Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa
File:                     3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa (raw, json)
Hash identifier:          d5jwNVYMvAR5VBV1AtTmES9fyv9zJ6zlubLVF8VukXI=
Subject key identifier:   98:36:75:33:3A:76:6E:75:01:C8:70:50:55:13:07:3D:39:58:57:D6
Certificate issuer:       /CN=5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D
Certificate serial:       4A540B8CCEC17644F2219B5ADC4D22500F080850
Authority key identifier: 5A:32:5A:0A:5D:2B:C2:2B:2D:8C:B4:02:95:0F:5B:2B:2C:B3:FB:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa
Signing time:             Thu 04 Apr 2024 21:39:32 +0000
ROA not before:           Thu 04 Apr 2024 21:34:32 +0000
ROA not after:            Thu 03 Apr 2025 21:39:32 +0000
asID:                     270750
IP address blocks:        177.12.214.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:0b:8c:ce:c1:76:44:f2:21:9b:5a:dc:4d:22:50:0f:08:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D
        Validity
            Not Before: Apr  4 21:34:32 2024 GMT
            Not After : Apr  3 21:39:32 2025 GMT
        Subject: CN=983675333A766E7501C870505513073D395857D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:cf:fb:46:f7:06:76:d9:d0:b7:62:e1:af:
                    88:50:d0:93:1e:5c:8a:ad:54:da:b2:89:a5:0c:f9:
                    0f:6e:fa:12:9e:23:69:6e:b1:c3:32:97:03:ed:9c:
                    d1:02:5e:ad:8e:25:47:1a:97:0f:cc:8b:e5:a8:c8:
                    31:ab:eb:33:39:3b:b2:81:e1:39:17:27:6d:24:10:
                    d8:80:dd:9a:de:91:8e:9b:61:43:96:68:7a:0a:96:
                    1f:f8:d2:96:71:04:97:5c:e8:4a:1d:79:6a:ac:46:
                    77:2b:23:46:9e:27:29:e6:82:a4:2f:05:6d:40:cc:
                    14:47:d0:12:0b:cf:c2:ac:67:3f:29:3d:02:2f:f5:
                    ee:c0:9f:4e:1b:a9:6d:0e:6d:0b:a3:d5:42:b0:19:
                    b2:d1:04:01:f0:2f:6b:cd:2c:30:9c:65:ad:7b:a4:
                    5a:1e:41:be:1d:dc:c0:74:eb:d8:a4:13:39:1b:53:
                    1a:1e:cd:97:e9:28:5f:f5:2b:78:cb:5e:42:15:25:
                    a2:4d:69:ca:b3:be:10:b5:db:df:99:31:4e:91:d8:
                    25:e6:6c:68:7d:8f:5a:dd:a3:52:2e:6c:d6:e8:d0:
                    66:3d:58:51:5a:d2:d3:ba:08:db:a6:f5:20:52:e7:
                    f2:fb:88:02:18:19:ed:36:9f:28:23:c4:32:6f:61:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:75:33:3A:76:6E:75:01:C8:70:50:55:13:07:3D:39:58:57:D6
            X509v3 Authority Key Identifier:
                keyid:5A:32:5A:0A:5D:2B:C2:2B:2D:8C:B4:02:95:0F:5B:2B:2C:B3:FB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A325A0A5D2BC22B2D8CB402950F5B2B2CB3FB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzbrHBht7LE6DRgr9Fqv1YuURRkiA7tdFf92Twqz4KND/1/3137372e31322e3231342e302f32342d3332203d3e20323730373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7c:1f:e9:6a:79:1c:d5:83:e2:87:d0:23:08:69:a7:6b:e0:
