Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
File:                     3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (raw, json)
Hash identifier:          NMZB3XVyb6nyabnMAqhjyKD7WJ9btHbhG0HHuTOvCGU=
Subject key identifier:   7D:71:78:A1:B8:65:5B:5E:C1:04:3B:A1:B9:81:27:A9:AE:26:B6:8D
Certificate issuer:       /CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
Certificate serial:       6733D1FFFF32E023E61C4C2AE4D8B97ED6AABF28
Authority key identifier: FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
Signing time:             Thu 04 Apr 2024 05:49:26 +0000
ROA not before:           Thu 04 Apr 2024 05:44:26 +0000
ROA not after:            Thu 03 Apr 2025 05:49:26 +0000
asID:                     263252
IP address blocks:        168.197.228.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:33:d1:ff:ff:32:e0:23:e6:1c:4c:2a:e4:d8:b9:7e:d6:aa:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC2678D5CED0EF11DFC762E339166B56C1FB68A5
        Validity
            Not Before: Apr  4 05:44:26 2024 GMT
            Not After : Apr  3 05:49:26 2025 GMT
        Subject: CN=7D7178A1B8655B5EC1043BA1B98127A9AE26B68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:4f:02:8c:21:05:2a:5c:16:1e:06:fc:76:
                    e2:2a:bc:da:68:41:f3:2b:58:59:8d:90:8d:52:24:
                    db:e3:cd:38:cf:1e:bc:4e:76:4c:5f:e4:0d:03:57:
                    b8:37:f2:3e:43:68:e8:48:7b:f9:f0:fd:c4:8d:cd:
                    d5:4e:5b:e9:cb:67:54:45:d9:ec:32:5f:1e:bc:a9:
                    c6:e6:60:0e:9d:71:d2:89:8c:58:71:0d:27:ac:46:
                    4a:bf:08:81:8e:be:ae:8a:4e:21:6b:76:40:7e:5c:
                    3d:18:37:d5:f1:20:4d:d7:b9:3e:83:6f:3d:c4:ad:
                    c2:90:90:b2:c3:26:d0:59:18:a8:60:d8:fc:dd:6e:
                    74:9d:9c:43:50:93:95:55:a3:a3:1f:78:fa:87:da:
                    bd:b2:b4:d9:ca:5d:56:3a:32:ca:3e:18:ec:95:17:
                    77:1b:5a:60:fc:9e:9f:b9:7a:59:df:16:38:f3:67:
                    8c:60:fe:a3:68:4a:43:7d:1d:93:83:62:c9:2c:8b:
                    e7:61:6d:61:cb:5f:66:3b:57:82:43:74:72:25:a8:
                    53:f5:5d:6b:a0:41:0e:a1:a4:67:b4:c4:c3:0c:c4:
                    e2:f6:d9:16:bb:d4:38:e1:86:7d:66:91:c9:e7:d9:
                    e7:ad:1c:0a:f8:2b:86:96:4a:15:bf:29:f6:b4:78:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:78:A1:B8:65:5B:5E:C1:04:3B:A1:B9:81:27:A9:AE:26:B6:8D
            X509v3 Authority Key Identifier:
                keyid:FC:26:78:D5:CE:D0:EF:11:DF:C7:62:E3:39:16:6B:56:C1:FB:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC2678D5CED0EF11DFC762E339166B56C1FB68A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/1/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:dd:4f:a4:d1:69:22:eb:da:74:80:0b:7b:42:04:a8:3e:75:
         97:6e:4b:5f:59:9c:44:99:ea:1d:b9:aa:13:df:da:78:42:23:
         5c:4d:3e:e2:24:66:1c:bf:69:96:ed:da:7d:45:3e:d6:7e:d6:
         2a:56:58:f3:cc:b7:53:46:84:13:78:13:1b:96:e7:dc:11:ad:
         d8:89:0d:fd:42:3a:29:72:ac:58:40:31:8f:0c:0d:e7:ff:e9:
         6c:f2:f9:88:fc:47:21:fa:ae:d6:38:6a:47:e9:0c:b3:49:55:
         a4:66:19:4d:ec:b1:fe:a5:a0:3c:62:47:7c:e4:66:f9:2e:e5:
         49:85:f2:68:65:72:51:53:1f:2b:71:a1:18:7b:7b:62:87:c6:
         58:aa:f5:0c:3d:67:f2:20:51:b0:a7:4c:9e:98:1e:67:f1:71:
         e0:d2:30:83:e1:9f:14:fa:fa:ce:9c:8d:00:ce:fa:bb:3c:f0:
         ef:ee:84:8a:ab:d6:19:ee:94:58:c3:1d:cf:d7:9c:d9:4c:b8:
         0c:9b:b8:32:5e:54:79:9d:66:b8:f1:1c:e6:94:46:ea:20:d1:
         e2:f9:0e:65:39:80:c4:ea:ef:c1:4b:af:07:8f:28:c3:92:69:
         14:78:5c:54:bd:3a:d0:54:c6:ad:37:a8:b6:3f:ed:d8:1a:b0:
         ce:c3:a1:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZzPR//8y4CPmHEwq5Ni5ftaqvygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkMyNjc4RDVDRUQwRUYxMURGQzc2MkUzMzkxNjZCNTZD
MUZCNjhBNTAeFw0yNDA0MDQwNTQ0MjZaFw0yNTA0MDMwNTQ5MjZaMDMxMTAvBgNV
BAMTKDdENzE3OEExQjg2NTVCNUVDMTA0M0JBMUI5ODEyN0E5QUUyNkI2OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYAE8CjCEFKlwWHgb8duIqvNpo
QfMrWFmNkI1SJNvjzTjPHrxOdkxf5A0DV7g38j5DaOhIe/nw/cSNzdVOW+nLZ1RF
2ewyXx68qcbmYA6dcdKJjFhxDSesRkq/CIGOvq6KTiFrdkB+XD0YN9XxIE3XuT6D
bz3ErcKQkLLDJtBZGKhg2PzdbnSdnENQk5VVo6MfePqH2r2ytNnKXVY6Mso+GOyV
F3cbWmD8np+5elnfFjjzZ4xg/qNoSkN9HZODYsksi+dhbWHLX2Y7V4JDdHIlqFP1
XWugQQ6hpGe0xMMMxOL22Ra71Djhhn1mkcnn2eetHAr4K4aWShW/Kfa0eCZ3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUfXF4obhlW17BBDuhuYEnqa4mto0wHwYDVR0j
BBgwFoAU/CZ41c7Q7xHfx2LjORZrVsH7aKUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx
V04vMS9GQzI2NzhENUNFRDBFRjExREZDNzYyRTMzOTE2NkI1NkMxRkI2OEE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDMjY3OEQ1Q0VEMEVGMTFE
RkM3NjJFMzM5MTY2QjU2QzFGQjY4QTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJxb3NFRkhWUWJlUXZ5OGlrdGROenBXTkhLY0IxemVWNG1TZDZGMWVhMVdOLzEv
MzEzNjM4MmUzMTM5MzcyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF5DANBgkqhkiG9w0BAQsFAAOCAQEAXt1P
pNFpIuvadIALe0IEqD51l25LX1mcRJnqHbmqE9/aeEIjXE0+4iRmHL9plu3afUU+
1n7WKlZY88y3U0aEE3gTG5bn3BGt2IkN/UI6KXKsWEAxjwwN5//pbPL5iPxHIfqu
1jhqR+kMs0lVpGYZTeyx/qWgPGJHfORm+S7lSYXyaGVyUVMfK3GhGHt7YofGWKr1
DD1n8iBRsKdMnpgeZ/Fx4NIwg+GfFPr6zpyNAM76uzzw7+6EiqvWGe6UWMMdz9ec
2Uy4DJu4Ml5UeZ1muPEc5pRG6iDR4vkOZTmAxOrvwUuvB48ow5JpFHhcVL060FTG
rTeotj/t2BqwzsOhBA==
-----END CERTIFICATE-----
Generated at Thu Aug 29 10:00:50 2024 by rpki-client on console-fra.rpki-client.org