1a:2d:
                    6b:db:82:37:9c:28:0e:9a:64:d5:7e:ad:18:65:80:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:CA:7C:C4:A6:E1:A2:F1:9B:4C:60:09:56:11:7D:D6:53:A0:E3
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35332e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:25:48:c8:d2:cb:61:67:25:1e:3f:75:5f:30:19:aa:f8:
         e1:41:90:60:28:22:ab:cd:c8:12:d2:2c:71:d6:12:4e:93:6c:
         44:ee:86:7e:19:d3:b9:76:0e:70:8d:07:11:b9:32:ef:2b:86:
         3f:72:9a:e1:5e:c7:dc:31:9e:f8:55:00:42:e4:1f:95:86:48:
         68:51:be:a3:c4:91:86:fd:da:9e:cc:1e:1e:75:09:da:d3:0f:
         ac:10:ab:b1:0b:8f:41:f1:ed:f0:81:f0:ba:80:54:a8:bd:6a:
         09:62:07:4b:e0:13:d8:04:88:7e:68:f5:3c:52:ad:82:fb:df:
         c6:f4:70:fe:5c:67:15:3e:14:7f:3b:c3:9c:c9:14:a1:ef:cc:
         9e:b6:cd:ea:81:2f:13:cc:b1:47:ea:f9:42:05:89:28:97:68:
         57:8b:4e:fc:96:10:da:a3:29:db:39:f7:72:f2:5a:aa:fd:c3:
         43:2d:50:5b:e1:e3:46:0a:b3:57:b8:fa:c6:c3:4e:43:59:b2:
         43:50:0b:4c:74:57:f5:c5:46:ef:00:a0:27:c8:21:c5:51:38:
         e9:dd:52:5a:77:6e:b1:a6:91:47:9f:6d:ad:0c:3b:bb:df:04:
         98:e8:11:64:4b:57:7b:c2:6d:59:33:a4:85:b0:46:ec:25:28:
         05:20:87:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVgqHvTbltZh192TCPMRdGai+DuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEI2NDE5NjhGNTRFMTZGNEE2RTcyQjFGMjQzQTc2MDI1
NTgyMUQ3RTAeFw0yNDA5MDkxNDU5NTFaFw0yNTA5MDgxNTA0NTFaMDMxMTAvBgNV
BAMTKEY0NTlDQTdDQzRBNkUxQTJGMTlCNEM2MDA5NTYxMTdERDY1M0EwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsecu/NL6nbaJLePy5yCDoYRc5
v/GCdRp34vAGF1q0xxT/7PANAxU5d876P9yaY8oVWQUs61Wxi56AFf3FeOa/FaL8
oGtRvTmQLO9IosmBqdmzDIAJnXz8d6LBQMVo0E/rkXIrkEmjx72kSO62uPcViHZ8
ny1ArkVJ+B4OMB8ERv4Kl+sto/s0GGh+GbM3HPScYyT17EyHhz+ELaoLwRn/le3O
XHEtp5qCFVsNKjtzsTmRpytY5bvBc90pDGT6yh8sBsO05fuiOtKgtm839Wvgsqxs
wVatk9zv5f4h0orNMwkO+4IxWHXtxPRu9RAaLWvbgjecKA6aZNV+rRhlgLANAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9FnKfMSm4aLxm0xgCVYRfdZToOMwHwYDVR0j
BBgwFoAUC2QZaPVOFvSm5ysfJDp2AlWCHX4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMC8wQjY0MTk2OEY1NEUxNkY0QTZFNzJCMUYyNDNBNzYwMjU1ODIxRDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCNjQxOTY4RjU0RTE2RjRB
NkU3MkIxRjI0M0E3NjAyNTU4MjFEN0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzAv
MzEzNzM3MmUzODJlMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALEINTANBgkqhkiG9w0BAQsFAAOCAQEAcdUlSMjSy2Fn
JR4/dV8wGar44UGQYCgiq83IEtIscdYSTpNsRO6GfhnTuXYOcI0HEbky7yuGP3Ka
4V7H3DGe+FUAQuQflYZIaFG+o8SRhv3answeHnUJ2tMPrBCrsQuPQfHt8IHwuoBU
qL1qCWIHS+AT2ASIfmj1PFKtgvvfxvRw/lxnFT4UfzvDnMkUoe/MnrbN6oEvE8yx
R+r5QgWJKJdoV4tO/JYQ2qMp2zn3cvJaqv3DQy1QW+HjRgqzV7j6xsNOQ1myQ1AL
THRX9cVG7wCgJ8ghxVE46d1SWndusaaRR59trQw7u98EmOgRZEtXe8JtWTOkhbBG
7CUoBSCHkA==
-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org