Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e203238323730.roa
File:                     3137372e36372e342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          kp/n2vqtBYzNi9DdaCqS4y1vvZKxXgpK3Uu/RC5FZjc=
Subject key identifier:   CF:6C:A0:B1:BF:B9:8D:8E:32:68:1F:EC:16:BA:EB:27:E6:0B:B1:26
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       306A2BCA2AE1DB8AFE09CDAAEE8CB948C86E665E
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:54 +0000
ROA not before:           Mon 14 Oct 2024 01:47:54 +0000
ROA not after:            Mon 13 Oct 2025 01:52:54 +0000
asID:                     28270
IP address blocks:        177.67.4.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6a:2b:ca:2a:e1:db:8a:fe:09:cd:aa:ee:8c:b9:48:c8:6e:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:54 2024 GMT
            Not After : Oct 13 01:52:54 2025 GMT
        Subject: CN=CF6CA0B1BFB98D8E32681FEC16BAEB27E60BB126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:fb:5a:19:3c:2f:e0:99:fd:cf:bf:db:c0:
                    97:63:9a:31:48:24:13:64:35:53:ba:ce:0b:5c:6b:
                    8b:e1:a7:3a:21:2a:a4:53:30:52:31:b1:e3:9a:66:
                    88:3a:ba:4a:1b:27:28:0f:b1:e9:a2:ee:2c:48:9e:
                    a2:8c:b3:e3:fc:fa:b1:9a:8c:a2:e5:f8:4d:b4:99:
                    77:73:3e:dd:bf:ce:7b:64:f2:0d:94:fd:fb:82:29:
                    94:b8:7b:e7:1f:78:08:38:1e:84:ca:53:44:eb:07:
                    02:2f:a4:22:7f:f4:d4:cf:0b:47:fd:3a:f1:5e:0f:
                    bb:00:bb:aa:ef:9e:b0:25:02:04:e5:8d:9a:f2:82:
                    93:a8:93:60:c3:09:54:6a:7a:04:85:41:04:62:17:
                    4d:49:91:43:e1:0d:91:5c:ae:c2:bf:17:c8:36:d2:
                    05:d0:86:5c:2b:3e:a2:16:da:29:63:a9:1d:d4:40:
                    8d:17:9b:6b:7a:c4:a2:91:cd:20:b2:21:08:48:06:
                    55:2a:98:23:a4:ee:93:0b:99:cc:0d:19:c6:e7:80:
                    3b:42:b1:c6:75:f4:b0:d7:5f:e6:b9:b5:42:54:07:
                    0c:5d:e5:6a:da:b4:14:40:a7:9c:b1:85:58:38:52:
                    ae:4e:51:43:2c:81:80:0f:e2:40:0a:12:10:93:46:
                    8c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6C:A0:B1:BF:B9:8D:8E:32:68:1F:EC:16:BA:EB:27:E6:0B:B1:26
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:5a:ab:43:f8:8e:1c:d4:ce:33:c8:24:9b:c0:5a:11:d3:5b:
         b6:48:94:dc:56:cf:29:77:a2:88:53:9a:00:7a:ea:f5:5f:b3:
         6e:f8:b7:df:2c:83:61:cd:2d:21:27:2a:49:23:3c:9a:08:e0:
         1f:dd:de:79:ce:a4:f7:08:80:5d:e8:2f:20:eb:23:cb:58:b1:
         d2:a2:91:46:a7:94:1b:eb:58:31:33:f3:77:73:1d:39:10:f8:
         7e:3a:9e:de:30:6f:d5:cd:cd:1d:43:2c:73:74:7f:b3:8b:ba:
         6e:76:db:2b:0c:c2:37:67:05:c9:07:ff:aa:fe:0a:8e:e6:c2:
         dd:d5:cd:bc:cf:71:b4:26:db:85:5b:80:16:93:90:eb:0b:42:
         3b:75:76:b1:01:f2:f6:8b:97:87:af:f9:2d:0a:1a:b5:75:56:
         21:f6:87:48:6f:9f:58:d4:cf:ea:24:3a:cc:c6:4d:f0:70:20:
         49:b9:22:37:96:26:69:19:83:54:0f:e1:29:a6:f5:98:3d:55:
         ca:bc:63:b6:e0:40:cf:02:b5:d6:27:92:d8:7d:0f:a6:38:ef:
         27:67:66:0f:0d:fd:bd:61:f5:a8:c5:83:14:06:ff:62:fe:fd:
         b6:b7:ac:f3:4c:d9:b7:a5:3a:d2:e2:af:fa:f1:20:1b:62:ea:
         9f:01:ab:68
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUMGoryirh24r+Cc2q7oy5SMhuZl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ3NTRaFw0yNTEwMTMwMTUyNTRaMDMxMTAvBgNV
BAMTKENGNkNBMEIxQkZCOThEOEUzMjY4MUZFQzE2QkFFQjI3RTYwQkIxMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DPtaGTwv4Jn9z7/bwJdjmjFI
JBNkNVO6zgtca4vhpzohKqRTMFIxseOaZog6ukobJygPsemi7ixInqKMs+P8+rGa
jKLl+E20mXdzPt2/zntk8g2U/fuCKZS4e+cfeAg4HoTKU0TrBwIvpCJ/9NTPC0f9
OvFeD7sAu6rvnrAlAgTljZrygpOok2DDCVRqegSFQQRiF01JkUPhDZFcrsK/F8g2
0gXQhlwrPqIW2iljqR3UQI0Xm2t6xKKRzSCyIQhIBlUqmCOk7pMLmcwNGcbngDtC
scZ19LDXX+a5tUJUBwxd5WratBRAp5yxhVg4Uq5OUUMsgYAP4kAKEhCTRoybAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUz2ygsb+5jY4yaB/sFrrrJ+YLsSYwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNjM3MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKxQwQwDQYJKoZIhvcNAQELBQADggEBAJFaq0P4jhzUzjPI
JJvAWhHTW7ZIlNxWzyl3oohTmgB66vVfs274t98sg2HNLSEnKkkjPJoI4B/d3nnO
pPcIgF3oLyDrI8tYsdKikUanlBvrWDEz83dzHTkQ+H46nt4wb9XNzR1DLHN0f7OL
um522ysMwjdnBckH/6r+Co7mwt3VzbzPcbQm24VbgBaTkOsLQjt1drEB8vaLl4ev
+S0KGrV1ViH2h0hvn1jUz+okOszGTfBwIEm5IjeWJmkZg1QP4Smm9Zg9Vcq8Y7bg
QM8CtdYnkth9D6Y47ydnZg8N/b1h9ajFgxQG/2L+/ba3rPNM2belOtLir/rxIBti
6p8Bq2g=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org