Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135382e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          0C0udoZqubXD54QBZBhbKppMh7Fc2hsQfyCJ0oPG4ys=
Subject key identifier:   9A:EF:03:1B:47:B4:09:6C:64:41:77:11:7B:F2:CB:BB:F3:7F:FE:09
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       6BDA32686D88D205B5E6931B07966555EA71FBD8
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 09 May 2023 14:22:02 +0000
ROA not before:           Tue 09 May 2023 14:17:02 +0000
ROA not after:            Tue 07 May 2024 14:22:02 +0000
asID:                     263641
IP address blocks:        179.127.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:da:32:68:6d:88:d2:05:b5:e6:93:1b:07:96:65:55:ea:71:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: May  9 14:17:02 2023 GMT
            Not After : May  7 14:22:02 2024 GMT
        Subject: CN=9AEF031B47B4096C644177117BF2CBBBF37FFE09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fa:a0:6a:e2:50:67:4f:85:c6:ee:ad:ed:d1:
                    b0:6f:7d:d4:3c:8c:16:3d:1e:e5:95:6b:e6:cf:3d:
                    41:f3:d8:de:66:62:c5:f7:1e:73:a4:2a:06:de:24:
                    96:59:45:50:d8:14:7e:99:72:2a:57:59:fc:dd:5f:
                    1e:89:65:89:9e:b5:23:92:69:b2:2c:6f:70:98:a1:
                    27:01:2f:6a:30:2c:06:d9:f4:26:e1:d0:3a:bc:c8:
                    69:80:e0:92:ab:5d:6b:3f:c9:bf:70:94:79:46:75:
                    af:1e:65:47:4c:68:78:44:49:09:f5:d2:20:a7:b3:
                    6d:92:d7:cb:f2:ab:60:54:9b:55:26:17:3f:5c:ed:
                    f5:3f:3f:64:bc:4a:5c:7a:51:d5:cb:7e:3a:15:a6:
                    dc:44:dc:af:92:a4:bb:cc:b7:e3:9f:e3:48:5b:01:
                    b9:26:d1:35:d4:fc:1c:d2:31:dd:4b:2c:af:01:5d:
                    c1:fd:62:8c:a8:e4:41:1a:20:ec:9e:dc:ad:dd:51:
                    d8:f8:1d:f9:58:0c:d3:68:f1:a8:c8:3c:96:f2:ba:
                    06:de:23:fa:26:bb:51:45:e6:f2:9a:ef:35:a0:27:
                    54:d0:0e:76:3b:df:e7:0c:fb:d1:e3:22:ad:38:82:
                    e7:c1:50:ef:17:e0:54:c6:30:80:0c:6f:8c:49:71:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:03:1B:47:B4:09:6C:64:41:77:11:7B:F2:CB:BB:F3:7F:FE:09
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135382e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:ce:d2:19:63:bb:c5:81:22:d0:51:c0:14:cb:50:b1:1c:56:
         69:1b:c7:61:a2:8f:74:2e:c8:e1:93:be:dc:dd:e9:b4:d1:ae:
         8e:bf:f4:b1:09:79:15:e9:ea:53:65:37:7e:27:d6:b5:e0:e4:
         b4:09:04:79:c6:70:91:ca:70:76:7f:e1:9e:3a:6b:fd:af:4d:
         bc:48:c5:f1:59:5e:b1:12:ea:c2:07:89:ed:0d:e9:93:7a:9e:
         d7:78:07:ab:e6:5b:59:04:76:aa:ef:e1:4f:2d:d2:3e:be:ad:
         63:4e:f7:15:9f:ef:31:a0:30:54:48:34:78:79:48:63:c1:77:
         fa:1a:ea:1e:63:8f:86:fd:60:cf:54:0d:05:6c:72:1c:16:30:
         52:ca:1e:04:13:0f:97:68:03:2d:8f:3b:5e:1c:5e:57:cb:32:
         94:96:d9:3a:e9:ef:d3:8f:77:b3:d1:0e:14:08:3f:24:dc:76:
         39:e3:40:f7:0a:7c:3d:27:a8:c3:0c:24:f9:26:af:12:28:e1:
         ac:a5:f5:ae:9f:da:b5:5e:d8:7e:57:23:7b:bd:e4:55:e0:18:
         22:6e:c0:7d:be:af:e0:7d:94:91:e1:01:92:ef:00:de:47:7f:
         4f:da:1c:2c:8c:73:c0:ca:21:05:3b:49:9f:0b:02:b5:3d:a7:
         89:07:93:a9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa9oyaG2I0gW15pMbB5ZlVepx+9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFFRjAzMzQxQTZFQzVBNzhBQThCMkU5MkQ5QjlBRDA1
OEMzQzMyODAeFw0yMzA1MDkxNDE3MDJaFw0yNDA1MDcxNDIyMDJaMDMxMTAvBgNV
BAMTKDlBRUYwMzFCNDdCNDA5NkM2NDQxNzcxMTdCRjJDQkJCRjM3RkZFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+qBq4lBnT4XG7q3t0bBvfdQ8
jBY9HuWVa+bPPUHz2N5mYsX3HnOkKgbeJJZZRVDYFH6ZcipXWfzdXx6JZYmetSOS
abIsb3CYoScBL2owLAbZ9Cbh0Dq8yGmA4JKrXWs/yb9wlHlGda8eZUdMaHhESQn1
0iCns22S18vyq2BUm1UmFz9c7fU/P2S8Slx6UdXLfjoVptxE3K+SpLvMt+Of40hb
Abkm0TXU/BzSMd1LLK8BXcH9Yoyo5EEaIOye3K3dUdj4HflYDNNo8ajIPJbyugbe
I/omu1FF5vKa7zWgJ1TQDnY73+cM+9HjIq04gufBUO8X4FTGMIAMb4xJcdKHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmu8DG0e0CWxkQXcRe/LLu/N//gkwHwYDVR0j
BBgwFoAUiu8DNBpuxaeKqLLpLZua0FjDwygwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0p2d3hCS01vcVBFNXVuektGNlJ4c3UxY0J4YTVQWkFGYlBwdVNIRnhm
a2EvMC84QUVGMDMzNDFBNkVDNUE3OEFBOEIyRTkyRDlCOUFEMDU4QzNDMzI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhBRUYwMzM0MUE2RUM1QTc4
QUE4QjJFOTJEOUI5QUQwNThDM0MzMjguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NKdnd4QktNb3FQRTV1bnpLRjZSeHN1MWNCeGE1UFpBRmJQcHVTSEZ4ZmthLzAv
MzEzNzM5MmUzMTMyMzcyZTMxMzUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbN/njANBgkqhkiG9w0BAQsFAAOCAQEAHs7S
GWO7xYEi0FHAFMtQsRxWaRvHYaKPdC7I4ZO+3N3ptNGujr/0sQl5FenqU2U3fifW
teDktAkEecZwkcpwdn/hnjpr/a9NvEjF8VlesRLqwgeJ7Q3pk3qe13gHq+ZbWQR2
qu/hTy3SPr6tY073FZ/vMaAwVEg0eHlIY8F3+hrqHmOPhv1gz1QNBWxyHBYwUsoe
BBMPl2gDLY87XhxeV8sylJbZOunv0493s9EOFAg/JNx2OeNA9wp8PSeowwwk+Sav
EijhrKX1rp/atV7Yflcje73kVeAYIm7Afb6v4H2UkeEBku8A3kd/T9ocLIxzwMoh
BTtJnwsCtT2niQeTqQ==
-----END CERTIFICATE-----
Generated at Fri Jan 19 01:49:37 2024 by rpki-client on console-ams.rpki-client.org