         2c:48:3a:a3:ce:32:80:08:13:4b:32:cc:a2:71:66:21:80:60:
         85:16:a7:11:63:af:a6:dc:4b:6b:b7:7f:fb:de:d7:30:1d:68:
         f1:4a:6a:f8:95:6a:77:d1:e9:b1:60:51:e2:5f:82:28:c8:d9:
         fb:6a:9a:8d:40:a2:61:38:a6:b0:f2:5b:ec:71:d1:a9:cb:aa:
         d5:72:53:27:fe:78:ce:f9:5e:d4:d6:12:ea:9f:1c:42:aa:89:
         58:8e:e7:d2:c7:09:95:51:aa:fc:98:43:50:ea:0e:2b:0c:72:
         54:79:aa:29:cd:f5:1c:1f:1f:6a:9a:f4:e6:cf:20:16:c2:47:
         c7:d5:10:4d:16:24:7a:96:8b:4b:03:a9:01:0a:6f:a3:de:72:
         12:9b:23:7d:f0:2b:a3:fb:a8:c9:c3:f7:bd:3d:05:f9:b6:04:
         09:df:06:28:fc:a1:81:0e:71:9d:94:0b:f3:61:e8:52:4b:1a:
         17:f5:04:56:c1:3c:52:c1:4b:64:c0:dd:f8:59:3e:d0:58:8b:
         17:3e:2f:9a:b8:d9:58:b0:0a:75:74:18:74:79:7b:77:88:e9:
         9d:4f:40:44:ff:fa:6d:4d:22:43:b9:2e:58:e0:24:57:43:9a:
         f8:1a:11:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSlQLjM7BdkTyIZta3E0iUA8ICFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzMjVBMEE1RDJCQzIyQjJEOENCNDAyOTUwRjVCMkIy
Q0IzRkI2RDAeFw0yNDA0MDQyMTM0MzJaFw0yNTA0MDMyMTM5MzJaMDMxMTAvBgNV
BAMTKDk4MzY3NTMzM0E3NjZFNzUwMUM4NzA1MDU1MTMwNzNEMzk1ODU3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+8/7RvcGdtnQt2Lhr4hQ0JMe
XIqtVNqyiaUM+Q9u+hKeI2luscMylwPtnNECXq2OJUcalw/Mi+WoyDGr6zM5O7KB
4TkXJ20kENiA3ZrekY6bYUOWaHoKlh/40pZxBJdc6EodeWqsRncrI0aeJynmgqQv
BW1AzBRH0BILz8KsZz8pPQIv9e7An04bqW0ObQuj1UKwGbLRBAHwL2vNLDCcZa17
pFoeQb4d3MB069ikEzkbUxoezZfpKF/1K3jLXkIVJaJNacqzvhC129+ZMU6R2CXm
bGh9j1rdo1IubNbo0GY9WFFa0tO6CNum9SBS5/L7iAIYGe02nygjxDJvYVj9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmDZ1Mzp2bnUByHBQVRMHPTlYV9YwHwYDVR0j
BBgwFoAUWjJaCl0rwistjLQClQ9bKyyz+20wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXpickhCaHQ3TEU2RFJncjlGcXYxWXVVUlJraUE3dGRGZjkyVHdxejRL
TkQvMS81QTMyNUEwQTVEMkJDMjJCMkQ4Q0I0MDI5NTBGNUIyQjJDQjNGQjZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMzI1QTBBNUQyQkMyMkIy
RDhDQjQwMjk1MEY1QjJCMkNCM0ZCNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V6YnJIQmh0N0xFNkRSZ3I5RnF2MVl1VVJSa2lBN3RkRmY5MlR3cXo0S05ELzEv
MzEzNzM3MmUzMTMyMmUzMjMxMzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzAzNzM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxDNYwDQYJKoZIhvcNAQELBQADggEBAD18H+lq
eRzVg+KH0CMIaadr4CxIOqPOMoAIE0syzKJxZiGAYIUWpxFjr6bcS2u3f/ve1zAd
aPFKaviVanfR6bFgUeJfgijI2ftqmo1AomE4prDyW+xx0anLqtVyUyf+eM75XtTW
EuqfHEKqiViO59LHCZVRqvyYQ1DqDisMclR5qinN9RwfH2qa9ObPIBbCR8fVEE0W
JHqWi0sDqQEKb6PechKbI33wK6P7qMnD9709Bfm2BAnfBij8oYEOcZ2UC/Nh6FJL
Ghf1BFbBPFLBS2TA3fhZPtBYixc+L5q42ViwCnV0GHR5e3eI6Z1PQET/+m1NIkO5
LljgJFdDmvgaETg=
-----END CERTIFICATE-----
Generated at Tue Jun 18 02:28:02 2024 by rpki-client on console-ams.rpki-client.org