Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa
File:                     3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (raw, json)
Hash identifier:          Eu6Er25OK9sJvjYPWtQeNwphO19vzI6FWm6jpqtz5PE=
Subject key identifier:   E0:FC:BC:47:FD:0B:A6:BB:1A:AF:6D:B0:FD:AE:1A:73:A5:79:35:0E
Certificate issuer:       /CN=4A6149A4F78C72B47BD82323BFC897F76AFA79B7
Certificate serial:       40466621AB67FA7EBED770EC3F620CE82613E17A
Authority key identifier: 4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa
Signing time:             Thu 04 Apr 2024 08:05:46 +0000
ROA not before:           Thu 04 Apr 2024 08:00:46 +0000
ROA not after:            Thu 03 Apr 2025 08:05:46 +0000
asID:                     264340
IP address blocks:        138.185.56.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:66:21:ab:67:fa:7e:be:d7:70:ec:3f:62:0c:e8:26:13:e1:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A6149A4F78C72B47BD82323BFC897F76AFA79B7
        Validity
            Not Before: Apr  4 08:00:46 2024 GMT
            Not After : Apr  3 08:05:46 2025 GMT
        Subject: CN=E0FCBC47FD0BA6BB1AAF6DB0FDAE1A73A579350E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:f0:4e:63:46:21:9c:41:63:b5:47:8a:e0:
                    50:6a:7f:4d:84:c8:1e:ef:a7:d5:df:11:fa:c7:38:
                    f0:a2:ef:18:7f:99:0d:fb:b9:56:d9:fb:9f:f9:0f:
                    d2:58:6c:f7:ba:80:b5:ef:61:97:a6:18:a3:4d:24:
                    d9:17:aa:12:f4:e6:08:60:af:23:d7:c2:5f:7a:09:
                    11:6c:f9:32:6c:69:10:3e:b8:00:46:35:28:e4:73:
                    29:44:0e:48:02:f8:bf:7c:15:d6:01:99:14:b7:74:
                    8a:b1:14:a4:82:09:5f:01:88:ea:57:fe:1c:37:63:
                    aa:81:5f:0a:04:67:f2:d5:0f:71:56:c1:fc:d5:c7:
                    59:19:ad:94:e4:aa:13:dc:81:cf:9e:81:a4:36:c3:
                    76:fc:83:e5:25:40:98:ca:43:21:1d:62:d4:1d:07:
                    29:3b:a2:4c:2b:d3:b2:16:e1:2e:ee:9e:f2:bf:25:
                    e9:a5:2a:5e:91:b2:cb:1f:06:25:ce:5c:5d:b4:bc:
                    55:e8:cc:cd:12:52:8b:c3:4b:72:a7:02:2d:a2:c7:
                    ab:f0:61:27:29:2a:89:4d:3c:8b:e4:fa:95:01:b9:
                    9f:9b:f0:8c:07:b4:68:2e:c6:30:7d:f0:45:69:18:
                    1d:3e:d7:b3:84:bd:e3:ca:ca:9b:be:56:4c:05:79:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:FC:BC:47:FD:0B:A6:BB:1A:AF:6D:B0:FD:AE:1A:73:A5:79:35:0E
            X509v3 Authority Key Identifier:
                keyid:4A:61:49:A4:F7:8C:72:B4:7B:D8:23:23:BF:C8:97:F7:6A:FA:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6149A4F78C72B47BD82323BFC897F76AFA79B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/1/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:25:4e:a9:07:e0:65:e5:54:77:76:9b:15:f4:28:ba:fd:e7:
