Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32332d3233203d3e20323638303138.roa
File:                     3137392e39362e3231362e302f32332d3233203d3e20323638303138.roa (raw, json)
Hash identifier:          yMrXAvy5jclF/XzsQI9zEtL5BSe4yMNWpWenphZrPgg=
Subject key identifier:   8A:DA:B0:45:EE:A1:5C:5F:B0:72:23:C0:90:DA:B8:4E:54:51:D7:75
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       3173211EB2B7CDA1770675889BC04D26BB2F52D7
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32332d3233203d3e20323638303138.roa
Signing time:             Wed 20 Sep 2023 13:43:40 +0000
ROA not before:           Wed 20 Sep 2023 13:38:40 +0000
ROA not after:            Wed 18 Sep 2024 13:43:40 +0000
asID:                     268018
IP address blocks:        179.96.216.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:21:1e:b2:b7:cd:a1:77:06:75:88:9b:c0:4d:26:bb:2f:52:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Sep 20 13:38:40 2023 GMT
            Not After : Sep 18 13:43:40 2024 GMT
        Subject: CN=8ADAB045EEA15C5FB07223C090DAB84E5451D775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:fd:f8:b9:54:1d:b7:da:78:8d:eb:5d:f6:
                    4b:e8:60:84:e7:99:cb:b1:0b:b3:01:d7:a6:6c:6a:
                    aa:45:9d:bb:cd:f1:48:28:9c:7d:2c:2e:62:bc:e8:
                    40:c3:0b:e6:12:9e:91:cd:8b:da:dd:d2:09:a5:3c:
                    c6:f2:b3:e4:00:5a:30:66:14:14:46:fe:07:33:a4:
                    b3:a5:4e:b1:8d:a5:9e:ec:31:38:4e:d0:42:aa:7f:
                    fc:58:53:2a:d4:b7:84:eb:87:de:56:c0:db:7b:93:
                    43:fb:2f:dc:7d:40:c9:56:4d:19:be:37:2d:18:e5:
                    09:cd:14:f8:c2:45:cb:27:25:c1:13:fc:59:33:97:
                    51:4a:c9:e6:4b:77:51:ea:ff:d8:08:81:c2:36:21:
                    28:ad:96:c1:e6:70:df:a1:2b:fe:57:79:03:44:33:
                    14:31:c9:fe:d7:24:8b:ba:ea:47:bb:8e:02:23:c9:
                    3e:a0:20:c4:c8:d2:84:a2:86:a2:b3:24:81:81:06:
                    8d:14:f9:a7:8a:6a:78:54:8b:c4:6b:96:e7:81:22:
                    ef:6f:98:3b:17:5c:a8:55:13:1f:46:f1:b5:8c:31:
                    4f:5e:4d:3d:20:f0:5e:2a:2c:dc:c6:42:15:86:1e:
                    79:61:84:19:a0:ed:07:72:ea:9b:22:6e:c3:2a:22:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:B0:45:EE:A1:5C:5F:B0:72:23:C0:90:DA:B8:4E:54:51:D7:75
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/3137392e39362e3231362e302f32332d3233203d3e20323638303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.96.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:af:16:38:d3:01:d2:1b:f1:79:e2:05:2e:f8:61:ad:37:
