Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa
File:                     3137372e382e35342e302f32342d3234203d3e20323632343933.roa (raw, json)
Hash identifier:          7aLl9txRc6CvNxzXgXMinazvVRGKNSq4X6sAObmY72I=
Subject key identifier:   D5:7E:D1:66:41:16:E9:21:F8:6B:8F:0A:3A:E4:6A:68:8B:85:E0:8C
Certificate issuer:       /CN=0B641968F54E16F4A6E72B1F243A760255821D7E
Certificate serial:       0624A402AE8AAF4B6AE261FDFA1B799E9A182B4B
Authority key identifier: 0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa
Signing time:             Mon 09 Sep 2024 15:04:53 +0000
ROA not before:           Mon 09 Sep 2024 14:59:53 +0000
ROA not after:            Mon 08 Sep 2025 15:04:53 +0000
asID:                     262493
IP address blocks:        177.8.54.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:24:a4:02:ae:8a:af:4b:6a:e2:61:fd:fa:1b:79:9e:9a:18:2b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B641968F54E16F4A6E72B1F243A760255821D7E
        Validity
            Not Before: Sep  9 14:59:53 2024 GMT
            Not After : Sep  8 15:04:53 2025 GMT
        Subject: CN=D57ED1664116E921F86B8F0A3AE46A688B85E08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:ad:0c:3e:0d:31:8a:9a:ad:be:e8:95:e0:
                    ad:5b:b2:d5:5b:55:93:8e:9f:4d:15:e0:1f:3e:67:
                    d7:81:b8:24:3b:7d:9e:85:18:cd:75:45:82:6e:5b:
                    73:7b:88:70:d6:24:ad:4e:df:c0:23:67:d9:31:ee:
                    4a:87:6a:d0:51:78:60:36:76:6c:5a:8d:25:2b:64:
                    be:a5:bd:8b:c6:dd:b6:cd:6c:04:8b:33:97:0e:3b:
                    ab:a3:02:6d:c7:cc:7c:e3:8e:a1:ab:f3:34:1a:7b:
                    3c:9a:a5:be:a8:1c:77:3b:7b:92:dd:0b:30:87:8d:
                    50:b8:73:e7:3d:b0:48:15:00:ed:d1:79:9f:7b:ac:
                    6d:3a:be:a0:ba:c0:42:e3:ee:32:f0:58:fa:21:cd:
                    06:16:4d:71:0c:19:3d:b5:9b:80:ce:4e:7e:1a:67:
                    9c:da:87:d5:53:ee:03:0f:0a:53:25:19:25:41:9b:
                    bc:df:05:08:5b:46:0c:b8:f1:48:78:d7:26:19:e1:
                    ca:96:a6:04:fc:5c:b9:30:91:97:d5:7c:4a:46:b6:
                    67:d1:8c:1a:b6:32:5b:27:43:b4:3a:16:72:b8:79:
                    57:cc:02:61:5b:fd:14:ed:51:a0:bf:e6:bd:07:02:
                    53:1d:aa:2d:b9:24:52:0e:d9:65:48:19:70:b2:cb:
                    57:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:D1:66:41:16:E9:21:F8:6B:8F:0A:3A:E4:6A:68:8B:85:E0:8C
            X509v3 Authority Key Identifier:
                keyid:0B:64:19:68:F5:4E:16:F4:A6:E7:2B:1F:24:3A:76:02:55:82:1D:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0B641968F54E16F4A6E72B1F243A760255821D7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B641968F54E16F4A6E72B1F243A760255821D7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/3137372e382e35342e302f32342d3234203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:50:4f:0e:de:57:ba:4d:c5:e7:47:99:2c:7c:67:f8:22:
         ea:5b:9f:a0:74:43:aa:f6:c8:83:02:9d:d7:cd:d9:e4:59:8f:
         88:4d:c7:0e:37:34:25:2f:03:d1:87:a8:91:26:ae:d1:c4:ca:
         ce:63:09:72:82:40:c0:58:a6:d3:ca:9f:7c:5b:04:20:e3:dd:
         0f:a4:65:f3:7d:fd:6f:5c:76:0e:d3:20:bf:5f:e1:b1:a0:14:
         c8:1f:a2:86:72:92:b0:20:ab:0f:02:9a:97:96:3a:89:b2:69:
         be:c0:d6:6d:5b:d1:71:2d:43:e6:8e:fa:cb:41:e1:75:77:f6:
         71:b5:ef:f6:eb:d6:fb:8d:1a:88:ab:5e:57:29:66:a0:8c:13:
         74:e4:f4:e5:74:f4:d5:56:4b:d9:d4:6f:36:fd:e7:ec:1b:f6:
         ea:a2:a2:ce:8f:43:d0:c8:ef:f8:7f:93:91:1c:c8:ef:76:c8:
         d1:61:25:f6:8a:81:c1:8a:b8:4c:3b:1f:b4:0e:fd:cf:57:ff:
         6d:92:5b:5c:20:94:72:8c:d7:52:86:74:b2:b6:6f:9f:7d:c8:
         42:e3:d8:7d:29:1f:06:15:a2:5e:20:20:54:92:7d:04:a8:9b:
         69:b7:fb:3f:3e:94:b7:da:31:f2:a0:4a:04:8b:51:d7:ec:a1:
         33:04:da:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org