Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231332e302f32342d3332203d3e20323730373530.roa
File:                     3137372e31322e3231332e302f32342d3332203d3e20323730373530.roa (raw, json)
Hash identifier:          qgPEwZFt7iO7InRBpwZqhO3khrZX8WD+KfL8brnjhdA=
Subject key identifier:   E3:86:80:02:72:55:5E:6A:33:27:E5:30:B3:F3:A0:DD:CB:EB:72:92
Certificate issuer:       /CN=5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D
Certificate serial:       4F04007E382A914C7FD259C8CA1DEA23EE3BC631
Authority key identifier: 5A:32:5A:0A:5D:2B:C2:2B:2D:8C:B4:02:95:0F:5B:2B:2C:B3:FB:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231332e302f32342d3332203d3e20323730373530.roa
Signing time:             Thu 04 Apr 2024 21:39:32 +0000
ROA not before:           Thu 04 Apr 2024 21:34:32 +0000
ROA not after:            Thu 03 Apr 2025 21:39:32 +0000
asID:                     270750
IP address blocks:        177.12.213.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:04:00:7e:38:2a:91:4c:7f:d2:59:c8:ca:1d:ea:23:ee:3b:c6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D
        Validity
            Not Before: Apr  4 21:34:32 2024 GMT
            Not After : Apr  3 21:39:32 2025 GMT
        Subject: CN=E386800272555E6A3327E530B3F3A0DDCBEB7292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:09:15:06:87:4e:66:9e:5e:1d:9c:00:a7:17:
                    8d:69:13:3d:20:d3:1f:0b:51:f6:6f:f1:8a:a7:89:
                    76:fd:ca:1b:6e:e1:0a:9b:60:3f:61:94:2d:aa:93:
                    0e:a3:ca:9c:92:6d:40:93:3e:4b:85:b1:4b:8b:48:
                    93:d6:4a:fe:74:27:e4:82:65:2f:4a:26:6a:c9:1d:
                    65:82:42:03:db:b3:2f:a9:29:57:fb:59:65:8e:8e:
                    ee:12:8c:af:14:21:67:60:ce:73:f4:a7:94:2d:45:
                    9f:70:83:9f:0c:ba:95:f1:61:6e:f2:08:67:41:db:
                    d7:39:8d:3d:1b:f1:ee:32:9e:6c:df:c1:b2:02:0e:
                    0c:eb:65:0b:d8:5e:b0:0a:aa:f7:9f:47:43:9c:e7:
                    f0:4c:e2:4c:24:e8:43:e3:15:d4:28:4c:94:63:56:
                    6e:19:e4:f2:37:67:5f:6d:f9:60:8b:73:3c:cb:16:
                    2d:bc:7c:59:f7:27:69:a5:47:2a:2a:39:90:0b:4c:
                    39:6e:d0:c9:d6:67:f4:b3:8e:0a:3c:c8:b9:08:e1:
                    c3:b8:72:d0:9e:5c:3f:5d:45:e7:9a:d6:11:38:b7:
                    88:0e:02:b0:39:98:41:26:13:30:78:e1:b8:84:b6:
                    34:b2:8c:b9:31:09:b3:ef:b1:ba:61:2d:cc:b8:f2:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:80:02:72:55:5E:6A:33:27:E5:30:B3:F3:A0:DD:CB:EB:72:92
            X509v3 Authority Key Identifier:
                keyid:5A:32:5A:0A:5D:2B:C2:2B:2D:8C:B4:02:95:0F:5B:2B:2C:B3:FB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231332e302f32342d3332203d3e20323730373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:ba:64:b4:71:8b:9a:8f:49:eb:7b:ea:3a:30:05:79:51:
         3c:a2:66:c3:8e:94:57:b2:e5:db:ee:61:1c:60:15:83:e1:e3:
         4f:b1:e1:57:6b:a1:af:bc:e4:0b:cc:83:1a:6b:c8:09:6a:7d:
         79:b7:c8:e7:4b:cc:13:cd:01:ef:be:b4:13:9b:2a:e2:e5:76:
         b2:ed:d7:c4:a7:36:38:4c:96:ce:ae:9d:a5:57:91:2f:3f:dc:
         7b:96:02:3a:a8:ca:09:4d:3f:95:7d:8a:c0:bc:84:d4:d1:0a:
         dc:8b:ae:33:06:5d:92:d8:1d:ec:bf:d6:34:f6:60:0d:1d:ad:
         33:da:de:71:3c:1a:d1:b3:c2:82:a2:57:65:14:8d:77:8e:f7:
         67:4f:5c:1f:2a:a6:b1:a7:b3:f1:ea:9f:2a:f0:2f:f1:7c:7e:
         aa:93:83:f0:41:bc:1c:c0:37:57:37:c8:a0:99:32:36:c6:48:
         b6:50:a0:b4:17:1e:1c:87:ea:eb:1a:8b:38:c9:e9:1d:38:7c:
         c7:b4:01:37:4c:6f:46:13:64:38:c8:02:c5:ec:8e:b6:e1:af:
         a8:26:df:a0:1d:5b:fb:cb:c3:6c:e0:69:be:af:de:fa:a1:5a:
         ce:fc:01:64:51:25:d3:97:72:bc:ed:f9:f0:8f:1e:c5:ed:0d:
         6b:4c:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:15:19 2024 by rpki-client on console-fra.rpki-client.org