Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
File:                     3137392e34382e39362e302f32322d3234203d3e20323731303437.roa (raw, json)
Hash identifier:          QjDQOOpCLNZovwS0g9nL2sfn1fHZDqM8880VfpiFfgc=
Subject key identifier:   9B:3C:9B:F1:EB:50:F4:E4:18:A9:ED:E2:C2:6A:2F:2F:F7:42:F0:51
Certificate issuer:       /CN=44B2F18155499734E50B6A19E8EEF6300FA41846
Certificate serial:       0B61D51A500BE5323894336A98AB7ECE6A73ECA6
Authority key identifier: 44:B2:F1:81:55:49:97:34:E5:0B:6A:19:E8:EE:F6:30:0F:A4:18:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B2F18155499734E50B6A19E8EEF6300FA41846.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa
Signing time:             Thu 18 Apr 2024 19:02:03 +0000
ROA not before:           Thu 18 Apr 2024 18:57:03 +0000
ROA not after:            Thu 17 Apr 2025 19:02:03 +0000
asID:                     271047
IP address blocks:        179.48.96.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:61:d5:1a:50:0b:e5:32:38:94:33:6a:98:ab:7e:ce:6a:73:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B2F18155499734E50B6A19E8EEF6300FA41846
        Validity
            Not Before: Apr 18 18:57:03 2024 GMT
            Not After : Apr 17 19:02:03 2025 GMT
        Subject: CN=9B3C9BF1EB50F4E418A9EDE2C26A2F2FF742F051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:31:6a:30:bd:2f:40:41:33:9f:31:1e:cc:
                    d9:e9:8f:e1:65:a5:8d:8f:5f:75:08:d9:dc:86:d8:
                    b2:a5:c5:10:4a:7f:ee:a6:a1:c4:f1:67:3c:72:a7:
                    d4:52:1a:f7:5a:98:5c:3f:e4:02:7d:19:ca:cb:53:
                    17:48:fd:27:8d:02:fb:a0:dc:55:26:98:5b:e9:b9:
                    cc:cb:93:f8:1a:e8:bf:a5:2d:4b:9d:7f:b4:d8:0c:
                    af:c9:67:a0:90:b4:30:e1:0f:fa:3c:f4:45:0a:cb:
                    b2:08:fe:5d:cf:21:4d:ed:1f:39:46:3c:70:cf:81:
                    22:5d:d7:1e:51:a4:a1:51:42:b7:12:70:4e:2d:5f:
                    51:44:ef:cf:8b:c5:1e:e8:ab:99:80:61:24:25:ba:
                    07:ac:7e:65:54:bc:2f:cc:d1:c1:1c:4c:f3:45:5a:
                    d5:f6:be:74:0a:d6:03:d8:21:ba:13:b7:16:bd:7e:
                    23:c3:38:2c:19:a1:b3:97:c8:42:22:ed:6b:c4:f0:
                    18:94:28:66:e1:16:c6:32:16:e4:19:64:07:08:4f:
                    69:e3:b4:99:c0:38:a1:24:3a:f7:38:bf:6a:14:61:
                    02:26:c8:fb:cc:42:d9:cb:7e:ef:59:ac:dc:ab:b5:
                    de:7c:fa:dc:c2:da:2f:ee:2d:70:b8:f8:b3:53:f5:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:9B:F1:EB:50:F4:E4:18:A9:ED:E2:C2:6A:2F:2F:F7:42:F0:51
            X509v3 Authority Key Identifier:
                keyid:44:B2:F1:81:55:49:97:34:E5:0B:6A:19:E8:EE:F6:30:0F:A4:18:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/44B2F18155499734E50B6A19E8EEF6300FA41846.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44B2F18155499734E50B6A19E8EEF6300FA41846.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC1s1YAQNF43CcStYh8SZ1veySfi91xkqLSrjuf3jYNK/0/3137392e34382e39362e302f32322d3234203d3e20323731303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:10:4c:30:bc:ef:f4:1e:49:f3:3b:68:60:2c:39:10:c6:91:
