Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa
File:                     3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa (raw, json)
Hash identifier:          5YtSZR5xxNzLeVwIAwn7qYSlSAVYcQN+lfHbCSvqirg=
Subject key identifier:   32:E2:81:7F:0E:1B:B4:C9:38:79:F9:BD:CB:C6:DE:80:8E:4D:89:15
Certificate issuer:       /CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
Certificate serial:       66E88D0257FC5FFF2EBABBE6CD39F89B4E81BA3A
Authority key identifier: 32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa
Signing time:             Wed 03 Apr 2024 22:53:44 +0000
ROA not before:           Wed 03 Apr 2024 22:48:44 +0000
ROA not after:            Wed 02 Apr 2025 22:53:44 +0000
asID:                     271650
IP address blocks:        179.63.160.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e8:8d:02:57:fc:5f:ff:2e:ba:bb:e6:cd:39:f8:9b:4e:81:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C3813075A9E7F4072CD111E0A65457F3DE273C
        Validity
            Not Before: Apr  3 22:48:44 2024 GMT
            Not After : Apr  2 22:53:44 2025 GMT
        Subject: CN=32E2817F0E1BB4C93879F9BDCBC6DE808E4D8915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:a9:35:b4:7e:2a:e3:ae:a4:1a:3a:ab:b9:
                    4a:ed:6f:7d:35:c4:74:be:18:29:2e:a4:32:5a:c5:
                    32:d9:96:83:36:5f:b7:9a:38:1b:95:db:ce:13:29:
                    df:dd:50:88:0b:da:06:94:71:3e:ff:2b:96:37:b6:
                    32:3e:20:1f:21:8c:e9:2c:13:7c:69:82:3d:30:47:
                    08:7a:c8:11:b6:42:a5:15:7f:a3:d4:ff:b5:b5:90:
                    34:a1:9f:8c:96:a0:67:e6:55:74:99:5e:e9:1f:8d:
                    bf:e8:e4:15:15:ad:d4:46:3f:da:ff:4d:c9:04:00:
                    16:a0:ac:be:9d:0e:62:72:10:3e:e3:21:42:81:69:
                    aa:7a:48:3a:c7:db:c9:eb:ca:6a:8c:45:fa:a6:92:
                    8a:08:e6:39:9f:ce:d3:c9:8f:4c:4f:fa:24:f7:80:
                    c5:9e:09:62:38:5c:ae:f1:6c:cd:6f:10:ec:57:31:
                    cd:87:26:36:e2:46:6e:1b:2b:5d:f9:50:4f:6b:b3:
                    34:db:a0:9f:fe:f9:aa:b7:c5:5d:60:f3:50:1c:45:
                    49:42:34:d7:1c:fd:78:8e:5a:81:6b:a5:ff:93:81:
                    a9:b1:ba:d3:c3:30:7f:5c:ea:53:c8:47:8c:2b:db:
                    62:ae:e8:ce:dc:4a:6c:ac:1a:04:30:93:80:1e:a7:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:81:7F:0E:1B:B4:C9:38:79:F9:BD:CB:C6:DE:80:8E:4D:89:15
            X509v3 Authority Key Identifier:
                keyid:32:C3:81:30:75:A9:E7:F4:07:2C:D1:11:E0:A6:54:57:F3:DE:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32C3813075A9E7F4072CD111E0A65457F3DE273C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SJa8W2CD6PyX68kk7UF9N2CemLdeJD7rn6Q4syyfmLj/1/3137392e36332e3136302e302f32342d3234203d3e20323731363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:eb:b5:8c:9c:3d:14:48:dd:a2:31:89:4e:62:6a:2c:9a:
         36:f3:3f:cd:b6:5f:58:84:c3:10:2d:bb:51:82:d5:20:b3:3b:
         7a:a3:da:41:6b:f6:eb:ae:c8:52:77:eb:a8:02:46:e1:1b:ec:
         7e:8d:cb:06:92:96:58:8c:37:32:84:56:24:84:1b:eb:84:99:
         56:4a:12:a9:0f:a3:94:d3:f5:09:4f:13:67:82:86:3e:3b:50:
         ae:3d:b1:bf:1a:96:9c:c0:b8:b8:5d:d4:94:28:c2:c8:d3:5e:
         92:6f:4e:4d:c2:d6:6a:b4:2b:c0:41:62:f0:83:73:61:c7:f9:
         60:f7:52:1e:22:01:b1:ce:75:30:47:62:f2:91:01:b9:8a:23:
         33:a2:c9:d3:99:44:43:a0:df:54:eb:fe:7e:a1:c0:aa:0b:c9:
         20:10:2f:be:e7:2d:bf:08:1e:4a:de:18:0a:d5:5c:87:51:f1:
         43:e8:91:ef:a3:81:aa:da:f7:28:e5:ea:46:9a:4c:4c:3f:08:
         c5:00:ed:4b:c5:85:ce:52:0e:90:17:6c:a4:a9:4f:f7:9a:68:
         3d:5e:50:98:34:f3:38:b8:c9:23:46:14:36:21:34:af:b5:be:
         32:db:f4:98:cb:cf:0c:b9:29:74:9b:7d:cb:96:58:95:52:cb:
         68:bb:a9:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZuiNAlf8X/8uurvmzTn4m06BujowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDMzgxMzA3NUE5RTdGNDA3MkNEMTExRTBBNjU0NTdG
M0RFMjczQzAeFw0yNDA0MDMyMjQ4NDRaFw0yNTA0MDIyMjUzNDRaMDMxMTAvBgNV
BAMTKDMyRTI4MTdGMEUxQkI0QzkzODc5RjlCRENCQzZERTgwOEU0RDg5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxqk1tH4q466kGjqruUrtb301
xHS+GCkupDJaxTLZloM2X7eaOBuV284TKd/dUIgL2gaUcT7/K5Y3tjI+IB8hjOks
E3xpgj0wRwh6yBG2QqUVf6PU/7W1kDShn4yWoGfmVXSZXukfjb/o5BUVrdRGP9r/
TckEABagrL6dDmJyED7jIUKBaap6SDrH28nrymqMRfqmkooI5jmfztPJj0xP+iT3
gMWeCWI4XK7xbM1vEOxXMc2HJjbiRm4bK135UE9rszTboJ/++aq3xV1g81AcRUlC
NNcc/XiOWoFrpf+TgamxutPDMH9c6lPIR4wr22Ku6M7cSmysGgQwk4Aepy1rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMuKBfw4btMk4efm9y8begI5NiRUwHwYDVR0j
BBgwFoAUMsOBMHWp5/QHLNER4KZUV/PeJzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NKYThXMkNENlB5WDY4a2s3VUY5TjJDZW1MZGVKRDdybjZRNHN5eWZt
TGovMS8zMkMzODEzMDc1QTlFN0Y0MDcyQ0QxMTFFMEE2NTQ1N0YzREUyNzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyQzM4MTMwNzVBOUU3RjQw
NzJDRDExMUUwQTY1NDU3RjNERTI3M0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTSmE4VzJDRDZQeVg2OGtrN1VGOU4yQ2VtTGRlSkQ3cm42UTRzeXlmbUxqLzEv
MzEzNzM5MmUzNjMzMmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACzP6AwDQYJKoZIhvcNAQELBQADggEBACvS67WM
nD0USN2iMYlOYmosmjbzP822X1iEwxAtu1GC1SCzO3qj2kFr9uuuyFJ366gCRuEb
7H6NywaSlliMNzKEViSEG+uEmVZKEqkPo5TT9QlPE2eChj47UK49sb8alpzAuLhd
1JQowsjTXpJvTk3C1mq0K8BBYvCDc2HH+WD3Uh4iAbHOdTBHYvKRAbmKIzOiydOZ
REOg31Tr/n6hwKoLySAQL77nLb8IHkreGArVXIdR8UPoke+jgara9yjl6kaaTEw/
CMUA7UvFhc5SDpAXbKSpT/eaaD1eUJg08zi4ySNGFDYhNK+1vjLb9JjLzwy5KXSb
fcuWWJVSy2i7qQI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org