Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/3133312e3139362e36342e302f32322d3332203d3e20323635393736.roa
File:                     3133312e3139362e36342e302f32322d3332203d3e20323635393736.roa (raw, json)
Hash identifier:          1FNro1Kmb+MNt8erdCOUPP6PL/W3FYvehI+t5yRIpIY=
Subject key identifier:   DB:86:FC:EB:A3:02:DD:7A:4A:BD:21:F9:1A:01:64:0F:09:E3:5D:62
Certificate issuer:       /CN=396B69C2F78EDA252C6FEFB8E1800122D42E4F96
Certificate serial:       53E6A506D3D7AFF9832749AA42DA72DFB55722B0
Authority key identifier: 39:6B:69:C2:F7:8E:DA:25:2C:6F:EF:B8:E1:80:01:22:D4:2E:4F:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/3133312e3139362e36342e302f32322d3332203d3e20323635393736.roa
Signing time:             Mon 18 Nov 2024 18:18:17 +0000
ROA not before:           Mon 18 Nov 2024 18:13:17 +0000
ROA not after:            Mon 17 Nov 2025 18:18:17 +0000
asID:                     265976
IP address blocks:        131.196.64.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e6:a5:06:d3:d7:af:f9:83:27:49:aa:42:da:72:df:b5:57:22:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396B69C2F78EDA252C6FEFB8E1800122D42E4F96
        Validity
            Not Before: Nov 18 18:13:17 2024 GMT
            Not After : Nov 17 18:18:17 2025 GMT
        Subject: CN=DB86FCEBA302DD7A4ABD21F91A01640F09E35D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:41:69:33:29:f4:8d:60:20:58:0c:5d:53:
                    4a:89:46:cc:f5:ce:c1:b1:5a:ee:1f:5d:c8:6c:1f:
                    2e:09:29:ed:dd:51:91:86:e2:62:19:46:7d:a6:74:
                    df:26:e0:53:52:3b:c0:e8:a9:67:47:52:a6:e0:ed:
                    c7:7d:6f:6e:6c:79:80:ef:b5:ed:26:3d:17:40:b8:
                    c8:22:86:c8:65:66:b9:3e:f3:9c:52:58:28:58:db:
                    c4:c1:07:e4:aa:e3:4b:d3:87:fd:99:aa:34:cd:bb:
                    f0:d7:61:a2:88:7f:cd:2d:29:de:ab:8a:89:a8:67:
                    e1:1d:11:e1:36:68:5b:86:82:69:8a:f3:5b:8f:87:
                    65:9f:dd:5f:9f:08:5a:d1:3e:89:d7:33:8b:48:fd:
                    71:38:ec:e4:8c:21:92:eb:d3:7a:96:6f:db:21:7b:
                    a5:81:7e:9d:af:e5:f5:04:52:49:65:ef:38:5d:20:
                    e6:ab:6f:69:7b:03:e7:43:a4:c2:69:a5:ba:66:eb:
                    24:34:70:96:0b:81:2a:0a:15:1e:30:64:64:93:81:
                    b1:e1:36:2d:34:fb:ca:4d:af:6d:70:c0:2d:fb:ad:
                    ac:d9:0e:25:93:cd:c7:c9:a1:40:fb:a3:45:b7:7f:
                    2b:2c:e9:de:00:65:03:bb:c6:d0:4d:ca:f2:5d:c1:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:86:FC:EB:A3:02:DD:7A:4A:BD:21:F9:1A:01:64:0F:09:E3:5D:62
            X509v3 Authority Key Identifier:
                keyid:39:6B:69:C2:F7:8E:DA:25:2C:6F:EF:B8:E1:80:01:22:D4:2E:4F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/396B69C2F78EDA252C6FEFB8E1800122D42E4F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4DVgzb6EpXzPwtar7S8LJxGDGUXicDi16hVBbgWpv5oC/0/3133312e3139362e36342e302f32322d3332203d3e20323635393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:a3:44:24:0d:2e:5e:dc:3d:bd:6a:2d:53:31:c8:10:af:
