Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
File:                     3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa (raw, json)
Hash identifier:          IMIbLV0UTKFQsRmMK/aTOt0QSMhTO/PhgiGsAR9kR64=
Subject key identifier:   F5:BF:F7:AD:CF:68:0E:71:C4:43:67:C7:FE:7D:08:62:C2:8F:2D:DA
Certificate issuer:       /CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
Certificate serial:       1CAE09891EDD5C7C2C6909CD186320C4D5C91F7F
Authority key identifier: FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa
Signing time:             Thu 04 Apr 2024 07:24:27 +0000
ROA not before:           Thu 04 Apr 2024 07:19:27 +0000
ROA not after:            Thu 03 Apr 2025 07:24:27 +0000
asID:                     265998
IP address blocks:        181.191.84.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ae:09:89:1e:dd:5c:7c:2c:69:09:cd:18:63:20:c4:d5:c9:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4
        Validity
            Not Before: Apr  4 07:19:27 2024 GMT
            Not After : Apr  3 07:24:27 2025 GMT
        Subject: CN=F5BFF7ADCF680E71C44367C7FE7D0862C28F2DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:51:52:fa:07:d6:59:7e:d2:55:b3:90:51:
                    d0:78:36:f7:d5:07:56:76:9b:08:78:75:d2:20:d7:
                    0e:52:e1:06:21:66:fb:a9:85:f9:82:d1:91:05:e7:
                    2c:f3:79:8a:28:91:fe:2c:ee:3d:0e:ec:db:ad:f9:
                    88:4f:88:79:0d:cd:80:dc:54:85:44:8e:08:1a:e3:
                    1e:6c:a6:b0:ad:81:81:6f:b2:7c:91:a5:2e:d9:a1:
                    5d:f9:5d:1e:73:9b:16:2d:d0:29:ee:91:b2:9c:48:
                    e7:fd:c1:89:90:83:15:cb:1c:0d:c3:a8:46:41:6a:
                    85:79:63:d7:1b:28:dc:5f:d1:88:9d:40:8f:51:db:
                    a1:65:d1:c6:c1:12:70:46:a9:49:ac:e8:ee:4b:3a:
                    62:02:63:77:35:34:b0:db:4d:cc:e8:65:19:28:64:
                    36:2e:16:19:b8:ec:2c:06:bb:1f:4f:d6:1b:21:b1:
                    90:89:26:72:73:55:74:43:04:fc:4f:49:e1:ef:f9:
                    1c:ed:10:0a:8f:70:db:5b:31:4c:a4:06:04:ab:52:
                    57:05:54:09:fb:88:52:83:63:f9:66:60:65:e9:ff:
                    51:96:1e:b4:39:65:22:30:3e:21:30:3e:4b:12:8c:
                    ae:cb:e8:3a:ba:64:de:08:f1:7a:27:d8:2c:fb:1c:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BF:F7:AD:CF:68:0E:71:C4:43:67:C7:FE:7D:08:62:C2:8F:2D:DA
            X509v3 Authority Key Identifier:
                keyid:FF:D8:CE:EB:1D:F4:78:F7:15:D7:FD:8A:A7:F6:60:F3:92:67:D5:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD8CEEB1DF478F715D7FD8AA7F660F39267D5F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkxQh8xUknD5jGDrdLHMHeqedyFmKuPKJUaCysuexXQP/1/3138312e3139312e38342e302f32322d3234203d3e20323635393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:9a:7f:2e:ff:ed:3a:7c:b2:d0:8f:95:d5:91:bf:81:60:
         a4:29:e5:14:6f:02:4c:95:22:fc:50:b1:23:4a:52:35:a1:ea:
         c4:eb:24:1c:87:82:c9:0c:1d:20:2f:b0:17:bc:77:18:f9:92:
         61:94:bf:e7:79:e7:83:0a:e0:75:bf:2d:b9:61:7e:71:c6:40:
         7d:84:0b:10:13:ee:f1:e0:8f:21:27:5d:c2:ff:46:57:f5:69:
         eb:7b:c5:37:b3:ae:34:61:b5:7c:c7:f7:60:cf:d0:b5:15:7d:
         7b:21:cb:89:61:28:e6:13:5e:99:22:62:60:60:e3:f3:e1:24:
         a0:90:26:91:a5:94:6b:92:83:b3:2e:2f:9e:99:71:b0:22:58:
         65:30:3b:f6:b9:1d:4d:2e:c8:9d:13:0c:13:fa:0e:a0:2b:fa:
         a8:4c:db:eb:aa:6c:13:51:ec:5c:90:72:1a:7e:a1:38:2b:20:
         04:f2:ad:73:6d:a5:34:35:e3:4a:22:73:03:cc:8c:ce:76:1a:
         70:51:f0:a8:cb:3f:57:28:d1:9b:e9:e2:93:d5:56:66:53:db:
         af:ba:44:53:d7:a3:f5:7c:3d:da:a4:d6:73:81:f6:a9:e9:0e:
         a0:a5:b0:df:ec:6d:2e:47:5c:58:47:81:a4:fa:64:88:c8:b5:
         5a:c8:f9:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHK4JiR7dXHwsaQnNGGMgxNXJH38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEOENFRUIxREY0NzhGNzE1RDdGRDhBQTdGNjYwRjM5
MjY3RDVGNDAeFw0yNDA0MDQwNzE5MjdaFw0yNTA0MDMwNzI0MjdaMDMxMTAvBgNV
BAMTKEY1QkZGN0FEQ0Y2ODBFNzFDNDQzNjdDN0ZFN0QwODYyQzI4RjJEREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN41FS+gfWWX7SVbOQUdB4NvfV
B1Z2mwh4ddIg1w5S4QYhZvuphfmC0ZEF5yzzeYookf4s7j0O7Nut+YhPiHkNzYDc
VIVEjgga4x5sprCtgYFvsnyRpS7ZoV35XR5zmxYt0CnukbKcSOf9wYmQgxXLHA3D
qEZBaoV5Y9cbKNxf0YidQI9R26Fl0cbBEnBGqUms6O5LOmICY3c1NLDbTczoZRko
ZDYuFhm47CwGux9P1hshsZCJJnJzVXRDBPxPSeHv+RztEAqPcNtbMUykBgSrUlcF
VAn7iFKDY/lmYGXp/1GWHrQ5ZSIwPiEwPksSjK7L6Dq6ZN4I8Xon2Cz7HOm1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9b/3rc9oDnHEQ2fH/n0IYsKPLdowHwYDVR0j
BBgwFoAU/9jO6x30ePcV1/2Kp/Zg85Jn1fQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGt4UWg4eFVrbkQ1akdEcmRMSE1IZXFlZHlGbUt1UEtKVWFDeXN1ZXhY
UVAvMS9GRkQ4Q0VFQjFERjQ3OEY3MTVEN0ZEOEFBN0Y2NjBGMzkyNjdENUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRDhDRUVCMURGNDc4Rjcx
NUQ3RkQ4QUE3RjY2MEYzOTI2N0Q1RjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RreFFoOHhVa25ENWpHRHJkTEhNSGVxZWR5Rm1LdVBLSlVhQ3lzdWV4WFFQLzEv
MzEzODMxMmUzMTM5MzEyZTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1v1QwDQYJKoZIhvcNAQELBQADggEBAAWLmn8u
/+06fLLQj5XVkb+BYKQp5RRvAkyVIvxQsSNKUjWh6sTrJByHgskMHSAvsBe8dxj5
kmGUv+d554MK4HW/LblhfnHGQH2ECxAT7vHgjyEnXcL/Rlf1aet7xTezrjRhtXzH
92DP0LUVfXshy4lhKOYTXpkiYmBg4/PhJKCQJpGllGuSg7MuL56ZcbAiWGUwO/a5
HU0uyJ0TDBP6DqAr+qhM2+uqbBNR7FyQchp+oTgrIATyrXNtpTQ140oicwPMjM52
GnBR8KjLP1co0Zvp4pPVVmZT26+6RFPXo/V8Pdqk1nOB9qnpDqClsN/sbS5HXFhH
gaT6ZIjItVrI+es=
-----END CERTIFICATE-----
Generated at Tue Jun 18 15:33:21 2024 by rpki-client on console-fra.rpki-client.org