Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230352e302f32342d3332203d3e20323730333935.roa
File:                     3139302e38392e3230352e302f32342d3332203d3e20323730333935.roa (raw, json)
Hash identifier:          d0e4JdwnAKvMJxeynQNyPGoUHw+O3WfT04xkxr54DXA=
Subject key identifier:   A8:9B:F5:80:65:9A:36:B0:1F:B6:A9:3A:9A:3C:4B:17:D7:0E:4A:66
Certificate issuer:       /CN=C9B9ACD433C2198F1292465FB2268B319D884930
Certificate serial:       6648370A872EE926EEF9849FA1DBF02183DB92AF
Authority key identifier: C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230352e302f32342d3332203d3e20323730333935.roa
Signing time:             Sun 21 Jul 2024 21:50:50 +0000
ROA not before:           Sun 21 Jul 2024 21:45:50 +0000
ROA not after:            Sun 20 Jul 2025 21:50:50 +0000
asID:                     270395
IP address blocks:        190.89.205.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:37:0a:87:2e:e9:26:ee:f9:84:9f:a1:db:f0:21:83:db:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B9ACD433C2198F1292465FB2268B319D884930
        Validity
            Not Before: Jul 21 21:45:50 2024 GMT
            Not After : Jul 20 21:50:50 2025 GMT
        Subject: CN=A89BF580659A36B01FB6A93A9A3C4B17D70E4A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:5f:30:b4:99:8d:65:0d:be:93:a0:0f:42:
                    46:a1:2e:34:07:1b:cb:97:be:3d:b5:60:cb:cb:d5:
                    b7:c7:69:06:7d:fd:81:f8:9e:1a:95:04:b4:bc:8d:
                    91:83:98:46:d4:2a:65:16:bd:8c:01:ba:63:59:b0:
                    a2:ba:1e:4d:b6:ab:e7:6d:d4:3b:5c:46:e2:f3:5f:
                    c7:a7:b0:47:77:5e:52:74:ad:a0:e6:3f:d9:fa:80:
                    8e:e8:7e:f2:4f:c0:52:a6:32:61:98:2f:01:2a:b5:
                    03:68:56:a9:43:92:c0:59:ac:8a:09:05:36:e9:90:
                    ef:10:96:88:61:00:0a:cf:e7:06:35:09:1e:2f:cf:
                    78:5a:24:d3:20:73:3a:65:44:39:97:8b:90:c6:7c:
                    3c:91:3f:bf:71:89:3c:43:75:83:32:6f:83:a9:d1:
                    c2:51:b2:c3:b8:04:5d:82:23:f7:db:95:d2:a5:5a:
                    e3:f6:1b:a7:63:56:97:7a:03:d2:84:75:18:34:5f:
                    46:95:31:c5:ad:bc:14:94:70:17:43:33:ff:67:3e:
                    b9:aa:f5:0b:25:3a:97:8e:dd:63:4d:a9:f1:00:bc:
                    1c:32:97:71:33:3e:45:be:67:8d:70:e6:e5:88:fa:
                    13:c0:d3:a1:72:44:18:a5:5a:14:0d:a3:66:c1:04:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:F5:80:65:9A:36:B0:1F:B6:A9:3A:9A:3C:4B:17:D7:0E:4A:66
            X509v3 Authority Key Identifier:
                keyid:C9:B9:AC:D4:33:C2:19:8F:12:92:46:5F:B2:26:8B:31:9D:88:49:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/C9B9ACD433C2198F1292465FB2268B319D884930.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9B9ACD433C2198F1292465FB2268B319D884930.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GLprHJyqVNZ2EyVY25miAQg3xsvo3n4rSALLkqjsMhn/0/3139302e38392e3230352e302f32342d3332203d3e20323730333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:57:29:08:c1:c7:70:c8:87:95:9e:16:da:c8:66:eb:6b:56:
         1c:4a:ce:92:56:92:fa:9b:b5:09:ef:66:39:a4:60:b4:79:eb:
         1d:e2:d5:ea:76:a1:51:06:59:ab:3b:1b:7e:88:cd:27:10:35:
         45:16:43:a7:db:ef:0b:5f:5b:45:16:36:2c:59:72:8b:98:b9:
         c4:a5:2b:d3:64:fd:c8:09:e0:ef:2a:cb:71:04:a4:dd:76:3e:
         0a:52:c2:54:91:46:e4:6d:ab:9a:82:fd:54:8a:ff:66:41:89:
         cd:91:d9:7d:f7:64:cd:8a:d8:e8:a0:35:59:f2:05:ee:24:1a:
         a4:37:2e:54:5f:0b:95:08:01:e1:f4:fc:66:e5:89:db:63:72:
         42:ee:f4:4d:f5:75:ff:33:5b:7b:08:20:45:8d:1b:66:4a:e5:
         b3:bc:9e:51:6c:51:bb:17:a6:43:ae:cf:65:af:f3:fb:3f:a1:
         e4:81:5e:2a:5c:f1:cb:63:df:18:e4:84:0a:61:55:37:2c:c1:
         27:82:1f:e3:7a:1c:1f:f1:21:06:11:e1:11:c4:55:b1:57:fb:
         af:07:71:2c:8a:cc:70:f6:3a:3b:f7:e8:c4:9e:c6:b3:93:fc:
         9c:7b:1e:78:ed:28:15:2b:1f:84:3b:a4:60:5d:37:ba:8e:50:
         6d:46:bf:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZkg3Cocu6Sbu+YSfodvwIYPbkq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCOUFDRDQzM0MyMTk4RjEyOTI0NjVGQjIyNjhCMzE5
RDg4NDkzMDAeFw0yNDA3MjEyMTQ1NTBaFw0yNTA3MjAyMTUwNTBaMDMxMTAvBgNV
BAMTKEE4OUJGNTgwNjU5QTM2QjAxRkI2QTkzQTlBM0M0QjE3RDcwRTRBNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtl8wtJmNZQ2+k6APQkahLjQH
G8uXvj21YMvL1bfHaQZ9/YH4nhqVBLS8jZGDmEbUKmUWvYwBumNZsKK6Hk22q+dt
1DtcRuLzX8ensEd3XlJ0raDmP9n6gI7ofvJPwFKmMmGYLwEqtQNoVqlDksBZrIoJ
BTbpkO8QlohhAArP5wY1CR4vz3haJNMgczplRDmXi5DGfDyRP79xiTxDdYMyb4Op
0cJRssO4BF2CI/fbldKlWuP2G6djVpd6A9KEdRg0X0aVMcWtvBSUcBdDM/9nPrmq
9QslOpeO3WNNqfEAvBwyl3EzPkW+Z41w5uWI+hPA06FyRBilWhQNo2bBBFv1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqJv1gGWaNrAftqk6mjxLF9cOSmYwHwYDVR0j
BBgwFoAUybms1DPCGY8SkkZfsiaLMZ2ISTAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdMcHJISnlxVk5aMkV5VlkyNW1pQVFnM3hzdm8zbjRyU0FMTGtxanNN
aG4vMC9DOUI5QUNENDMzQzIxOThGMTI5MjQ2NUZCMjI2OEIzMTlEODg0OTMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5QjlBQ0Q0MzNDMjE5OEYx
MjkyNDY1RkIyMjY4QjMxOUQ4ODQ5MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHTHBySEp5cVZOWjJFeVZZMjVtaUFRZzN4c3ZvM240clNBTExrcWpzTWhuLzAv
MzEzOTMwMmUzODM5MmUzMjMwMzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM3
MzAzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+Wc0wDQYJKoZIhvcNAQELBQADggEBABBXKQjB
x3DIh5WeFtrIZutrVhxKzpJWkvqbtQnvZjmkYLR56x3i1ep2oVEGWas7G36IzScQ
NUUWQ6fb7wtfW0UWNixZcouYucSlK9Nk/cgJ4O8qy3EEpN12PgpSwlSRRuRtq5qC
/VSK/2ZBic2R2X33ZM2K2OigNVnyBe4kGqQ3LlRfC5UIAeH0/GblidtjckLu9E31
df8zW3sIIEWNG2ZK5bO8nlFsUbsXpkOuz2Wv8/s/oeSBXipc8ctj3xjkhAphVTcs
wSeCH+N6HB/xIQYR4RHEVbFX+68HcSyKzHD2Ojv36MSexrOT/Jx7HnjtKBUrH4Q7
pGBdN7qOUG1Gv1A=
-----END CERTIFICATE-----
Generated at Sat Aug 10 21:14:48 2024 by rpki-client on console-fra.rpki-client.org