         c2:79:79:9b:da:cc:73:f2:a5:ad:83:48:cb:f6:f8:79:30:2b:
         d9:92:d2:f2:f9:23:2e:0f:d7:b7:d9:04:2b:5b:52:ea:53:dd:
         d3:bc:35:77:f2:2f:02:9c:cf:27:e2:ba:54:c5:f7:53:ea:0a:
         0c:42:94:ac:3d:6c:8e:ba:d8:56:b4:49:6a:c7:34:e7:4a:9f:
         2d:7c:99:00:fd:5f:94:7f:c5:72:7c:dd:cf:38:ba:e7:81:14:
         f2:f6:fb:a3:83:b6:fe:6e:bf:07:c0:ca:5d:ab:1d:27:78:78:
         64:26:66:ba:fa:c7:1b:91:93:c0:59:22:39:bc:96:32:da:47:
         62:e0:a4:90:28:e4:b7:c2:79:30:a5:bb:f0:09:a7:49:ff:54:
         e7:19:45:bf:7b:54:55:bc:c5:b1:79:fe:36:36:a2:6c:be:e1:
         48:96:e5:19:14:3c:b2:31:59:14:d2:b1:bb:50:28:10:4e:65:
         42:a2:d2:bb:9b:1f:60:fd:da:f2:ea:72:f1:6e:25:9f:0f:82:
         a3:c5:b3:18:ec:3c:aa:37:04:d9:f7:63:0c:58:38:bf:42:8e:
         81:19:ad:23:a2:e3:73:dd:e5:99:53:18:1e:d4:59:26:22:9e:
         3b:c0:e2:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU+alBtPXr/mDJ0mqQtpy37VXIrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk2QjY5QzJGNzhFREEyNTJDNkZFRkI4RTE4MDAxMjJE
NDJFNEY5NjAeFw0yNDExMTgxODEzMTdaFw0yNTExMTcxODE4MTdaMDMxMTAvBgNV
BAMTKERCODZGQ0VCQTMwMkREN0E0QUJEMjFGOTFBMDE2NDBGMDlFMzVENjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfkFpMyn0jWAgWAxdU0qJRsz1
zsGxWu4fXchsHy4JKe3dUZGG4mIZRn2mdN8m4FNSO8DoqWdHUqbg7cd9b25seYDv
te0mPRdAuMgihshlZrk+85xSWChY28TBB+Sq40vTh/2ZqjTNu/DXYaKIf80tKd6r
iomoZ+EdEeE2aFuGgmmK81uPh2Wf3V+fCFrRPonXM4tI/XE47OSMIZLr03qWb9sh
e6WBfp2v5fUEUkll7zhdIOarb2l7A+dDpMJppbpm6yQ0cJYLgSoKFR4wZGSTgbHh
Ni00+8pNr21wwC37razZDiWTzcfJoUD7o0W3fyss6d4AZQO7xtBNyvJdwUivAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU24b866MC3XpKvSH5GgFkDwnjXWIwHwYDVR0j
BBgwFoAUOWtpwveO2iUsb++44YABItQuT5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNERWZ3piNkVwWHpQd3RhcjdTOExKeEdER1VYaWNEaTE2aFZCYmdXcHY1
b0MvMC8zOTZCNjlDMkY3OEVEQTI1MkM2RkVGQjhFMTgwMDEyMkQ0MkU0Rjk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM5NkI2OUMyRjc4RURBMjUy
QzZGRUZCOEUxODAwMTIyRDQyRTRGOTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzREVmd6YjZFcFh6UHd0YXI3UzhMSnhHREdVWGljRGkxNmhWQmJnV3B2NW9DLzAv
MzEzMzMxMmUzMTM5MzYyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzOTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKDxEAwDQYJKoZIhvcNAQELBQADggEBABH6o0Qk
DS5e3D29ai1TMcgQr8J5eZvazHPypa2DSMv2+HkwK9mS0vL5Iy4P17fZBCtbUupT
3dO8NXfyLwKczyfiulTF91PqCgxClKw9bI662Fa0SWrHNOdKny18mQD9X5R/xXJ8
3c84uueBFPL2+6ODtv5uvwfAyl2rHSd4eGQmZrr6xxuRk8BZIjm8ljLaR2LgpJAo
5LfCeTClu/AJp0n/VOcZRb97VFW8xbF5/jY2omy+4UiW5RkUPLIxWRTSsbtQKBBO
ZUKi0rubH2D92vLqcvFuJZ8PgqPFsxjsPKo3BNn3YwxYOL9CjoEZrSOi43Pd5ZlT
GB7UWSYinjvA4hA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:46:41 2024 by rpki-client on console-fra.rpki-client.org