Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137342e302f32342d3234203d3e20323637343930.roa
File:                     3139322e3134312e3137342e302f32342d3234203d3e20323637343930.roa (raw, json)
Hash identifier:          KYkmjUM7ugLRa39j5CIWyi1jKK4zV5/hngh3b74ike0=
Subject key identifier:   2C:2E:CF:70:AB:79:EC:A7:0B:7A:16:AA:49:5B:EB:A2:8B:45:AD:8D
Certificate issuer:       /CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
Certificate serial:       1D50DB62336D90308266A146407BE4E3908B9D92
Authority key identifier: 43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137342e302f32342d3234203d3e20323637343930.roa
Signing time:             Sat 04 May 2024 04:52:28 +0000
ROA not before:           Sat 04 May 2024 04:47:28 +0000
ROA not after:            Sat 03 May 2025 04:52:28 +0000
asID:                     267490
IP address blocks:        192.141.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:50:db:62:33:6d:90:30:82:66:a1:46:40:7b:e4:e3:90:8b:9d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6
        Validity
            Not Before: May  4 04:47:28 2024 GMT
            Not After : May  3 04:52:28 2025 GMT
        Subject: CN=2C2ECF70AB79ECA70B7A16AA495BEBA28B45AD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:4f:77:52:12:83:11:77:5b:c7:9a:2e:3f:
                    2a:8f:31:a9:4d:d3:c0:5b:c2:ba:79:2a:1d:14:44:
                    e0:f3:ce:62:a6:2f:a8:41:df:f6:d0:2c:21:7e:ba:
                    8b:93:20:18:4b:ae:1c:cf:4d:1b:8c:49:08:94:9f:
                    1c:28:0e:e3:a0:48:7d:8e:f0:31:39:14:e1:d0:3b:
                    65:90:c7:3f:bc:66:22:76:33:a7:cd:07:25:45:fb:
                    59:b4:c0:f3:a3:30:5a:76:6e:7b:7f:93:c8:f8:b3:
                    8c:cc:70:19:a8:e7:9f:65:d6:01:b4:05:da:38:85:
                    98:b9:f7:ee:f2:82:0d:98:ff:7d:c6:0f:b5:c0:c2:
                    33:9e:70:87:40:59:37:75:50:59:de:a3:2c:32:90:
                    bf:13:57:3f:f6:f2:b8:58:19:a5:8c:7d:bc:05:1e:
                    f6:af:5e:2d:79:af:4d:e2:f3:2e:06:b3:4b:fc:f2:
                    16:b3:86:85:ed:e4:0e:54:e1:1c:42:11:20:91:d8:
                    bf:45:1f:c0:60:64:28:17:15:37:98:80:76:cc:ba:
                    1b:d1:de:cf:bc:04:24:e9:54:bb:e3:90:27:26:3f:
                    db:63:41:49:f9:d4:7f:a0:47:83:2d:bd:5c:f8:04:
                    e0:2f:7a:5e:9f:51:42:50:cd:79:b2:7d:89:3a:6d:
                    7c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2E:CF:70:AB:79:EC:A7:0B:7A:16:AA:49:5B:EB:A2:8B:45:AD:8D
            X509v3 Authority Key Identifier:
                keyid:43:BE:C3:21:D6:E1:EF:3D:FD:15:CA:67:C1:70:EC:F9:A9:44:25:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43BEC321D6E1EF3DFD15CA67C170ECF9A94425B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/3139322e3134312e3137342e302f32342d3234203d3e20323637343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:bd:41:72:f6:b6:de:1d:91:37:d2:92:59:ba:3a:e4:5a:
         3b:eb:58:67:79:a0:5d:e2:96:6d:10:6a:af:9c:60:53:52:a6:
         f1:50:5f:76:a3:c6:90:09:10:62:c7:f8:2e:34:b6:a2:d4:9f:
         d1:49:eb:7e:c0:51:bf:6d:d0:a2:78:a5:36:25:97:4d:b0:38:
         ff:d1:cc:60:f3:14:6f:ff:91:f8:6d:58:5b:38:1e:7f:64:f1:
         6b:15:50:10:28:7b:13:1f:5d:5e:73:f9:dd:e8:d1:9b:de:03:
         e4:0a:50:c0:ee:59:47:87:bc:02:34:74:8f:97:3c:8a:ed:1f:
         ca:b5:b4:fa:d8:b9:35:8f:c1:58:90:61:d2:40:32:98:a0:8c:
         96:f8:5c:4c:ce:56:0f:cc:ef:12:cd:90:ec:a4:3f:f9:34:c3:
         a0:d0:92:02:0e:9c:f0:2d:9d:50:64:a0:98:fb:7d:4a:99:d2:
         99:da:be:37:1c:81:fc:df:46:d6:6e:41:4b:b7:bb:74:bf:e3:
         3d:57:f3:64:61:fb:0e:46:98:90:f4:69:44:5f:fa:04:1f:47:
         b5:00:08:32:47:42:17:65:42:23:78:4e:f7:01:1d:57:2c:9c:
         07:ce:b6:4d:d0:b7:5d:87:0a:c3:3c:6e:c9:87:6d:43:9c:1c:
         9c:2b:7c:48
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHVDbYjNtkDCCZqFGQHvk45CLnZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNCRUMzMjFENkUxRUYzREZEMTVDQTY3QzE3MEVDRjlB
OTQ0MjVCNjAeFw0yNDA1MDQwNDQ3MjhaFw0yNTA1MDMwNDUyMjhaMDMxMTAvBgNV
BAMTKDJDMkVDRjcwQUI3OUVDQTcwQjdBMTZBQTQ5NUJFQkEyOEI0NUFEOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV6U93UhKDEXdbx5ouPyqPMalN
08Bbwrp5Kh0URODzzmKmL6hB3/bQLCF+uouTIBhLrhzPTRuMSQiUnxwoDuOgSH2O
8DE5FOHQO2WQxz+8ZiJ2M6fNByVF+1m0wPOjMFp2bnt/k8j4s4zMcBmo559l1gG0
Bdo4hZi59+7ygg2Y/33GD7XAwjOecIdAWTd1UFneoywykL8TVz/28rhYGaWMfbwF
HvavXi15r03i8y4Gs0v88hazhoXt5A5U4RxCESCR2L9FH8BgZCgXFTeYgHbMuhvR
3s+8BCTpVLvjkCcmP9tjQUn51H+gR4MtvVz4BOAvel6fUUJQzXmyfYk6bXyxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQULC7PcKt57KcLehaqSVvrootFrY0wHwYDVR0j
BBgwFoAUQ77DIdbh7z39FcpnwXDs+alEJbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RpVGVHVzVIR1h2OEV2eUxaZDFVTjl5dENiNUFDNXVIZkxlY3VvS0NT
S04vMC80M0JFQzMyMUQ2RTFFRjNERkQxNUNBNjdDMTcwRUNGOUE5NDQyNUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQzQkVDMzIxRDZFMUVGM0RG
RDE1Q0E2N0MxNzBFQ0Y5QTk0NDI1QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0aVRlR1c1SEdYdjhFdnlMWmQxVU45eXRDYjVBQzV1SGZMZWN1b0tDU0tOLzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCNrjANBgkqhkiG9w0BAQsFAAOCAQEAVQ69
QXL2tt4dkTfSklm6OuRaO+tYZ3mgXeKWbRBqr5xgU1Km8VBfdqPGkAkQYsf4LjS2
otSf0UnrfsBRv23QonilNiWXTbA4/9HMYPMUb/+R+G1YWzgef2TxaxVQECh7Ex9d
XnP53ejRm94D5ApQwO5ZR4e8AjR0j5c8iu0fyrW0+ti5NY/BWJBh0kAymKCMlvhc
TM5WD8zvEs2Q7KQ/+TTDoNCSAg6c8C2dUGSgmPt9SpnSmdq+NxyB/N9G1m5BS7e7
dL/jPVfzZGH7DkaYkPRpRF/6BB9HtQAIMkdCF2VCI3hO9wEdVyycB862TdC3XYcK
wzxuyYdtQ5wcnCt8SA==
-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:29 2024 by rpki-client on console-ams.rpki-client.org