Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32342d3234203d3e20323633363431.roa
File:                     3137392e3132372e3135342e302f32342d3234203d3e20323633363431.roa (raw, json)
Hash identifier:          JXswDZEIu46wDHWrlSLYQB4jgAGuJ6tEAEjITe+HSEM=
Subject key identifier:   6A:A5:2E:15:00:C8:25:7E:D0:1A:73:3E:DB:7B:DB:F8:40:12:91:A2
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       754C32935C018679872BAD678DECEF1BACD6510B
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32342d3234203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:35 +0000
ROA not before:           Tue 05 Dec 2023 15:39:35 +0000
ROA not after:            Tue 03 Dec 2024 15:44:35 +0000
asID:                     263641
IP address blocks:        179.127.154.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4c:32:93:5c:01:86:79:87:2b:ad:67:8d:ec:ef:1b:ac:d6:51:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:35 2023 GMT
            Not After : Dec  3 15:44:35 2024 GMT
        Subject: CN=6AA52E1500C8257ED01A733EDB7BDBF8401291A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:43:27:04:44:c3:f8:e7:04:58:ab:d0:93:
                    6e:f6:9e:29:44:6a:13:64:19:24:39:a6:3e:b4:ca:
                    ae:50:52:7d:2e:d1:72:88:79:96:93:ef:d4:73:a8:
                    8e:74:da:09:27:3f:06:4a:8e:83:26:8b:4b:c9:82:
                    ff:6d:c9:7c:b8:5c:26:17:06:a0:18:d5:f4:59:68:
                    b8:74:98:b9:85:02:e1:f4:36:59:dd:4e:4a:28:b2:
                    02:7c:7c:75:85:2e:ee:9a:e2:10:09:a9:69:3e:8c:
                    47:99:05:2e:c4:63:aa:48:22:76:f6:59:04:36:20:
                    81:6b:b0:29:7e:0e:f6:ee:38:20:ec:54:8b:37:df:
                    77:24:a5:6e:5d:6d:54:d9:5e:fa:1b:a6:e8:76:88:
                    42:d5:ac:58:66:c7:d9:37:74:b4:9b:0b:11:86:cf:
                    f9:11:6a:c2:f8:44:52:48:ed:36:51:01:7e:30:53:
                    64:21:7d:7f:67:9f:a3:c2:e2:93:59:7b:ba:68:20:
                    74:72:8a:44:c0:39:e2:9d:b2:d0:94:03:7a:e3:d1:
                    26:b8:98:d7:39:8b:6a:c3:84:7e:96:59:02:9e:6f:
                    72:a4:1e:3e:31:37:f7:18:16:f2:d1:0b:4a:35:cd:
                    73:91:14:74:a7:e2:7c:bc:e5:bc:72:f6:38:71:e6:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A5:2E:15:00:C8:25:7E:D0:1A:73:3E:DB:7B:DB:F8:40:12:91:A2
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135342e302f32342d3234203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8e:11:5b:81:54:68:51:84:fe:05:4f:1f:42:82:13:96:68:
         07:cd:22:c2:db:33:6d:6b:b1:05:a7:f3:bf:6b:8f:75:81:de:
         f1:fc:61:48:18:c7:d8:5a:ab:9e:fb:3d:b1:c8:36:da:70:04:
         d9:fc:de:96:8f:10:d5:75:96:e4:05:42:90:7c:a5:c1:20:bf:
         a1:7f:f0:5e:08:9d:06:a8:bb:cb:da:60:f0:22:f2:79:9b:e4:
         d4:d3:26:67:d5:12:25:ce:89:34:16:de:93:69:79:0b:46:4f:
         cb:17:c0:bc:48:8b:dd:15:5a:40:52:fc:96:b4:83:ef:2f:cc:
         ca:9e:6a:05:f2:5f:74:54:bb:f5:4e:df:38:81:82:6d:f9:a5:
         06:e4:33:f3:08:29:4c:72:02:27:00:05:8b:3a:cc:91:9c:2f:
         e3:02:6a:2c:36:4c:75:70:13:c9:79:c6:8a:ab:67:f6:cc:e6:
         e4:39:8e:81:c7:13:04:ca:8a:45:00:6b:3f:73:77:e9:0a:ad:
         bf:16:bf:23:f4:25:77:91:61:93:44:d3:63:b7:2e:1b:81:be:
         cb:d8:79:7e:bd:82:09:a0:57:b7:ea:22:ba:76:82:36:a4:56:
         5d:ec:c1:8e:ed:87:51:e6:ac:8c:7a:ac:65:12:5b:37:1c:ae:
         b6:9b:7b:46
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdUwyk1wBhnmHK61njezvG6zWUQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFFRjAzMzQxQTZFQzVBNzhBQThCMkU5MkQ5QjlBRDA1
OEMzQzMyODAeFw0yMzEyMDUxNTM5MzVaFw0yNDEyMDMxNTQ0MzVaMDMxMTAvBgNV
BAMTKDZBQTUyRTE1MDBDODI1N0VEMDFBNzMzRURCN0JEQkY4NDAxMjkxQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEkMnBETD+OcEWKvQk272nilE
ahNkGSQ5pj60yq5QUn0u0XKIeZaT79RzqI502gknPwZKjoMmi0vJgv9tyXy4XCYX
BqAY1fRZaLh0mLmFAuH0NlndTkoosgJ8fHWFLu6a4hAJqWk+jEeZBS7EY6pIInb2
WQQ2IIFrsCl+DvbuOCDsVIs333ckpW5dbVTZXvobpuh2iELVrFhmx9k3dLSbCxGG
z/kRasL4RFJI7TZRAX4wU2QhfX9nn6PC4pNZe7poIHRyikTAOeKdstCUA3rj0Sa4
mNc5i2rDhH6WWQKeb3KkHj4xN/cYFvLRC0o1zXORFHSn4ny85bxy9jhx5mPhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaqUuFQDIJX7QGnM+23vb+EASkaIwHwYDVR0j
BBgwFoAUiu8DNBpuxaeKqLLpLZua0FjDwygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC84QUVGMDMzNDFBNkVDNUE3OEFBOEIyRTkyRDlCOUFEMDU4QzNDMzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBRUYwMzM0MUE2RUM1QTc4
QUE4QjJFOTJEOUI5QUQwNThDM0MzMjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzNzM5MmUzMTMyMzcyZTMxMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALN/mjANBgkqhkiG9w0BAQsFAAOCAQEAF44R
W4FUaFGE/gVPH0KCE5ZoB80iwtszbWuxBafzv2uPdYHe8fxhSBjH2Fqrnvs9scg2
2nAE2fzelo8Q1XWW5AVCkHylwSC/oX/wXgidBqi7y9pg8CLyeZvk1NMmZ9USJc6J
NBbek2l5C0ZPyxfAvEiL3RVaQFL8lrSD7y/Myp5qBfJfdFS79U7fOIGCbfmlBuQz
8wgpTHICJwAFizrMkZwv4wJqLDZMdXATyXnGiqtn9szm5DmOgccTBMqKRQBrP3N3
6Qqtvxa/I/Qld5Fhk0TTY7cuG4G+y9h5fr2CCaBXt+oiunaCNqRWXezBju2HUeas
jHqsZRJbNxyutpt7Rg==
-----END CERTIFICATE-----
Generated at Fri Jan 19 02:24:52 2024 by rpki-client on console-fra.rpki-client.org