Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa
File:                     3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          IB4P1xl6aP6tl/mtIoi+AN+/xGl3aacj/vHg54BqXu8=
Subject key identifier:   E5:B0:E3:5A:88:DE:E2:06:57:9F:A1:7F:BF:94:3D:DE:52:3A:19:91
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       3D9C5E167FF7BC28FED2480C126C2F7D3710C303
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:44 +0000
ROA not before:           Thu 19 Sep 2024 14:06:44 +0000
ROA not after:            Thu 18 Sep 2025 14:11:44 +0000
asID:                     262494
IP address blocks:        170.82.124.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9c:5e:16:7f:f7:bc:28:fe:d2:48:0c:12:6c:2f:7d:37:10:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:44 2024 GMT
            Not After : Sep 18 14:11:44 2025 GMT
        Subject: CN=E5B0E35A88DEE206579FA17FBF943DDE523A1991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:30:b5:96:e9:be:5c:74:f4:ab:c6:16:4f:
                    6a:3d:1d:42:4c:e0:13:91:19:47:b5:21:f0:22:d0:
                    c7:9a:5f:08:8c:fd:03:98:e9:15:71:2d:5f:e8:94:
                    03:00:df:bc:ac:e9:60:74:5e:58:41:1a:b0:46:b4:
                    16:5e:a2:4b:66:41:4b:fc:52:31:7c:75:ff:fa:94:
                    95:d2:5f:ea:fe:68:f6:f7:96:3e:4c:48:d6:99:21:
                    71:a3:2a:4b:b1:a6:6d:97:f7:20:45:87:dc:2b:6b:
                    04:05:fc:0f:c0:41:67:e0:75:a2:79:46:57:ec:f6:
                    cc:b9:c7:e5:ea:ae:bd:99:04:21:bd:da:9e:84:96:
                    35:75:dc:7b:f9:f6:c4:b2:83:12:49:e5:b1:fb:ab:
                    3e:d4:77:0d:b6:a4:55:52:f8:70:28:2a:fa:00:44:
                    be:7a:42:77:0c:fc:b4:68:05:0c:93:bb:d9:8b:7b:
                    60:ed:27:50:92:ed:f4:2c:de:69:da:ee:87:5a:50:
                    6c:ae:f9:9f:ac:34:9c:8b:3e:f9:b5:ca:ff:42:df:
                    f6:43:1a:b1:be:90:0e:1b:da:ef:17:09:33:8d:d9:
                    bf:8b:ad:d7:e2:0a:a2:f9:d7:7f:77:67:d9:1a:eb:
                    11:b6:72:43:33:c2:0e:d4:c6:61:79:52:d1:fb:04:
                    5f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:E3:5A:88:DE:E2:06:57:9F:A1:7F:BF:94:3D:DE:52:3A:19:91
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3137302e38322e3132342e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:a9:cc:77:6c:d3:7a:ac:35:16:e8:63:a3:9d:c8:42:c2:
         34:6a:48:ce:be:94:1e:55:74:b4:ae:cb:ae:a1:97:76:79:79:
         12:9b:8b:fb:96:69:c4:02:69:d5:84:52:28:7c:5d:ac:f5:94:
         d1:95:c6:f3:28:5e:c7:e5:24:71:e2:bc:50:f4:d1:e5:ff:f2:
         a2:d1:e5:31:a8:eb:71:45:c2:12:b6:8f:19:b2:d2:c8:eb:b9:
         69:1e:33:f3:54:87:59:17:e1:3a:7f:5f:58:45:33:7d:3a:3e:
         56:68:4c:e2:b4:fe:31:34:7f:4e:20:a5:77:4a:b1:d2:6f:b8:
         c9:05:57:73:2b:07:e4:b4:56:46:22:df:d1:3a:7a:a7:08:cd:
         12:11:fe:0d:0c:a7:5b:0c:0a:24:cc:8f:c2:69:68:6a:c6:76:
         c4:8d:d1:e6:6d:bc:26:89:d1:ab:fc:61:26:5c:9d:c3:fd:21:
         86:3e:b3:4e:6f:e1:d6:e9:2f:0b:79:12:78:09:69:e6:73:87:
         6d:1b:fe:3e:3e:f7:c6:9b:58:1c:dd:82:ba:c0:36:2e:2f:5f:
         83:23:37:0e:d1:0d:fb:ee:f7:f3:cb:b6:c1:2c:8f:5f:30:1a:
         1f:65:62:38:65:8e:4b:e2:03:8b:ca:13:6d:40:1e:8f:e2:64:
         38:44:4e:a3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPZxeFn/3vCj+0kgMEmwvfTcQwwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NDRaFw0yNTA5MTgxNDExNDRaMDMxMTAvBgNV
BAMTKEU1QjBFMzVBODhERUUyMDY1NzlGQTE3RkJGOTQzRERFNTIzQTE5OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+zC1lum+XHT0q8YWT2o9HUJM
4BORGUe1IfAi0MeaXwiM/QOY6RVxLV/olAMA37ys6WB0XlhBGrBGtBZeoktmQUv8
UjF8df/6lJXSX+r+aPb3lj5MSNaZIXGjKkuxpm2X9yBFh9wrawQF/A/AQWfgdaJ5
Rlfs9sy5x+Xqrr2ZBCG92p6EljV13Hv59sSygxJJ5bH7qz7Udw22pFVS+HAoKvoA
RL56QncM/LRoBQyTu9mLe2DtJ1CS7fQs3mna7odaUGyu+Z+sNJyLPvm1yv9C3/ZD
GrG+kA4b2u8XCTON2b+LrdfiCqL51393Z9ka6xG2ckMzwg7UxmF5UtH7BF/HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5bDjWoje4gZXn6F/v5Q93lI6GZEwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzEzNzMwMmUzODMyMmUzMTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUnwwDQYJKoZIhvcNAQELBQADggEBAJ7+qcx3
bNN6rDUW6GOjnchCwjRqSM6+lB5VdLSuy66hl3Z5eRKbi/uWacQCadWEUih8Xaz1
lNGVxvMoXsflJHHivFD00eX/8qLR5TGo63FFwhK2jxmy0sjruWkeM/NUh1kX4Tp/
X1hFM306PlZoTOK0/jE0f04gpXdKsdJvuMkFV3MrB+S0VkYi39E6eqcIzRIR/g0M
p1sMCiTMj8JpaGrGdsSN0eZtvCaJ0av8YSZcncP9IYY+s05v4dbpLwt5EngJaeZz
h20b/j4+98abWBzdgrrANi4vX4MjNw7RDfvu9/PLtsEsj18wGh9lYjhljkviA4vK
E21AHo/iZDhETqM=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:33 2024 by rpki-client on console-fra.rpki-client.org