Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier:          OuG2LCgJvn3X/kPzoxEDCz9jzhKBGwocdImi8YYC8ME=
Subject key identifier:   1A:C3:A8:64:25:7F:38:E1:51:BA:D8:03:72:58:91:B9:BC:8B:FF:FA
Certificate issuer:       /CN=06A6703BF770768B2EF441F46345E46D1CF107A6
Certificate serial:       1611621E9E1D754CF90323EE497F44B5DF29C06C
Authority key identifier: 06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
Signing time:             Mon 12 Aug 2024 20:06:53 +0000
ROA not before:           Mon 12 Aug 2024 20:01:53 +0000
ROA not after:            Mon 11 Aug 2025 20:06:53 +0000
asID:                     28360
IP address blocks:        189.76.224.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:62:1e:9e:1d:75:4c:f9:03:23:ee:49:7f:44:b5:df:29:c0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A6703BF770768B2EF441F46345E46D1CF107A6
        Validity
            Not Before: Aug 12 20:01:53 2024 GMT
            Not After : Aug 11 20:06:53 2025 GMT
        Subject: CN=1AC3A864257F38E151BAD803725891B9BC8BFFFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:b0:35:96:41:b2:b5:c3:56:43:ab:31:82:
                    78:de:5b:fe:b1:a5:70:13:39:71:4b:2d:5f:f4:3f:
                    0e:a5:1e:83:09:ec:87:58:52:fb:cc:ea:53:85:14:
                    10:e9:aa:36:96:96:28:f3:04:fb:87:89:19:7f:b5:
                    c4:c3:66:67:eb:a1:d5:d0:80:16:da:f0:c6:e6:5b:
                    42:15:ac:7a:08:60:2f:a4:7d:16:04:fe:5e:d7:46:
                    5d:a2:ea:35:bb:b3:ae:e8:d3:ab:19:9d:d1:2a:3f:
                    2e:96:12:05:6c:59:10:79:4e:c6:43:d2:2f:74:4f:
                    76:81:8d:9d:7e:5f:cd:17:d7:ce:de:db:64:b5:22:
                    ea:44:f3:9b:ff:c7:bf:6d:0d:dd:81:82:f3:91:d6:
                    b7:c7:84:fb:0d:80:5d:05:29:43:70:ba:10:a6:8d:
                    ef:69:e6:bf:13:c7:ae:45:5b:da:85:b2:e4:3d:c6:
                    a9:ba:30:cd:c4:38:61:cc:8f:63:62:01:f1:bb:03:
                    9a:96:f8:75:45:11:87:8c:b2:16:93:ef:5b:5a:d0:
                    d9:c8:ff:bf:4a:83:cf:da:2f:bd:87:32:ca:5d:d3:
                    37:d6:df:c8:10:9d:fd:ee:c3:04:44:f0:63:53:e2:
                    b5:e5:37:b6:2c:26:14:29:27:ae:34:3b:46:13:c7:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:A8:64:25:7F:38:E1:51:BA:D8:03:72:58:91:B9:BC:8B:FF:FA
            X509v3 Authority Key Identifier:
                keyid:06:A6:70:3B:F7:70:76:8B:2E:F4:41:F4:63:45:E4:6D:1C:F1:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/06A6703BF770768B2EF441F46345E46D1CF107A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06A6703BF770768B2EF441F46345E46D1CF107A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:84:ba:31:5f:29:01:a7:2b:cc:90:44:5c:df:fe:4c:f9:78:
