Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3231203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32312d3231203d3e20323633343539.roa (raw, json)
Hash identifier:          U/k69Bc191cI8lVUMmzpY/MRUmKkmBW5kGkgPU3Vv/Q=
Subject key identifier:   58:55:19:AB:1D:17:0B:7A:7C:79:88:EE:AA:53:C9:2E:18:77:29:63
Certificate issuer:       /CN=3611D7281CB8BFE6E0500D5FE04300DDDC6189D7
Certificate serial:       43F23FD47B9D837A8A84D8BD2E0ADA1E3560DDB8
Authority key identifier: 36:11:D7:28:1C:B8:BF:E6:E0:50:0D:5F:E0:43:00:DD:DC:61:89:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3611D7281CB8BFE6E0500D5FE04300DDDC6189D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3231203d3e20323633343539.roa
Signing time:             Wed 10 Jan 2024 17:36:14 +0000
ROA not before:           Wed 10 Jan 2024 17:31:14 +0000
ROA not after:            Wed 08 Jan 2025 17:36:14 +0000
asID:                     263459
IP address blocks:        177.190.168.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f2:3f:d4:7b:9d:83:7a:8a:84:d8:bd:2e:0a:da:1e:35:60:dd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611D7281CB8BFE6E0500D5FE04300DDDC6189D7
        Validity
            Not Before: Jan 10 17:31:14 2024 GMT
            Not After : Jan  8 17:36:14 2025 GMT
        Subject: CN=585519AB1D170B7A7C7988EEAA53C92E18772963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:84:23:53:19:65:19:07:6d:30:53:fb:1b:
                    b7:a7:08:a2:b5:b5:d4:dc:56:48:74:b4:9e:0d:36:
                    82:c9:5c:b0:b9:db:3f:9d:32:50:c2:51:f9:3e:a5:
                    89:de:3b:b2:29:7b:14:f3:35:d3:f2:96:77:3c:b4:
                    21:45:db:87:d3:d3:8f:6e:f0:e3:63:18:ab:6e:52:
                    d6:f0:f8:45:84:cc:6b:b0:47:b0:8a:b2:98:4a:ae:
                    9b:f1:7a:9a:0f:71:fd:cd:b9:7d:db:04:06:5b:67:
                    1d:9b:e5:57:ec:2f:b3:c7:5e:fc:67:8b:b5:86:60:
                    51:5f:91:25:38:f7:0e:fd:d0:f2:2c:aa:0b:8c:60:
                    73:c2:81:f5:3d:ce:d5:fc:78:21:09:ea:42:eb:b5:
                    0d:0b:7b:55:29:07:3f:dc:5d:a4:21:53:ca:cd:a1:
                    a7:73:22:c0:52:7e:c7:2e:45:8d:6c:e6:c7:94:76:
                    14:0f:60:7b:37:82:12:d5:26:42:3c:f7:ab:e7:db:
                    3e:00:84:8f:c9:72:16:81:f1:7d:db:64:09:8d:07:
                    07:5d:1a:42:51:b1:60:a7:f4:cc:8e:07:e3:9b:23:
                    b9:99:fe:8d:f2:ab:94:05:12:b3:c8:3d:a4:42:93:
                    89:cf:84:7d:c7:b6:8b:92:07:52:e4:d3:c5:b0:80:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:55:19:AB:1D:17:0B:7A:7C:79:88:EE:AA:53:C9:2E:18:77:29:63
            X509v3 Authority Key Identifier:
