Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
File:                     3135302e3136352e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          JSw9oT+4dEOjZLuS6+pwtuBJGbhzwp8ZU7b4f9VHULI=
Subject key identifier:   FC:CF:26:49:F7:6B:80:B5:BF:F5:9F:F0:07:B7:1D:35:A8:E4:AE:A1
Certificate issuer:       /CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
Certificate serial:       37861624833D6B9DE6CE38FDC32941BC99E2F3EF
Authority key identifier: 77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
Signing time:             Thu 08 Aug 2024 03:09:00 +0000
ROA not before:           Thu 08 Aug 2024 03:04:00 +0000
ROA not after:            Thu 07 Aug 2025 03:09:00 +0000
asID:                     1916
IP address blocks:        150.165.0.0/16 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:86:16:24:83:3d:6b:9d:e6:ce:38:fd:c3:29:41:bc:99:e2:f3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701CBA3BC1B47C951960EA7204772C4899F11B2
        Validity
            Not Before: Aug  8 03:04:00 2024 GMT
            Not After : Aug  7 03:09:00 2025 GMT
        Subject: CN=FCCF2649F76B80B5BFF59FF007B71D35A8E4AEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:af:98:1a:34:1f:75:e7:84:37:2e:52:16:
                    16:84:74:bc:72:5e:97:a7:80:09:27:bb:92:4c:db:
                    5b:de:a8:67:55:5c:7f:18:8e:64:10:05:fb:32:11:
                    20:56:62:76:46:f1:2d:8b:b0:ea:4c:1d:71:88:9d:
                    da:18:28:a8:dc:be:1e:ed:8d:8c:1f:a9:ba:b0:28:
                    78:ba:48:a3:f6:a7:ae:ed:24:45:db:40:29:78:86:
                    6b:82:e4:bd:77:d6:68:f0:a2:d9:1f:01:bb:4e:66:
                    59:ac:0d:a0:a8:94:2d:b9:e0:cc:34:7c:bd:15:81:
                    5d:c0:9a:90:94:ee:91:81:5e:66:3e:5a:01:fa:aa:
                    b9:89:4f:19:4d:64:b6:d3:d7:52:78:bb:84:37:b1:
                    2a:b9:66:24:62:95:13:88:90:8d:c5:64:6e:8d:7c:
                    05:47:3a:3f:fc:af:28:53:bc:2c:28:44:82:55:18:
                    86:db:b2:ae:9f:fd:5d:26:f6:9e:61:22:d4:c1:06:
                    49:5d:23:c1:c2:d3:0b:0a:a5:87:95:fe:d7:05:e0:
                    fa:89:bf:61:e8:4d:95:14:f1:f8:cc:50:6f:57:1c:
                    00:36:e7:05:e2:2a:e4:87:66:c4:66:a1:87:3f:a8:
                    ba:8e:6e:e7:81:a9:94:94:aa:ae:6d:9d:a4:a3:a2:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:26:49:F7:6B:80:B5:BF:F5:9F:F0:07:B7:1D:35:A8:E4:AE:A1
            X509v3 Authority Key Identifier:
                keyid:77:01:CB:A3:BC:1B:47:C9:51:96:0E:A7:20:47:72:C4:89:9F:11:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/7701CBA3BC1B47C951960EA7204772C4899F11B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7701CBA3BC1B47C951960EA7204772C4899F11B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/2/3135302e3136352e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:5f:84:16:b4:90:dd:8d:a1:47:0e:35:9f:28:50:bd:00:
         52:2e:0e:83:e0:e2:08:4b:4d:62:6f:6f:54:4c:fc:62:5c:41:
         8e:55:69:b7:9e:a5:8f:7c:96:df:e2:d6:20:6d:4e:c6:4b:a9:
         09:c7:ed:ca:d6:2a:bc:f3:f0:85:0c:4f:f7:80:cb:8f:da:9a:
         63:cc:16:1b:f8:81:3f:fc:cc:4d:c1:c2:50:cd:6d:20:44:13:
         1a:8d:07:a2:94:55:9e:5a:ea:a2:e4:45:c1:8d:22:7f:65:9d:
         22:dc:25:93:4d:4c:fd:99:b8:0d:61:0d:80:06:96:ed:93:eb:
         99:a4:4c:9f:8a:d0:ac:3c:78:72:75:44:bc:d7:b2:e8:56:fb:
         7a:c8:37:c5:f6:85:f8:dc:10:df:c7:27:54:10:55:26:96:49:
         25:b3:5d:fb:1f:f7:a3:77:54:ae:a8:de:ab:b7:80:c8:87:38:
         6a:79:1f:12:3a:d4:ad:5b:6f:0f:14:0b:7c:ed:68:30:d9:bf:
         4e:36:c2:72:92:9d:ef:95:77:f1:45:cc:cf:83:49:f3:2d:02:
         80:e1:b4:1a:07:5b:a0:7e:5c:49:29:07:d3:60:c5:32:9f:81:
         c6:f9:6b:56:12:c2:28:3d:41:67:70:a1:7b:a1:05:34:27:39:
         1a:db:ce:9f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUN4YWJIM9a53mzjj9wylBvJni8+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcwMUNCQTNCQzFCNDdDOTUxOTYwRUE3MjA0NzcyQzQ4
OTlGMTFCMjAeFw0yNDA4MDgwMzA0MDBaFw0yNTA4MDcwMzA5MDBaMDMxMTAvBgNV
BAMTKEZDQ0YyNjQ5Rjc2QjgwQjVCRkY1OUZGMDA3QjcxRDM1QThFNEFFQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/q+YGjQfdeeENy5SFhaEdLxy
XpengAknu5JM21veqGdVXH8YjmQQBfsyESBWYnZG8S2LsOpMHXGIndoYKKjcvh7t
jYwfqbqwKHi6SKP2p67tJEXbQCl4hmuC5L131mjwotkfAbtOZlmsDaColC254Mw0
fL0VgV3AmpCU7pGBXmY+WgH6qrmJTxlNZLbT11J4u4Q3sSq5ZiRilROIkI3FZG6N
fAVHOj/8ryhTvCwoRIJVGIbbsq6f/V0m9p5hItTBBkldI8HC0wsKpYeV/tcF4PqJ
v2HoTZUU8fjMUG9XHAA25wXiKuSHZsRmoYc/qLqObueBqZSUqq5tnaSjom/DAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU/M8mSfdrgLW/9Z/wB7cdNajkrqEwHwYDVR0j
BBgwFoAUdwHLo7wbR8lRlg6nIEdyxImfEbIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMi83NzAxQ0JBM0JDMUI0N0M5NTE5NjBFQTcyMDQ3NzJDNDg5OUYxMUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc3MDFDQkEzQkMxQjQ3Qzk1
MTk2MEVBNzIwNDc3MkM0ODk5RjExQjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzIv
MzEzNTMwMmUzMTM2MzUyZTMwMmUzMDJmMzEzNjJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCWpTANBgkqhkiG9w0BAQsFAAOCAQEAIO5fhBa0kN2NoUcO
NZ8oUL0AUi4Og+DiCEtNYm9vVEz8YlxBjlVpt56lj3yW3+LWIG1OxkupCcftytYq
vPPwhQxP94DLj9qaY8wWG/iBP/zMTcHCUM1tIEQTGo0HopRVnlrqouRFwY0if2Wd
Itwlk01M/Zm4DWENgAaW7ZPrmaRMn4rQrDx4cnVEvNey6Fb7esg3xfaF+NwQ38cn
VBBVJpZJJbNd+x/3o3dUrqjeq7eAyIc4ankfEjrUrVtvDxQLfO1oMNm/TjbCcpKd
75V38UXMz4NJ8y0CgOG0GgdboH5cSSkH02DFMp+BxvlrVhLCKD1BZ3Che6EFNCc5
GtvOnw==
-----END CERTIFICATE-----
Generated at Fri Aug 9 06:06:03 2024 by rpki-client on console-fra.rpki-client.org