         42:25:ac:86:70:c3:18:14:bd:03:7d:ad:d2:be:0b:43:54:16:
         9e:11:ef:70:ec:90:19:1e:d4:ca:11:c5:87:d0:5b:8f:84:52:
         62:f3:65:48:f5:b1:6a:f1:52:65:40:7b:bf:2a:a2:95:26:7a:
         42:57:48:1c:3c:14:f4:cf:7c:91:c8:b8:8c:36:55:71:5a:51:
         d6:01:d0:85:af:05:57:fa:ab:1b:c5:ae:5f:29:eb:f7:53:78:
         b1:b0:54:25:28:c8:41:eb:40:75:ca:05:c7:72:1b:c5:12:53:
         c0:bd:b8:1a:d0:8c:28:68:0e:66:4c:80:b3:e5:ee:93:d6:9f:
         83:66:e1:c2:02:37:3c:65:c0:6b:f5:b9:80:96:62:d2:9a:9b:
         df:c7:74:66:c5:a4:98:0c:b5:57:5e:ba:9e:bc:db:07:90:0b:
         4d:ea:bf:db:4f:ad:ee:e0:2a:93:d1:09:f0:b1:d4:7a:0f:5f:
         f2:fc:ca:24:a5:e0:68:64:f5:b6:8d:56:af:7d:d4:5b:e1:47:
         df:f2:af:df:38:14:9e:28:d5:d9:8a:b2:41:34:62:ae:4c:d0:
         1a:fc:59:e8:65:ee:ab:9e:9e:f3:a7:a2:e9:c8:68:de:16:9f:
         ff:e5:36:a6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFhFiHp4ddUz5AyPuSX9Etd8pwGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZBNjcwM0JGNzcwNzY4QjJFRjQ0MUY0NjM0NUU0NkQx
Q0YxMDdBNjAeFw0yNDA4MTIyMDAxNTNaFw0yNTA4MTEyMDA2NTNaMDMxMTAvBgNV
BAMTKDFBQzNBODY0MjU3RjM4RTE1MUJBRDgwMzcyNTg5MUI5QkM4QkZGRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC047A1lkGytcNWQ6sxgnjeW/6x
pXATOXFLLV/0Pw6lHoMJ7IdYUvvM6lOFFBDpqjaWlijzBPuHiRl/tcTDZmfrodXQ
gBba8MbmW0IVrHoIYC+kfRYE/l7XRl2i6jW7s67o06sZndEqPy6WEgVsWRB5TsZD
0i90T3aBjZ1+X80X187e22S1IupE85v/x79tDd2BgvOR1rfHhPsNgF0FKUNwuhCm
je9p5r8Tx65FW9qFsuQ9xqm6MM3EOGHMj2NiAfG7A5qW+HVFEYeMshaT71ta0NnI
/79Kg8/aL72HMspd0zfW38gQnf3uwwRE8GNT4rXlN7YsJhQpJ640O0YTxw05AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGsOoZCV/OOFRutgDcliRubyL//owHwYDVR0j
BBgwFoAUBqZwO/dwdosu9EH0Y0XkbRzxB6YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8wNkE2NzAzQkY3NzA3NjhCMkVGNDQxRjQ2MzQ1RTQ2RDFDRjEwN0E2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2QTY3MDNCRjc3MDc2OEIy
RUY0NDFGNDYzNDVFNDZEMUNGMTA3QTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzODM5MmUzNzM2MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzMzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvUzgMA0GCSqGSIb3DQEBCwUAA4IBAQB4hLoxXykB
pyvMkERc3/5M+XhCJayGcMMYFL0Dfa3SvgtDVBaeEe9w7JAZHtTKEcWH0FuPhFJi
82VI9bFq8VJlQHu/KqKVJnpCV0gcPBT0z3yRyLiMNlVxWlHWAdCFrwVX+qsbxa5f
Kev3U3ixsFQlKMhB60B1ygXHchvFElPAvbga0IwoaA5mTICz5e6T1p+DZuHCAjc8
ZcBr9bmAlmLSmpvfx3RmxaSYDLVXXrqevNsHkAtN6r/bT63u4CqT0QnwsdR6D1/y
/MokpeBoZPW2jVavfdRb4Uff8q/fOBSeKNXZirJBNGKuTNAa/FnoZe6rnp7zp6Lp
yGjeFp//5Tam
-----END CERTIFICATE-----
Generated at Thu Aug 22 09:45:28 2024 by rpki-client on console-ams.rpki-client.org