                keyid:36:11:D7:28:1C:B8:BF:E6:E0:50:0D:5F:E0:43:00:DD:DC:61:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3611D7281CB8BFE6E0500D5FE04300DDDC6189D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3611D7281CB8BFE6E0500D5FE04300DDDC6189D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/0/3137372e3139302e3136382e302f32312d3231203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:0f:e7:33:0c:94:60:aa:d9:2e:32:fa:5f:40:1f:c5:16:
         54:5f:73:52:d6:66:8a:a0:21:dd:9a:97:87:22:cc:2d:fc:d2:
         12:19:c1:23:de:3b:11:ff:93:d2:7a:33:3c:52:2f:d9:6c:28:
         8c:5f:4a:1b:79:48:bf:5b:9d:f3:2f:e1:8e:ce:01:80:49:28:
         18:2b:c9:cd:7f:cd:c9:8d:65:8d:25:10:f2:d7:82:f3:bb:62:
         77:77:76:e6:21:69:6d:46:24:3a:3d:ce:0a:3d:dd:83:11:22:
         c5:4f:c0:f3:35:38:cd:94:fa:a6:b1:dd:df:f8:19:fd:33:57:
         69:51:1b:26:47:c0:21:ca:e1:b0:c6:e9:ff:4f:80:38:86:9c:
         b5:1f:18:6b:ad:de:55:3a:0e:f9:98:24:e1:13:b8:c5:50:99:
         80:2e:1f:85:fa:37:5f:44:28:10:14:b9:ab:58:b7:45:d3:05:
         a9:80:10:58:75:64:06:11:37:3f:9c:87:33:42:01:e3:51:0b:
         de:83:4a:ba:6e:32:c2:da:60:1f:35:35:77:35:d1:36:2f:a4:
         22:38:31:49:9f:a9:1d:0a:a0:09:58:8a:a4:37:c0:6b:50:ce:
         2b:b8:a2:a2:e4:47:cb:51:aa:11:11:bc:eb:a0:c0:4c:ba:fd:
         db:bf:c3:a8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ/I/1Hudg3qKhNi9LgraHjVg3bgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMUQ3MjgxQ0I4QkZFNkUwNTAwRDVGRTA0MzAwRERE
QzYxODlENzAeFw0yNDAxMTAxNzMxMTRaFw0yNTAxMDgxNzM2MTRaMDMxMTAvBgNV
BAMTKDU4NTUxOUFCMUQxNzBCN0E3Qzc5ODhFRUFBNTNDOTJFMTg3NzI5NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yYQjUxllGQdtMFP7G7enCKK1
tdTcVkh0tJ4NNoLJXLC52z+dMlDCUfk+pYneO7IpexTzNdPylnc8tCFF24fT049u
8ONjGKtuUtbw+EWEzGuwR7CKsphKrpvxepoPcf3NuX3bBAZbZx2b5VfsL7PHXvxn
i7WGYFFfkSU49w790PIsqguMYHPCgfU9ztX8eCEJ6kLrtQ0Le1UpBz/cXaQhU8rN
oadzIsBSfscuRY1s5seUdhQPYHs3ghLVJkI896vn2z4AhI/JchaB8X3bZAmNBwdd
GkJRsWCn9MyOB+ObI7mZ/o3yq5QFErPIPaRCk4nPhH3HtouSB1Lk08WwgK+fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWFUZqx0XC3p8eYjuqlPJLhh3KWMwHwYDVR0j
BBgwFoAUNhHXKBy4v+bgUA1f4EMA3dxhidcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMC8zNjExRDcyODFDQjhCRkU2RTA1MDBENUZFMDQzMDBERERDNjE4OUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM2MTFENzI4MUNCOEJGRTZF
MDUwMEQ1RkUwNDMwMEREREM2MTg5RDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzAv
MzEzNzM3MmUzMTM5MzAyZTMxMzYzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzYzMzM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7G+qDANBgkqhkiG9w0BAQsFAAOCAQEAg9IP
5zMMlGCq2S4y+l9AH8UWVF9zUtZmiqAh3ZqXhyLMLfzSEhnBI947Ef+T0nozPFIv
2WwojF9KG3lIv1ud8y/hjs4BgEkoGCvJzX/NyY1ljSUQ8teC87tid3d25iFpbUYk
Oj3OCj3dgxEixU/A8zU4zZT6prHd3/gZ/TNXaVEbJkfAIcrhsMbp/0+AOIactR8Y
a63eVToO+Zgk4RO4xVCZgC4fhfo3X0QoEBS5q1i3RdMFqYAQWHVkBhE3P5yHM0IB
41EL3oNKum4ywtpgHzU1dzXRNi+kIjgxSZ+pHQqgCViKpDfAa1DOK7iiouRHy1Gq
ERG866DATLr927/DqA==
-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:40 2024 by rpki-client on console-fra.rpki-client.org