         56:25:83:9e:d6:8c:5b:53:1b:b4:d2:06:5b:35:48:39:88:21:
         82:60:9f:7b:61:84:c7:cd:4e:46:a1:eb:1a:e4:88:4b:61:70:
         57:cd:fd:84:be:c0:38:70:f6:0e:4e:8a:05:2f:e7:53:fc:0d:
         ba:fa:62:d1:8c:bf:78:06:66:2a:a2:5d:f0:74:27:f4:7b:66:
         fe:76:bf:9a:a9:24:94:dc:f4:31:72:04:dc:e1:c3:66:0d:7c:
         75:46:34:89:9b:d3:52:b4:46:2c:9c:13:c0:f3:e9:cd:b9:90:
         c9:6b:1d:61:e9:28:05:19:dc:36:4d:00:86:ae:19:8d:9b:e9:
         39:aa:81:7e:99:21:4a:a9:89:35:a5:f3:c4:a9:f4:18:e2:86:
         16:ad:57:8a:d1:ba:6d:8d:80:30:fe:ff:1a:fc:08:f1:36:e1:
         11:e3:a0:4a:f7:2f:9b:80:ec:19:8d:47:95:bf:1b:d1:e2:4f:
         57:a4:53:1c:4e:a2:54:3f:bd:83:f3:6f:36:e1:0d:5f:6d:d1:
         3b:15:a2:26:20:c5:6c:f2:19:26:0d:24:24:d4:7f:99:f2:96:
         af:6b:b4:bc:eb:9b:0c:77:5e:ba:cf:a9:6b:ad:93:c9:4e:4c:
         a2:6a:ca:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMXMhHrK3zaF3BnWIm8BNJrsvUtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBREE1N0Q4NjAxNjM0Mzk0RjREMDlFMkQwNTE3RTMw
MjlGRTk0MDAeFw0yMzA5MjAxMzM4NDBaFw0yNDA5MTgxMzQzNDBaMDMxMTAvBgNV
BAMTKDhBREFCMDQ1RUVBMTVDNUZCMDcyMjNDMDkwREFCODRFNTQ1MUQ3NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSf34uVQdt9p4jetd9kvoYITn
mcuxC7MB16ZsaqpFnbvN8UgonH0sLmK86EDDC+YSnpHNi9rd0gmlPMbys+QAWjBm
FBRG/gczpLOlTrGNpZ7sMThO0EKqf/xYUyrUt4Trh95WwNt7k0P7L9x9QMlWTRm+
Ny0Y5QnNFPjCRcsnJcET/Fkzl1FKyeZLd1Hq/9gIgcI2ISitlsHmcN+hK/5XeQNE
MxQxyf7XJIu66ke7jgIjyT6gIMTI0oSihqKzJIGBBo0U+aeKanhUi8RrlueBIu9v
mDsXXKhVEx9G8bWMMU9eTT0g8F4qLNzGQhWGHnlhhBmg7Qdy6psibsMqIqPBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUitqwRe6hXF+wciPAkNq4TlRR13UwHwYDVR0j
BBgwFoAU0q2lfYYBY0OU9NCeLQUX4wKf6UAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JXeHdxajlLa0NValVyUWE2MWM4Wm8xREhtSG1wVGtUOW5VZmphZlFm
dXEvMC9EMkFEQTU3RDg2MDE2MzQzOTRGNEQwOUUyRDA1MTdFMzAyOUZFOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQURBNTdEODYwMTYzNDM5
NEY0RDA5RTJEMDUxN0UzMDI5RkU5NDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSV3h3cWo5S2tDVWpVclFhNjFjOFpvMURIbUhtcFRrVDluVWZqYWZRZnVxLzAv
MzEzNzM5MmUzOTM2MmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzYNgwDQYJKoZIhvcNAQELBQADggEBADtOrxY4
0wHSG/F54gUu+GGtN1Ylg57WjFtTG7TSBls1SDmIIYJgn3thhMfNTkah6xrkiEth
cFfN/YS+wDhw9g5OigUv51P8Dbr6YtGMv3gGZiqiXfB0J/R7Zv52v5qpJJTc9DFy
BNzhw2YNfHVGNImb01K0RiycE8Dz6c25kMlrHWHpKAUZ3DZNAIauGY2b6TmqgX6Z
IUqpiTWl88Sp9BjihhatV4rRum2NgDD+/xr8CPE24RHjoEr3L5uA7BmNR5W/G9Hi
T1ekUxxOolQ/vYPzbzbhDV9t0TsVoiYgxWzyGSYNJCTUf5nylq9rtLzrmwx3XrrP
qWutk8lOTKJqyi0=
-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:17 2024 by rpki-client on console-fra.rpki-client.org