Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32332d3233203d3e20323632323936.roa
File:                     3137302e38312e302e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          LRxo/4vr6Pzauh2Rp2sTbSqOAPHiE4wyC9ayyyo0Y/c=
Subject key identifier:   AD:95:FF:91:FE:4D:68:EB:60:D6:4D:45:8A:B0:A2:1D:19:F2:2B:5C
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       66119F32246788C92A1B0FCE5C386005ACDFB163
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:08 +0000
ROA not before:           Thu 10 Oct 2024 19:27:08 +0000
ROA not after:            Thu 09 Oct 2025 19:32:08 +0000
asID:                     262296
IP address blocks:        170.81.0.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:11:9f:32:24:67:88:c9:2a:1b:0f:ce:5c:38:60:05:ac:df:b1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:08 2024 GMT
            Not After : Oct  9 19:32:08 2025 GMT
        Subject: CN=AD95FF91FE4D68EB60D64D458AB0A21D19F22B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:cd:4c:b7:3a:4f:e5:f3:6b:fa:d2:e7:5a:
                    14:58:35:05:69:73:d1:29:0d:84:63:af:43:01:b5:
                    57:b8:37:12:56:92:ab:2c:26:9e:69:d6:67:84:f1:
                    05:a1:f2:d8:66:12:09:34:32:24:ea:db:b2:62:de:
                    4c:1a:e2:bd:9b:e7:14:17:b9:bd:5f:fe:c3:f0:46:
                    63:6b:4a:a6:1c:48:b0:3e:f8:85:aa:d6:7b:ec:ff:
                    bf:88:3a:1b:9e:55:82:31:26:e5:ba:ef:9f:c1:17:
                    df:39:40:79:5f:d6:f2:a7:f9:ad:88:72:13:05:65:
                    f2:e3:cf:e7:09:45:1e:1b:8a:9e:ec:9b:ec:dc:81:
                    55:94:39:35:df:93:db:f0:0f:fe:d2:a3:53:d1:a7:
                    68:02:a6:54:8e:1b:28:5b:2d:e3:2a:42:e2:75:91:
                    f4:6a:e2:6c:db:a2:07:4c:71:b9:1c:56:ad:a9:e6:
                    11:d6:e4:32:31:5e:a3:f6:9c:60:f7:a0:1a:b5:f6:
                    09:56:8f:27:a3:2b:21:0a:4d:0d:c6:53:af:f1:aa:
                    90:0a:7a:38:84:d1:fc:b8:64:40:3f:70:3c:ff:e2:
                    56:da:3c:fd:22:df:29:c0:d4:1f:c2:d2:db:1a:14:
                    86:16:aa:d2:be:ba:e6:81:aa:15:ba:12:d9:8d:22:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:FF:91:FE:4D:68:EB:60:D6:4D:45:8A:B0:A2:1D:19:F2:2B:5C
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e302e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:11:46:a3:c1:1f:3d:83:c5:d9:69:9c:86:2d:82:4e:6a:5d:
         f6:3c:fe:27:47:61:56:d2:72:aa:07:1f:ef:d6:10:eb:49:17:
         f6:04:dd:8d:c9:5a:a9:33:cd:4e:ad:58:17:c4:5b:10:6a:25:
         b0:11:fb:cc:af:7a:0b:15:d2:b3:ed:ff:d1:f4:49:f6:6c:d0:
         86:f2:e0:eb:a5:b4:71:0d:cf:30:50:2e:83:86:16:40:0f:03:
         a6:e5:85:64:28:42:5d:a2:73:36:12:a0:23:8c:04:bb:50:c5:
         94:d3:bb:19:d1:39:10:ac:d9:07:7a:ab:55:ff:a3:14:2b:9d:
         5a:7c:f5:45:08:e2:b7:f2:be:e3:b0:9b:71:b2:a3:5c:c9:e6:
         16:77:01:b0:f3:66:83:94:94:16:0e:14:aa:6d:63:99:ba:99:
         29:02:5c:ca:0e:8d:83:34:ee:93:2e:a1:55:8c:5e:a8:8b:83:
         fe:f6:28:5d:61:f1:76:bc:e8:b4:1f:67:6f:95:83:70:73:e5:
         38:32:b9:7c:ee:f4:21:64:91:21:98:d7:60:c7:25:15:5f:91:
         6a:5b:7d:a8:92:d4:fe:0b:f0:c7:1e:18:1d:b8:2c:81:08:ab:
         5a:75:60:63:42:60:99:7c:b6:22:bd:15:7b:98:6d:fd:e7:bc:
         a4:76:28:6b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUZhGfMiRniMkqGw/OXDhgBazfsWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjIxNjRBNzBCNDVGNkY0QjNEN0MwRTE1RUEyRDM5
MkYzQ0U2RTAeFw0yNDEwMTAxOTI3MDhaFw0yNTEwMDkxOTMyMDhaMDMxMTAvBgNV
BAMTKEFEOTVGRjkxRkU0RDY4RUI2MEQ2NEQ0NThBQjBBMjFEMTlGMjJCNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjc1MtzpP5fNr+tLnWhRYNQVp
c9EpDYRjr0MBtVe4NxJWkqssJp5p1meE8QWh8thmEgk0MiTq27Ji3kwa4r2b5xQX
ub1f/sPwRmNrSqYcSLA++IWq1nvs/7+IOhueVYIxJuW675/BF985QHlf1vKn+a2I
chMFZfLjz+cJRR4bip7sm+zcgVWUOTXfk9vwD/7So1PRp2gCplSOGyhbLeMqQuJ1
kfRq4mzbogdMcbkcVq2p5hHW5DIxXqP2nGD3oBq19glWjyejKyEKTQ3GU6/xqpAK
ejiE0fy4ZEA/cDz/4lbaPP0i3ynA1B/C0tsaFIYWqtK+uuaBqhW6EtmNIoUTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUrZX/kf5NaOtg1k1FirCiHRnyK1wwHwYDVR0j
BBgwFoAUL1YhZKcLRfb0s9fA4V6i05Lzzm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC8yRjU2MjE2NEE3MEI0NUY2RjRCM0Q3QzBFMTVFQTJEMzkyRjNDRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNTYyMTY0QTcwQjQ1RjZG
NEIzRDdDMEUxNUVBMkQzOTJGM0NFNkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzMwMmUzODMxMmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjMy
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAapRADANBgkqhkiG9w0BAQsFAAOCAQEAmBFGo8EfPYPF
2Wmchi2CTmpd9jz+J0dhVtJyqgcf79YQ60kX9gTdjclaqTPNTq1YF8RbEGolsBH7
zK96CxXSs+3/0fRJ9mzQhvLg66W0cQ3PMFAug4YWQA8DpuWFZChCXaJzNhKgI4wE
u1DFlNO7GdE5EKzZB3qrVf+jFCudWnz1RQjit/K+47CbcbKjXMnmFncBsPNmg5SU
Fg4Uqm1jmbqZKQJcyg6NgzTuky6hVYxeqIuD/vYoXWHxdrzotB9nb5WDcHPlODK5
fO70IWSRIZjXYMclFV+Ralt9qJLU/gvwxx4YHbgsgQirWnVgY0JgmXy2Ir0Ve5ht
/ee8pHYoaw==
-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org