Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
File:                     3137302e38312e322e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          /kdQX+DRBMq1ZxbUX1dvHaM9xaXPwfqkcdsC6I5mfQM=
Subject key identifier:   0B:EC:AA:B7:75:B1:39:D9:AF:97:9D:4F:55:DD:21:10:A3:5D:C6:EE
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       0CDC6FAE73861946B4C81053469A4D1F114B0237
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa
Signing time:             Thu 10 Oct 2024 19:32:08 +0000
ROA not before:           Thu 10 Oct 2024 19:27:08 +0000
ROA not after:            Thu 09 Oct 2025 19:32:08 +0000
asID:                     262296
IP address blocks:        170.81.2.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dc:6f:ae:73:86:19:46:b4:c8:10:53:46:9a:4d:1f:11:4b:02:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Oct 10 19:27:08 2024 GMT
            Not After : Oct  9 19:32:08 2025 GMT
        Subject: CN=0BECAAB775B139D9AF979D4F55DD2110A35DC6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:ea:d8:cc:1f:9d:b8:2b:ca:a4:03:00:0b:
                    98:4f:64:16:ea:d1:24:8c:a3:a5:72:27:3a:f2:eb:
                    e1:9e:ae:9f:1c:86:74:68:70:4c:d9:c9:51:0c:d9:
                    63:2b:6f:4e:92:bd:56:9e:ca:48:27:68:01:38:37:
                    d2:2e:de:85:a8:b8:7b:d9:77:fc:bd:48:42:01:7c:
                    c6:98:2d:4e:c2:e6:1d:56:08:57:4e:85:70:00:1d:
                    b0:75:0c:dd:fa:e4:e0:10:bb:14:46:c8:cb:88:08:
                    18:96:d7:98:43:c8:28:4d:99:d4:bf:87:d4:ae:a3:
                    e6:91:12:e4:c9:86:56:03:ec:72:c4:f9:1d:f9:e5:
                    f5:89:f1:e2:b1:1a:5a:d1:8d:29:ca:10:2a:1f:d5:
                    73:f6:f6:a6:cb:70:1b:16:07:ca:de:27:a9:6b:0c:
                    77:e3:aa:90:a5:59:fd:e7:57:6d:75:9d:86:2d:d0:
                    83:59:e2:ed:85:17:e2:ce:ad:cc:80:bb:b9:1f:b6:
                    72:e7:9e:ea:80:8c:60:a9:e1:5d:ec:0e:1e:83:26:
                    cd:c7:5e:0d:86:c1:2b:f9:8e:4c:fe:a2:6d:8e:f9:
                    19:7e:ab:26:20:8f:64:a3:1e:9b:52:45:5f:fa:6f:
                    17:4c:05:09:1d:32:30:04:3d:7e:99:09:74:0f:5d:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:AA:B7:75:B1:39:D9:AF:97:9D:4F:55:DD:21:10:A3:5D:C6:EE
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:19:dd:83:67:5e:2a:82:53:5d:13:6a:ba:c2:d3:38:0f:66:
         ae:b6:35:55:ca:ee:bc:10:32:2d:68:a7:9e:73:0a:96:95:86:
         7e:ad:6c:ef:d3:0f:73:e0:5d:d2:14:0a:f6:94:a8:a9:f7:8f:
         1d:73:6d:3a:73:0d:45:a5:74:f5:48:26:30:97:f5:5c:c3:36:
         fe:be:4b:58:6b:79:6f:a8:21:5d:73:14:c7:a3:0e:7e:0d:5c:
         47:52:1b:14:53:fc:be:bf:ca:2c:36:29:97:ee:8a:1f:a7:06:
         77:ed:43:5b:4b:2e:e6:e0:d6:ae:86:58:1d:cc:3a:71:39:63:
         c6:e3:19:29:8d:d6:d7:e8:b1:c5:5b:a7:97:46:c9:16:d5:bf:
         c7:b0:c6:c6:db:a5:1f:2c:79:89:cc:2e:2b:2b:a2:f9:40:13:
         1a:b9:09:df:4e:7b:c7:7b:f7:a1:52:16:6c:54:2e:e9:f2:68:
         50:04:e7:95:01:98:7f:6d:75:ee:d5:30:7e:b4:e4:ad:df:e2:
         33:83:f8:8f:e6:cb:ed:9e:f5:91:03:7f:80:3f:16:c1:42:dc:
         0d:e3:b9:c2:64:23:90:07:3f:53:55:e2:80:61:a7:e1:50:22:
         cc:02:9c:8b:2a:32:70:b6:4f:49:23:cf:ba:79:5b:73:7f:6a:
         f4:b0:a6:38
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDNxvrnOGGUa0yBBTRppNHxFLAjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1NjIxNjRBNzBCNDVGNkY0QjNEN0MwRTE1RUEyRDM5
MkYzQ0U2RTAeFw0yNDEwMTAxOTI3MDhaFw0yNTEwMDkxOTMyMDhaMDMxMTAvBgNV
BAMTKDBCRUNBQUI3NzVCMTM5RDlBRjk3OUQ0RjU1REQyMTEwQTM1REM2RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ROrYzB+duCvKpAMAC5hPZBbq
0SSMo6VyJzry6+Gerp8chnRocEzZyVEM2WMrb06SvVaeykgnaAE4N9Iu3oWouHvZ
d/y9SEIBfMaYLU7C5h1WCFdOhXAAHbB1DN365OAQuxRGyMuICBiW15hDyChNmdS/
h9Suo+aREuTJhlYD7HLE+R355fWJ8eKxGlrRjSnKECof1XP29qbLcBsWB8reJ6lr
DHfjqpClWf3nV211nYYt0INZ4u2FF+LOrcyAu7kftnLnnuqAjGCp4V3sDh6DJs3H
Xg2GwSv5jkz+om2O+Rl+qyYgj2SjHptSRV/6bxdMBQkdMjAEPX6ZCXQPXRz1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUC+yqt3WxOdmvl51PVd0hEKNdxu4wHwYDVR0j
BBgwFoAUL1YhZKcLRfb0s9fA4V6i05Lzzm4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC8yRjU2MjE2NEE3MEI0NUY2RjRCM0Q3QzBFMTVFQTJEMzkyRjNDRTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNTYyMTY0QTcwQjQ1RjZG
NEIzRDdDMEUxNUVBMkQzOTJGM0NFNkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzMwMmUzODMxMmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzMjMy
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAapRAjANBgkqhkiG9w0BAQsFAAOCAQEAOxndg2deKoJT
XRNqusLTOA9mrrY1VcruvBAyLWinnnMKlpWGfq1s79MPc+Bd0hQK9pSoqfePHXNt
OnMNRaV09UgmMJf1XMM2/r5LWGt5b6ghXXMUx6MOfg1cR1IbFFP8vr/KLDYpl+6K
H6cGd+1DW0su5uDWroZYHcw6cTljxuMZKY3W1+ixxVunl0bJFtW/x7DGxtulHyx5
icwuKyui+UATGrkJ3057x3v3oVIWbFQu6fJoUATnlQGYf2117tUwfrTkrd/iM4P4
j+bL7Z71kQN/gD8WwULcDeO5wmQjkAc/U1XigGGn4VAizAKciyoycLZPSSPPunlb
c39q9LCmOA==
-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org