         99:10:85:a4:ce:5d:f6:85:72:e1:52:93:9f:d3:51:2e:50:b3:
         4a:b6:70:71:d7:04:58:6c:b0:27:c3:e5:d3:f3:46:5a:73:28:
         46:4e:b5:dc:ab:c3:2a:b6:a2:f7:35:20:e6:34:02:75:5c:94:
         f2:34:51:b2:5b:c1:5b:52:41:b4:45:23:07:7d:25:05:4f:f0:
         c3:af:15:08:1d:ed:7f:d8:6c:7b:6b:8e:40:67:f8:05:c0:d1:
         75:40:4b:fd:55:e0:c9:82:83:f3:ca:33:9e:d1:e3:1f:b0:c5:
         42:0d:9c:d1:ba:71:5a:8e:d3:5b:6c:f6:a4:9c:29:c3:06:7f:
         5f:ba:6b:4b:75:2f:63:d7:60:44:5e:c9:b1:4c:d8:4b:3f:76:
         8d:3f:50:c2:cb:c9:a3:55:30:6b:38:fa:a9:4c:2b:e3:f9:75:
         8f:c3:95:d8:19:00:15:81:82:4f:7c:35:32:c0:30:89:91:41:
         a7:84:3f:cc:21:51:72:72:c8:c2:c9:6c:50:6b:22:d7:61:71:
         6e:7b:bc:99:66:fa:a0:ba:c0:ac:06:53:2c:23:61:15:bb:01:
         ec:68:89:1e:84:8d:d2:c4:40:6c:50:37:94:4e:43:de:1b:e2:
         de:cf:1b:42
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQEZmIatn+n6+13DsP2IM6CYT4XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE2MTQ5QTRGNzhDNzJCNDdCRDgyMzIzQkZDODk3Rjc2
QUZBNzlCNzAeFw0yNDA0MDQwODAwNDZaFw0yNTA0MDMwODA1NDZaMDMxMTAvBgNV
BAMTKEUwRkNCQzQ3RkQwQkE2QkIxQUFGNkRCMEZEQUUxQTczQTU3OTM1MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E/BOY0YhnEFjtUeK4FBqf02E
yB7vp9XfEfrHOPCi7xh/mQ37uVbZ+5/5D9JYbPe6gLXvYZemGKNNJNkXqhL05ghg
ryPXwl96CRFs+TJsaRA+uABGNSjkcylEDkgC+L98FdYBmRS3dIqxFKSCCV8BiOpX
/hw3Y6qBXwoEZ/LVD3FWwfzVx1kZrZTkqhPcgc+egaQ2w3b8g+UlQJjKQyEdYtQd
Byk7okwr07IW4S7unvK/JemlKl6RsssfBiXOXF20vFXozM0SUovDS3KnAi2ix6vw
YScpKolNPIvk+pUBuZ+b8IwHtGguxjB98EVpGB0+17OEvePKypu+VkwFeTohAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4Py8R/0Lprsar22w/a4ac6V5NQ4wHwYDVR0j
BBgwFoAUSmFJpPeMcrR72CMjv8iX92r6ebcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3
V2YvMS80QTYxNDlBNEY3OEM3MkI0N0JEODIzMjNCRkM4OTdGNzZBRkE3OUI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBNjE0OUE0Rjc4QzcyQjQ3
QkQ4MjMyM0JGQzg5N0Y3NkFGQTc5QjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKWlE4bnJDOFJIU0FEZ1pDZ2QzcmZyQ1B6dW14eWZ5VlJURUpoMVdXd1dmLzEv
MzEzMzM4MmUzMTM4MzUyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuTgwDQYJKoZIhvcNAQELBQADggEBADAlTqkH
4GXlVHd2mxX0KLr955kQhaTOXfaFcuFSk5/TUS5Qs0q2cHHXBFhssCfD5dPzRlpz
KEZOtdyrwyq2ovc1IOY0AnVclPI0UbJbwVtSQbRFIwd9JQVP8MOvFQgd7X/YbHtr
jkBn+AXA0XVAS/1V4MmCg/PKM57R4x+wxUINnNG6cVqO01ts9qScKcMGf1+6a0t1
L2PXYEReybFM2Es/do0/UMLLyaNVMGs4+qlMK+P5dY/DldgZABWBgk98NTLAMImR
QaeEP8whUXJyyMLJbFBrItdhcW57vJlm+qC6wKwGUywjYRW7AexoiR6EjdLEQGxQ
N5ROQ94b4t7PG0I=
-----END CERTIFICATE-----
Generated at Sat Jul 6 04:19:04 2024 by rpki-client on console-fra.rpki-client.org