         b8:aa:e8:ee:3e:80:e9:bc:90:4f:e5:d4:c1:04:9d:b0:24:bf:
         fe:6e:d8:3d:21:e0:b2:19:73:4d:73:8c:f1:71:ff:f5:e2:26:
         df:c0:89:4a:87:75:7b:77:43:67:a2:77:c2:69:14:d9:f7:8b:
         48:a5:f3:90:06:04:51:50:97:f4:b4:10:b7:f7:ff:d2:19:79:
         f0:63:3b:e6:0d:97:f9:85:71:98:2c:64:e4:ab:35:87:bd:6c:
         98:a6:b3:2a:dc:78:d4:5c:6c:66:52:72:b4:cb:bc:a3:01:4e:
         83:b0:59:70:a9:80:48:33:e7:97:81:7d:39:a4:76:0f:70:74:
         3a:11:20:fb:19:92:d7:43:5e:df:6b:be:40:ed:eb:ba:d1:3e:
         8f:3f:31:55:ef:26:e8:4f:06:5e:c4:ae:49:3f:43:88:77:6a:
         64:33:9c:49:89:0b:c5:0f:5a:f1:fa:75:91:fa:3d:40:a4:5f:
         28:b1:20:d0:38:0f:d9:fb:92:61:de:fe:ce:de:99:ad:12:cc:
         29:06:f7:3e:ae:df:fc:bc:94:c7:12:95:a1:dc:52:41:1c:7a:
         84:77:e7:d6:6a:81:3b:b1:f1:7a:19:64:e0:c8:08:e4:ec:89:
         b3:45:fa:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC2HVGlAL5TI4lDNqmKt+zmpz7KYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCMkYxODE1NTQ5OTczNEU1MEI2QTE5RThFRUY2MzAw
RkE0MTg0NjAeFw0yNDA0MTgxODU3MDNaFw0yNTA0MTcxOTAyMDNaMDMxMTAvBgNV
BAMTKDlCM0M5QkYxRUI1MEY0RTQxOEE5RURFMkMyNkEyRjJGRjc0MkYwNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdEDFqML0vQEEznzEezNnpj+Fl
pY2PX3UI2dyG2LKlxRBKf+6mocTxZzxyp9RSGvdamFw/5AJ9GcrLUxdI/SeNAvug
3FUmmFvpuczLk/ga6L+lLUudf7TYDK/JZ6CQtDDhD/o89EUKy7II/l3PIU3tHzlG
PHDPgSJd1x5RpKFRQrcScE4tX1FE78+LxR7oq5mAYSQlugesfmVUvC/M0cEcTPNF
WtX2vnQK1gPYIboTtxa9fiPDOCwZobOXyEIi7WvE8BiUKGbhFsYyFuQZZAcIT2nj
tJnAOKEkOvc4v2oUYQImyPvMQtnLfu9ZrNyrtd58+tzC2i/uLXC4+LNT9XEjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmzyb8etQ9OQYqe3iwmovL/dC8FEwHwYDVR0j
BBgwFoAURLLxgVVJlzTlC2oZ6O72MA+kGEYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0MxczFZQVFORjQzQ2NTdFloOFNaMXZleVNmaTkxeGtxTFNyanVmM2pZ
TksvMC80NEIyRjE4MTU1NDk5NzM0RTUwQjZBMTlFOEVFRjYzMDBGQTQxODQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ0QjJGMTgxNTU0OTk3MzRF
NTBCNkExOUU4RUVGNjMwMEZBNDE4NDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dDMXMxWUFRTkY0M0NjU3RZaDhTWjF2ZXlTZmk5MXhrcUxTcmp1ZjNqWU5LLzAv
MzEzNzM5MmUzNDM4MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszBgMA0GCSqGSIb3DQEBCwUAA4IBAQBTEEwwvO/0
HknzO2hgLDkQxpG4qujuPoDpvJBP5dTBBJ2wJL/+btg9IeCyGXNNc4zxcf/14ibf
wIlKh3V7d0NnonfCaRTZ94tIpfOQBgRRUJf0tBC39//SGXnwYzvmDZf5hXGYLGTk
qzWHvWyYprMq3HjUXGxmUnK0y7yjAU6DsFlwqYBIM+eXgX05pHYPcHQ6ESD7GZLX
Q17fa75A7eu60T6PPzFV7yboTwZexK5JP0OId2pkM5xJiQvFD1rx+nWR+j1ApF8o
sSDQOA/Z+5Jh3v7O3pmtEswpBvc+rt/8vJTHEpWh3FJBHHqEd+fWaoE7sfF6GWTg
yAjk7ImzRfqo
-----END CERTIFICATE-----
Generated at Thu May 2 00:12:32 2024 by rpki-client on console-ams.rpki-client.org