Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa
File:                     3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          f7lROgYU5jdQSVvO9+0ahojh7J04GseLliZSfekJwug=
Subject key identifier:   9A:90:4B:6E:26:65:9F:E4:09:E6:6E:8F:FB:25:A4:DE:77:01:D6:4B
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       1B8167E21AB2166CD67747CFB0E5B7E6378BCBA2
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:09 +0000
ROA not before:           Thu 10 Oct 2024 19:27:09 +0000
ROA not after:            Thu 09 Oct 2025 19:32:09 +0000
asID:                     262296
IP address blocks:        168.181.198.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:81:67:e2:1a:b2:16:6c:d6:77:47:cf:b0:e5:b7:e6:37:8b:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:09 2024 GMT
            Not After : Oct  9 19:32:09 2025 GMT
        Subject: CN=9A904B6E26659FE409E66E8FFB25A4DE7701D64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:44:d7:a6:f8:8e:e4:a8:b6:07:63:4a:f7:
                    47:65:bd:9d:a8:51:24:70:90:52:14:73:ac:dc:c2:
                    f5:c4:b4:0b:ef:ca:70:20:cb:f5:95:fe:54:53:c3:
                    3f:b5:7f:5e:ac:2e:fb:6b:2d:11:23:98:e2:1e:d0:
                    d9:29:62:81:c3:55:79:40:0d:f5:af:dc:fd:4f:ee:
                    06:5b:27:3f:af:49:4c:91:63:b7:32:6c:ab:f1:43:
                    b5:68:f1:c7:0d:c6:c6:59:dd:10:fd:35:1b:a2:69:
                    2c:05:51:a9:4d:8e:9e:e7:fa:bb:3b:7b:8a:b1:07:
                    51:0b:50:37:02:e6:c7:a9:e0:43:9a:c1:84:09:88:
                    83:8a:f2:f6:75:4c:fa:bc:5d:82:1a:95:ce:03:b2:
                    f9:de:0d:e4:34:a5:af:6c:42:7d:54:5d:c2:e5:26:
                    e0:b8:7f:74:b5:3f:78:24:1b:c6:fc:1b:3d:55:45:
                    e7:9e:07:71:37:e7:d3:f5:96:10:c3:56:c7:78:64:
                    c6:a1:db:42:1e:86:0a:72:c1:56:af:09:5f:19:26:
                    af:8b:d0:04:7b:4e:c6:fd:23:a3:7e:6c:40:04:86:
                    88:19:8c:8b:68:5d:79:21:19:1a:0c:88:49:e3:e3:
                    e7:cd:52:d7:1b:ef:92:fd:34:90:5b:42:f0:f9:d3:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:4B:6E:26:65:9F:E4:09:E6:6E:8F:FB:25:A4:DE:77:01:D6:4B
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3136382e3138312e3139382e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:90:b4:0d:63:e6:35:f1:83:0a:5b:ab:74:3e:23:1f:eb:8d:
         d8:4f:20:b5:13:fe:14:60:04:70:3a:61:0d:19:9f:b7:83:63:
         9f:e0:aa:c8:f5:eb:19:7d:c6:2f:ce:67:c7:c7:2d:ba:f3:5f:
         ce:a3:6c:fb:c4:14:73:96:16:4c:7f:25:93:d9:48:14:ac:3c:
         fa:f8:5e:52:64:a2:7e:ad:65:c7:cf:53:77:82:c6:14:4d:84:
         72:9f:2a:a9:a6:f5:a2:d5:13:7e:8f:fe:cb:9e:33:7d:1c:e1:
         a4:85:06:8d:7b:71:02:f3:d1:d2:82:24:79:a1:80:ae:cd:77:
         ed:77:3c:3b:fb:e1:0b:87:e5:87:7a:90:38:85:81:58:b6:c9:
         a8:43:bd:07:5f:83:bc:6b:7b:26:73:a8:71:9a:61:1b:48:88:
         73:a3:dc:a9:c9:bc:da:19:6a:a7:36:4d:06:78:1e:1c:f4:92:
         3d:b1:c2:97:2d:72:63:f9:53:47:c3:f5:c7:9a:65:1d:98:ae:
         85:76:e9:3e:73:46:1c:84:3f:00:41:ad:7e:58:07:8d:ee:5e:
         4e:73:d1:3f:60:35:60:f7:43:da:a9:4b:dc:e5:d1:f9:c0:0d:
         50:7d:17:a8:87:10:f6:37:8c:1f:8e:dc:b2:3c:d8:91:58:2a:
         a7:1c:ce:b0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG4Fn4hqyFmzWd0fPsOW35jeLy6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjIxNjRBNzBCNDVGNkY0QjNEN0MwRTE1RUEyRDM5
MkYzQ0U2RTAeFw0yNDEwMTAxOTI3MDlaFw0yNTEwMDkxOTMyMDlaMDMxMTAvBgNV
BAMTKDlBOTA0QjZFMjY2NTlGRTQwOUU2NkU4RkZCMjVBNERFNzcwMUQ2NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUK0TXpviO5Ki2B2NK90dlvZ2o
USRwkFIUc6zcwvXEtAvvynAgy/WV/lRTwz+1f16sLvtrLREjmOIe0NkpYoHDVXlA
DfWv3P1P7gZbJz+vSUyRY7cybKvxQ7Vo8ccNxsZZ3RD9NRuiaSwFUalNjp7n+rs7
e4qxB1ELUDcC5sep4EOawYQJiIOK8vZ1TPq8XYIalc4DsvneDeQ0pa9sQn1UXcLl
JuC4f3S1P3gkG8b8Gz1VReeeB3E359P1lhDDVsd4ZMah20IehgpywVavCV8ZJq+L
0AR7Tsb9I6N+bEAEhogZjItoXXkhGRoMiEnj4+fNUtcb75L9NJBbQvD502BDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmpBLbiZln+QJ5m6P+yWk3ncB1kswHwYDVR0j
BBgwFoAUL1YhZKcLRfb0s9fA4V6i05Lzzm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC8yRjU2MjE2NEE3MEI0NUY2RjRCM0Q3QzBFMTVFQTJEMzkyRjNDRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNTYyMTY0QTcwQjQ1RjZG
NEIzRDdDMEUxNUVBMkQzOTJGM0NFNkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzkzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAai1xjANBgkqhkiG9w0BAQsFAAOCAQEAipC0
DWPmNfGDClurdD4jH+uN2E8gtRP+FGAEcDphDRmft4Njn+CqyPXrGX3GL85nx8ct
uvNfzqNs+8QUc5YWTH8lk9lIFKw8+vheUmSifq1lx89Td4LGFE2Ecp8qqab1otUT
fo/+y54zfRzhpIUGjXtxAvPR0oIkeaGArs137Xc8O/vhC4flh3qQOIWBWLbJqEO9
B1+DvGt7JnOocZphG0iIc6Pcqcm82hlqpzZNBngeHPSSPbHCly1yY/lTR8P1x5pl
HZiuhXbpPnNGHIQ/AEGtflgHje5eTnPRP2A1YPdD2qlL3OXR+cANUH0XqIcQ9jeM
H47csjzYkVgqpxzOsA==
-----END CERTIFICATE-----
Generated at Sun Oct 20 08:59:02 2024 by rpki-client on console-ams.rpki-client.org