Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3135312e302f32342d3234203d3e20323632383638.roa
File:                     3136342e3136332e3135312e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier:          ca0GIXQNtfOEs66T41QJgOT2I6MEyEY+fzDBbrrGVfM=
Subject key identifier:   C0:17:99:F5:ED:52:B9:66:36:0D:CE:FF:A1:25:45:5A:DC:D6:DF:74
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       0EFC6FA962C66EC80F24D78F024399E394E087EF
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3135312e302f32342d3234203d3e20323632383638.roa
Signing time:             Tue 06 Jun 2023 12:50:42 +0000
ROA not before:           Tue 06 Jun 2023 12:45:42 +0000
ROA not after:            Tue 04 Jun 2024 12:50:42 +0000
asID:                     262868
IP address blocks:        164.163.151.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fc:6f:a9:62:c6:6e:c8:0f:24:d7:8f:02:43:99:e3:94:e0:87:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jun  6 12:45:42 2023 GMT
            Not After : Jun  4 12:50:42 2024 GMT
        Subject: CN=C01799F5ED52B966360DCEFFA125455ADCD6DF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:de:81:b6:b3:b6:18:d8:5c:30:d1:1c:9d:
                    96:ee:4c:66:df:2d:07:08:ec:0c:ac:84:b8:2e:0c:
                    09:50:3b:89:bf:9c:c9:87:0a:c1:4f:6c:c4:9c:0f:
                    eb:ab:2d:4a:7c:d8:a2:db:2c:1a:2e:71:ac:5c:6c:
                    dd:55:c3:85:6e:28:fa:5c:55:ee:c2:90:44:21:34:
                    73:50:c3:89:1c:30:cc:1e:37:93:0e:66:c8:b2:9a:
                    50:c7:a1:ce:0d:56:e0:53:62:6e:f5:ce:cb:98:5e:
                    71:bf:a4:4e:4c:04:d7:2c:57:22:be:4f:3d:05:20:
                    1e:c6:de:21:57:b7:36:76:12:ac:e2:37:c3:6c:2b:
                    ee:ae:0d:9d:22:4d:a7:7c:e9:f6:92:99:03:1f:dc:
                    c3:5a:89:7b:a1:18:ce:ef:66:5a:96:fc:aa:a5:6d:
                    d4:15:f5:05:8d:87:82:c2:c4:f0:0e:58:ab:23:e3:
                    37:00:be:b3:e3:0d:ab:e8:cc:ab:9b:5a:82:bd:09:
                    a7:54:92:3b:5b:b8:4b:18:9c:3a:f6:fd:b5:92:7d:
                    c8:bc:31:0b:48:87:a9:0b:27:19:af:11:f0:9c:62:
                    ec:fe:e2:ea:a3:63:93:73:ce:8a:dc:57:24:ce:b6:
                    d5:30:7e:57:2d:25:1b:7c:4a:62:8c:17:b3:c8:d7:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:99:F5:ED:52:B9:66:36:0D:CE:FF:A1:25:45:5A:DC:D6:DF:74
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3136342e3136332e3135312e302f32342d3234203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:79:e6:8a:c4:d7:ce:34:ac:7f:f4:58:98:ec:84:12:1c:
         4a:da:bc:73:c7:01:a4:6a:07:3d:87:e5:b9:5d:d2:9b:79:b0:
         2e:07:6d:61:cc:f4:45:0c:38:86:88:72:c2:1a:16:98:d3:4b:
         71:e8:b7:32:a2:64:f8:61:e7:35:54:48:4d:3f:43:64:44:b7:
         6d:ca:69:92:65:31:6b:07:36:5a:58:6f:03:4a:8c:6c:3f:19:
         26:10:cc:b7:f2:36:12:37:d7:6c:8d:82:13:82:93:9a:0b:20:
         62:24:8d:4d:40:e0:86:82:12:91:46:a3:d1:79:4b:49:37:65:
         9f:31:b1:68:8d:61:6c:aa:61:87:9f:2f:20:00:ee:e9:38:d7:
         0d:7f:62:6f:03:bc:a5:ad:dd:ef:28:f7:f0:69:72:f2:7f:e9:
         bb:64:47:8d:4d:54:75:9d:b2:c8:eb:0a:bb:93:bf:36:75:9d:
         68:ac:00:20:b9:79:6d:7d:8f:db:a0:d7:4f:2c:d9:12:07:23:
         d7:65:61:9f:bd:20:6c:a4:02:3a:3b:6b:65:77:26:f8:31:1c:
         08:9f:5b:db:af:a2:be:f2:ba:75:1c:2e:29:fe:6c:2c:10:ff:
         5b:23:d8:a4:df:d7:73:52:3e:aa:7a:2f:18:a0:91:69:a7:36:
         13:26:e8:33
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDvxvqWLGbsgPJNePAkOZ45Tgh+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0Mzc0M0EwQUI4MjhERDMyMURCMUM5NkI2QUI1NTkx
NkE4ODU5QTAeFw0yMzA2MDYxMjQ1NDJaFw0yNDA2MDQxMjUwNDJaMDMxMTAvBgNV
BAMTKEMwMTc5OUY1RUQ1MkI5NjYzNjBEQ0VGRkExMjU0NTVBRENENkRGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1d6BtrO2GNhcMNEcnZbuTGbf
LQcI7AyshLguDAlQO4m/nMmHCsFPbMScD+urLUp82KLbLBoucaxcbN1Vw4VuKPpc
Ve7CkEQhNHNQw4kcMMweN5MOZsiymlDHoc4NVuBTYm71zsuYXnG/pE5MBNcsVyK+
Tz0FIB7G3iFXtzZ2EqziN8NsK+6uDZ0iTad86faSmQMf3MNaiXuhGM7vZlqW/Kql
bdQV9QWNh4LCxPAOWKsj4zcAvrPjDavozKubWoK9CadUkjtbuEsYnDr2/bWSfci8
MQtIh6kLJxmvEfCcYuz+4uqjY5NzzorcVyTOttUwflctJRt8SmKMF7PI18GjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwBeZ9e1SuWY2Dc7/oSVFWtzW33QwHwYDVR0j
BBgwFoAUB0N0Ogq4KN0yHbHJa2q1WRaohZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMC8wNzQzNzQzQTBBQjgyOEREMzIxREIxQzk2QjZBQjU1OTE2QTg4NTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3NDM3NDNBMEFCODI4REQz
MjFEQjFDOTZCNkFCNTU5MTZBODg1OUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSjlzANBgkqhkiG9w0BAQsFAAOCAQEAXeN5
5orE1840rH/0WJjshBIcStq8c8cBpGoHPYfluV3Sm3mwLgdtYcz0RQw4hohywhoW
mNNLcei3MqJk+GHnNVRITT9DZES3bcppkmUxawc2WlhvA0qMbD8ZJhDMt/I2EjfX
bI2CE4KTmgsgYiSNTUDghoISkUaj0XlLSTdlnzGxaI1hbKphh58vIADu6TjXDX9i
bwO8pa3d7yj38Gly8n/pu2RHjU1UdZ2yyOsKu5O/NnWdaKwAILl5bX2P26DXTyzZ
Egcj12Vhn70gbKQCOjtrZXcm+DEcCJ9b26+ivvK6dRwuKf5sLBD/WyPYpN/Xc1I+
qnovGKCRaac2EyboMw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:26 2023 by rpki-client on console-ams.rpki-client.org