Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32322d3232203d3e203238323230.roa
File:                     3139312e362e38302e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier:          JzI5tl0VBjYfSWLUX0XSApCbZiSfN2aOIh14xESLZDw=
Subject key identifier:   F7:B6:67:EA:8B:5E:61:FF:7D:49:77:53:F2:95:68:9D:FD:F5:34:32
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       7308BA4B3C4A08FC8E8C84F16FB6B5398CD581FA
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32322d3232203d3e203238323230.roa
Signing time:             Sat 26 Oct 2024 15:40:34 +0000
ROA not before:           Sat 26 Oct 2024 15:35:34 +0000
ROA not after:            Sat 25 Oct 2025 15:40:34 +0000
asID:                     28220
IP address blocks:        191.6.80.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:08:ba:4b:3c:4a:08:fc:8e:8c:84:f1:6f:b6:b5:39:8c:d5:81:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 26 15:35:34 2024 GMT
            Not After : Oct 25 15:40:34 2025 GMT
        Subject: CN=F7B667EA8B5E61FF7D497753F295689DFDF53432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:ec:c3:87:0e:b0:d1:6c:67:93:31:ca:2a:
                    01:d5:16:11:3b:9d:b8:11:22:c0:0f:19:e7:56:13:
                    c1:6a:e3:9e:12:3c:e5:a9:57:d2:4d:4f:de:58:e9:
                    f6:ec:67:fb:66:85:0c:28:11:2d:8a:b1:40:e9:c1:
                    f8:10:d4:07:fb:a7:a0:4a:f6:0c:4e:0a:40:61:47:
                    b9:41:90:c8:95:75:24:d7:4f:93:d8:fd:a1:54:65:
                    2d:8c:3e:10:81:2d:0d:41:10:02:de:83:72:61:b6:
                    02:17:f0:a5:bf:49:8b:5d:72:6b:6b:97:63:cd:28:
                    b6:6d:ae:51:23:1b:9a:61:8f:32:53:ec:46:f8:db:
                    03:aa:9e:8a:d8:88:a9:c4:57:79:48:53:d0:09:00:
                    0e:80:42:26:95:21:62:8b:f4:b2:bd:25:fd:8c:04:
                    9c:58:5e:d4:1e:49:d4:f6:27:1b:bb:16:5d:6b:64:
                    b9:38:24:75:bb:b4:b8:a4:fd:68:be:72:eb:78:94:
                    1e:4b:c6:f7:51:87:d8:3a:af:c0:3d:7e:39:98:c5:
                    15:70:e1:d2:b5:cd:3b:ee:32:32:95:44:fd:72:7a:
                    f7:42:ab:d5:b4:b6:86:4c:10:a7:34:62:23:65:67:
                    6a:25:e2:b4:68:aa:3c:6b:3a:a4:a3:c0:9a:6c:68:
                    25:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:67:EA:8B:5E:61:FF:7D:49:77:53:F2:95:68:9D:FD:F5:34:32
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3139312e362e38302e302f32322d3232203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:a3:65:91:47:14:1e:a6:bd:e4:e7:5d:dc:fc:e2:f6:9c:
         88:59:4b:18:0c:77:56:da:8d:ba:3b:e9:05:42:a5:21:a5:be:
         69:8b:ce:ae:18:56:62:c5:fd:e1:4c:ac:7a:a9:79:1e:17:02:
         97:08:27:6c:9e:cd:c8:16:56:4c:98:58:38:41:b8:e9:14:c6:
         75:66:72:04:62:5b:3c:3b:a9:79:a0:6e:23:ae:8c:8a:6f:33:
         86:04:2d:be:f7:f4:36:33:e8:40:c0:a6:c9:a3:fd:b4:dd:39:
         f2:e0:f1:9f:25:e1:ff:6b:08:82:1b:f5:38:48:c5:06:dd:52:
         f3:79:13:80:6a:70:13:11:e2:9c:95:bb:4b:6c:2c:28:ba:33:
         26:cd:c2:3a:80:45:3c:2c:36:29:03:b9:cc:07:44:ad:a6:06:
         4d:eb:f4:5f:38:97:d1:fa:81:04:99:33:51:a7:40:bd:0c:82:
         3e:20:88:64:79:9b:31:ee:6a:fa:a3:d1:32:f6:1b:42:10:58:
         24:20:93:6b:82:61:2d:e4:00:96:d2:f6:08:46:31:4d:49:68:
         60:e4:2b:8f:f9:0e:7c:7c:17:56:ae:65:4d:b6:03:b2:7d:62:
         d1:5b:3b:58:79:b6:c5:e1:63:0b:c3:c7:aa:1b:d4:3d:86:1d:
         42:e0:53:31
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUcwi6SzxKCPyOjITxb7a1OYzVgfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMjYxNTM1MzRaFw0yNTEwMjUxNTQwMzRaMDMxMTAvBgNV
BAMTKEY3QjY2N0VBOEI1RTYxRkY3RDQ5Nzc1M0YyOTU2ODlERkRGNTM0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZv+zDhw6w0WxnkzHKKgHVFhE7
nbgRIsAPGedWE8Fq454SPOWpV9JNT95Y6fbsZ/tmhQwoES2KsUDpwfgQ1Af7p6BK
9gxOCkBhR7lBkMiVdSTXT5PY/aFUZS2MPhCBLQ1BEALeg3JhtgIX8KW/SYtdcmtr
l2PNKLZtrlEjG5phjzJT7Eb42wOqnorYiKnEV3lIU9AJAA6AQiaVIWKL9LK9Jf2M
BJxYXtQeSdT2Jxu7Fl1rZLk4JHW7tLik/Wi+cut4lB5LxvdRh9g6r8A9fjmYxRVw
4dK1zTvuMjKVRP1yevdCq9W0toZMEKc0YiNlZ2ol4rRoqjxrOqSjwJpsaCVXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU97Zn6oteYf99SXdT8pVonf31NDIwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzOTMxMmUzNjJlMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMjMy
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAK/BlAwDQYJKoZIhvcNAQELBQADggEBAJs8o2WRRxQepr3k
513c/OL2nIhZSxgMd1bajbo76QVCpSGlvmmLzq4YVmLF/eFMrHqpeR4XApcIJ2ye
zcgWVkyYWDhBuOkUxnVmcgRiWzw7qXmgbiOujIpvM4YELb739DYz6EDApsmj/bTd
OfLg8Z8l4f9rCIIb9ThIxQbdUvN5E4BqcBMR4pyVu0tsLCi6MybNwjqARTwsNikD
ucwHRK2mBk3r9F84l9H6gQSZM1GnQL0Mgj4giGR5mzHuavqj0TL2G0IQWCQgk2uC
YS3kAJbS9ghGMU1JaGDkK4/5Dnx8F1auZU22A7J9YtFbO1h5tsXhYwvDx6ob1D2G
HULgUzE=
-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org