Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa (raw, json)
Hash identifier:          1+1ivkhMtYQTDCtsr3jOmfmHBmm/20HpgFPmldCQkmw=
Subject key identifier:   D4:D6:11:3E:D9:C4:30:C5:B5:40:3E:74:91:06:E3:26:89:7F:29:D5
Certificate issuer:       /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial:       26DEF9432389428DDA3C87678D17600DFD6CB8BD
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa
Signing time:             Fri 20 Oct 2023 11:45:03 +0000
ROA not before:           Fri 20 Oct 2023 11:40:03 +0000
ROA not after:            Fri 18 Oct 2024 11:45:03 +0000
asID:                     269359
IP address blocks:        168.194.248.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:de:f9:43:23:89:42:8d:da:3c:87:67:8d:17:60:0d:fd:6c:b8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
        Validity
            Not Before: Oct 20 11:40:03 2023 GMT
            Not After : Oct 18 11:45:03 2024 GMT
        Subject: CN=D4D6113ED9C430C5B5403E749106E326897F29D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:13:4f:1a:bd:fd:77:0e:6e:0c:9f:b2:e7:
                    a2:16:c0:7b:41:09:e5:06:cb:3e:d8:9a:e5:89:64:
                    ec:57:00:af:65:67:56:d2:95:59:71:cf:7b:3e:fc:
                    09:8b:41:00:f8:54:ac:2f:13:c8:ba:6e:df:6c:da:
                    f4:a3:c5:e2:e4:9c:ef:b2:d2:a3:8e:54:84:20:d5:
                    c2:5e:8f:0d:36:f5:df:1c:d1:a7:78:54:1f:8b:96:
                    21:e6:79:3a:f3:b5:1b:8e:15:90:d4:09:c0:4e:bc:
                    22:c1:f0:5f:6a:34:4e:09:68:f9:7f:ef:d6:24:8a:
                    c3:93:3b:04:be:6e:67:8f:48:99:4f:8a:b8:f0:72:
                    8b:c0:be:50:27:1a:93:8d:15:2b:09:b5:6f:43:06:
                    bb:c3:0f:68:cb:a1:9e:e2:d1:1e:ec:82:85:4d:65:
                    1c:f8:2a:64:9c:d7:1c:74:ea:f4:62:ac:47:45:15:
                    33:42:da:ac:66:ee:9d:bd:d5:a7:f6:c1:44:3c:10:
                    a7:61:bb:48:43:a8:1a:c2:63:90:49:c6:42:1d:08:
                    e4:7f:54:33:ff:b0:2b:43:18:92:b3:02:a1:4a:cb:
                    4b:4d:80:37:ea:39:0f:f2:f7:41:ca:2a:23:84:02:
                    bb:8b:d3:a7:4a:87:fb:3d:b8:cd:9e:c6:55:0b:4b:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D6:11:3E:D9:C4:30:C5:B5:40:3E:74:91:06:E3:26:89:7F:29:D5
            X509v3 Authority Key Identifier:
                keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32332d3233203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:53:9f:58:02:c3:f9:7a:9e:87:87:5f:36:12:25:35:1a:
         26:70:e0:d9:4b:77:12:c4:5e:f9:d5:86:0d:64:a3:2f:56:54:
         6f:2f:cb:e0:83:d8:01:00:cf:cf:b6:dd:24:16:c3:e0:0d:6c:
         d0:f7:8d:3b:39:30:69:0e:d7:24:ba:fe:9a:18:a9:e9:7f:b7:
         14:88:68:d6:5e:a4:ac:4f:68:c3:24:12:97:e5:3b:a4:c0:8a:
         3a:26:14:3e:65:ca:4f:2a:ac:33:1d:72:14:2a:a5:db:37:e8:
         2a:eb:91:b5:68:eb:7b:2e:55:dd:9f:3b:e9:89:fe:59:b9:09:
         f4:9d:9a:a8:25:92:e5:46:b0:3b:3f:51:ca:b1:e1:fc:46:20:
         69:0d:4f:11:55:b5:68:3c:e4:5b:0a:b7:32:d0:4d:ea:c9:17:
         b2:6f:7b:99:d6:96:b2:29:33:bb:aa:36:d1:83:ca:f8:bc:2f:
         9b:85:74:ae:be:c0:45:62:02:cc:94:66:cc:40:de:05:62:f1:
         99:d2:f6:a3:08:73:1f:c9:7d:0e:5f:77:61:aa:08:49:6e:b9:
         7b:38:36:ea:b9:01:d6:f1:6b:e2:e1:51:9a:e4:ed:a9:bc:ab:
         ac:76:12:27:75:3d:ac:3e:38:56:ef:80:75:a6:b3:12:f4:5d:
         ee:55:61:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJt75QyOJQo3aPIdnjRdgDf1suL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEwNzZBNTMxNDU1N0JFREQ0RkE4NDYxMkQxMkVEMUEz
M0VDN0Q4QTAeFw0yMzEwMjAxMTQwMDNaFw0yNDEwMTgxMTQ1MDNaMDMxMTAvBgNV
BAMTKEQ0RDYxMTNFRDlDNDMwQzVCNTQwM0U3NDkxMDZFMzI2ODk3RjI5RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXxNPGr39dw5uDJ+y56IWwHtB
CeUGyz7YmuWJZOxXAK9lZ1bSlVlxz3s+/AmLQQD4VKwvE8i6bt9s2vSjxeLknO+y
0qOOVIQg1cJejw029d8c0ad4VB+LliHmeTrztRuOFZDUCcBOvCLB8F9qNE4JaPl/
79YkisOTOwS+bmePSJlPirjwcovAvlAnGpONFSsJtW9DBrvDD2jLoZ7i0R7sgoVN
ZRz4KmSc1xx06vRirEdFFTNC2qxm7p291af2wUQ8EKdhu0hDqBrCY5BJxkIdCOR/
VDP/sCtDGJKzAqFKy0tNgDfqOQ/y90HKKiOEAruL06dKh/s9uM2exlULS3nTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1NYRPtnEMMW1QD50kQbjJol/KdUwHwYDVR0j
BBgwFoAU6gdqUxRVe+3U+oRhLRLtGjPsfYowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC9FQTA3NkE1MzE0NTU3QkVERDRGQTg0NjEyRDEyRUQxQTMzRUM3RDhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBMDc2QTUzMTQ1NTdCRURE
NEZBODQ2MTJEMTJFRDFBMzNFQzdEOEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzQzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzOTMzMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajC+DANBgkqhkiG9w0BAQsFAAOCAQEAgT1T
n1gCw/l6noeHXzYSJTUaJnDg2Ut3EsRe+dWGDWSjL1ZUby/L4IPYAQDPz7bdJBbD
4A1s0PeNOzkwaQ7XJLr+mhip6X+3FIho1l6krE9owyQSl+U7pMCKOiYUPmXKTyqs
Mx1yFCql2zfoKuuRtWjrey5V3Z876Yn+WbkJ9J2aqCWS5UawOz9RyrHh/EYgaQ1P
EVW1aDzkWwq3MtBN6skXsm97mdaWsikzu6o20YPK+Lwvm4V0rr7ARWICzJRmzEDe
BWLxmdL2owhzH8l9Dl93YaoISW65ezg26rkB1vFr4uFRmuTtqbyrrHYSJ3U9rD44
Vu+AdaazEvRd7lVhGA==
-----END CERTIFICATE-----
Generated at Sat Feb 24 15:07:24 2024 by rpki-client on console-fra.rpki-client.org