Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa
File:                     3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          FyAnT3B6ixuvPZ6tlGZ0zxCmkfalMhfS7zmJsO2Njjc=
Subject key identifier:   1B:DD:23:49:E0:49:87:A6:02:AA:1A:25:FC:15:37:34:00:D1:59:48
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       601BC96D76F823071E583F350C81E9D26FBB0932
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:54 +0000
ROA not before:           Mon 14 Oct 2024 01:47:54 +0000
ROA not after:            Mon 13 Oct 2025 01:52:54 +0000
asID:                     28270
IP address blocks:        186.219.149.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:c9:6d:76:f8:23:07:1e:58:3f:35:0c:81:e9:d2:6f:bb:09:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:54 2024 GMT
            Not After : Oct 13 01:52:54 2025 GMT
        Subject: CN=1BDD2349E04987A602AA1A25FC15373400D15948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:34:af:1c:da:8c:4a:b3:7e:64:32:ca:20:
                    24:0f:32:1b:e3:0a:58:81:54:5f:7f:c6:63:77:d0:
                    d0:cf:c8:a0:99:2e:a5:4b:b1:b9:03:a5:92:78:78:
                    89:dd:46:a8:9f:1b:10:cc:ee:16:95:82:6e:63:46:
                    7b:2f:c9:c7:a7:8e:d4:bf:49:00:ce:9c:3e:e3:bb:
                    de:ac:ee:1c:9f:86:89:7c:f6:ac:a8:cf:78:4c:a5:
                    1a:25:1b:e2:d5:87:79:4a:b2:ea:5e:a3:8a:8d:7c:
                    d6:44:70:3f:52:8d:68:0f:31:f0:bb:e9:db:ad:7c:
                    1f:de:ba:0f:f9:02:8f:e4:c6:c5:a2:17:8c:0d:10:
                    25:fd:da:ad:ea:5b:a2:a0:e1:12:90:65:aa:bf:2b:
                    16:e3:93:69:2d:4e:d9:09:18:62:cd:54:9b:c7:e5:
                    08:0d:e1:f5:7b:c9:8b:8f:ab:ec:21:a6:6d:92:21:
                    34:c9:04:46:ce:4f:53:a5:ee:c0:b0:e2:1b:0f:db:
                    1c:02:9c:6a:f9:5b:d8:b4:b8:39:6d:b2:31:36:66:
                    c5:6a:24:a5:c2:f3:b2:73:b3:67:d2:f2:cf:54:8f:
                    53:3c:e8:44:f0:4d:ab:4b:9f:9f:81:b3:40:73:35:
                    fc:b9:12:cc:41:63:95:27:09:aa:a8:3f:6a:2e:62:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:23:49:E0:49:87:A6:02:AA:1A:25:FC:15:37:34:00:D1:59:48
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3134392e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e8:f4:c8:83:3e:21:11:2c:80:93:b9:b7:b7:96:cc:b6:cb:
         18:3f:04:35:39:46:6f:08:08:0a:1f:63:62:31:55:ec:95:e5:
         71:f5:45:48:2d:3f:2e:a7:77:56:f2:ed:56:9c:73:78:d5:d8:
         2b:09:42:6b:88:b6:ca:d6:9e:a5:b8:02:54:af:7f:4b:f2:a2:
         59:c3:d2:b3:cc:fa:b7:c7:f1:cb:d0:1e:28:3f:02:0a:b4:40:
         de:dc:0f:a6:86:46:a4:41:28:66:7f:59:8e:38:98:78:3d:00:
         b6:43:22:aa:b5:8f:17:40:88:84:2c:85:62:66:07:7c:27:b2:
         af:5e:ac:e2:14:58:9e:b7:d4:dc:5d:7d:f8:ce:47:72:a7:44:
         3f:ef:34:44:9f:3a:f0:4b:71:09:23:3c:bc:c4:e9:45:92:93:
         3f:48:e5:a5:24:57:e0:2c:73:e3:23:93:89:fd:0a:2e:57:03:
         34:94:b9:7f:02:08:b8:72:ba:e7:61:c8:27:49:f4:b3:da:ee:
         1a:fb:b5:6b:a9:34:64:df:1c:87:64:51:4d:c5:51:7d:c0:bf:
         3e:99:fd:c2:6a:70:6d:58:f8:12:2a:7c:63:27:88:fb:99:7c:
         57:09:0f:b6:0e:d5:26:d0:f7:bb:76:a3:42:f0:1a:e2:4d:41:
         d7:78:0c:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYBvJbXb4IwceWD81DIHp0m+7CTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ3NTRaFw0yNTEwMTMwMTUyNTRaMDMxMTAvBgNV
BAMTKDFCREQyMzQ5RTA0OTg3QTYwMkFBMUEyNUZDMTUzNzM0MDBEMTU5NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpzSvHNqMSrN+ZDLKICQPMhvj
CliBVF9/xmN30NDPyKCZLqVLsbkDpZJ4eIndRqifGxDM7haVgm5jRnsvycenjtS/
SQDOnD7ju96s7hyfhol89qyoz3hMpRolG+LVh3lKsupeo4qNfNZEcD9SjWgPMfC7
6dutfB/eug/5Ao/kxsWiF4wNECX92q3qW6Kg4RKQZaq/Kxbjk2ktTtkJGGLNVJvH
5QgN4fV7yYuPq+whpm2SITTJBEbOT1Ol7sCw4hsP2xwCnGr5W9i0uDltsjE2ZsVq
JKXC87Jzs2fS8s9Uj1M86ETwTatLn5+Bs0BzNfy5EsxBY5UnCaqoP2ouYu2pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUG90jSeBJh6YCqhol/BU3NADRWUgwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzODM2MmUzMjMxMzkyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC625UwDQYJKoZIhvcNAQELBQADggEBAHro9MiD
PiERLICTube3lsy2yxg/BDU5Rm8ICAofY2IxVeyV5XH1RUgtPy6nd1by7Vacc3jV
2CsJQmuItsrWnqW4AlSvf0vyolnD0rPM+rfH8cvQHig/Agq0QN7cD6aGRqRBKGZ/
WY44mHg9ALZDIqq1jxdAiIQshWJmB3wnsq9erOIUWJ631NxdffjOR3KnRD/vNESf
OvBLcQkjPLzE6UWSkz9I5aUkV+Asc+Mjk4n9Ci5XAzSUuX8CCLhyuudhyCdJ9LPa
7hr7tWupNGTfHIdkUU3FUX3Avz6Z/cJqcG1Y+BIqfGMniPuZfFcJD7YO1SbQ97t2
o0LwGuJNQdd4DDo=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org