Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa
File:                     3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier:          eBqyfM44qtxC0rAorTVIyircZ62CS8ofT2moz1pXu+s=
Subject key identifier:   64:BB:C6:2B:3F:05:2E:EB:94:DD:32:DE:AD:38:7F:B2:3C:87:67:3D
Certificate issuer:       /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial:       271B095CBCD0491C68866F0EB3CA5BA874AC96AB
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa
Signing time:             Fri 05 Apr 2024 01:07:59 +0000
ROA not before:           Fri 05 Apr 2024 01:02:59 +0000
ROA not after:            Fri 04 Apr 2025 01:07:59 +0000
asID:                     262769
IP address blocks:        168.181.156.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1b:09:5c:bc:d0:49:1c:68:86:6f:0e:b3:ca:5b:a8:74:ac:96:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
        Validity
            Not Before: Apr  5 01:02:59 2024 GMT
            Not After : Apr  4 01:07:59 2025 GMT
        Subject: CN=64BBC62B3F052EEB94DD32DEAD387FB23C87673D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:33:33:6c:a9:e5:b9:7f:14:84:45:29:bb:
                    59:93:39:9d:16:53:65:57:4a:df:7e:d4:2d:64:e2:
                    ef:fb:e7:dc:25:30:3c:75:d1:3a:3e:01:e4:ab:fa:
                    34:6f:07:30:05:19:73:d0:54:0b:fe:15:19:0e:40:
                    1b:9c:72:6f:26:0f:f3:8d:13:f6:e7:21:d2:cc:2f:
                    6c:9f:08:a5:61:af:ca:5b:84:ce:2f:99:78:11:2e:
                    b7:c3:92:20:de:bf:c9:fe:04:00:97:c0:09:dd:31:
                    8b:b0:a7:c4:9d:33:fd:d9:07:bd:95:fe:f7:af:4a:
                    82:c2:0b:40:23:83:26:70:a9:cc:f8:42:00:68:16:
                    08:e6:57:f4:2e:4b:0e:40:72:ab:02:46:26:9d:12:
                    0d:97:37:0e:84:23:05:76:d8:da:f1:69:47:64:cc:
                    5a:f3:d1:28:e6:d4:bd:73:27:ff:3e:14:c1:f3:e4:
                    8f:e6:4f:33:80:9b:b6:86:27:cd:f9:1f:91:13:dc:
                    3f:dd:c4:35:d3:e3:75:1a:01:11:81:e5:c4:ed:02:
                    c6:3e:87:28:97:7e:61:8d:4b:cc:e7:f4:42:aa:6a:
                    a5:0f:c4:75:21:15:8b:dc:d9:7a:85:c8:f2:e6:88:
                    97:50:88:98:bd:f6:2b:c2:26:cb:56:a7:d5:78:9d:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BB:C6:2B:3F:05:2E:EB:94:DD:32:DE:AD:38:7F:B2:3C:87:67:3D
            X509v3 Authority Key Identifier:
                keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3136382e3138312e3135362e302f32322d3234203d3e20323632373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:8a:9e:ea:a8:17:8a:7f:ad:eb:2d:f6:3b:57:d9:69:9e:ed:
         f6:a2:07:df:e0:18:8b:34:10:23:2f:ae:b9:da:dc:35:07:cd:
         b4:d2:8a:90:35:40:39:5b:70:1c:4d:01:57:3e:32:ec:4c:4a:
         3b:6f:d5:b0:46:10:4a:de:6e:0f:62:ed:2a:75:ea:4a:a4:8c:
         40:2a:86:24:90:7c:ed:2c:89:57:36:1c:6a:0d:26:81:cb:0d:
         07:9b:91:a3:74:eb:a9:ec:8a:d9:62:ed:53:47:ef:23:d7:00:
         25:bc:0b:52:f5:0f:19:27:99:88:18:f6:72:ac:5c:7d:94:4f:
         75:26:8b:d8:56:cf:87:6a:28:f2:7e:cd:d7:c0:d1:e5:b8:2f:
         e1:d4:27:ce:cc:5d:6c:4d:23:28:fc:09:a5:15:62:18:ca:00:
         4a:82:5a:1a:e0:d8:2e:33:fc:35:f7:be:be:d6:4a:f0:41:b7:
         69:ef:4f:6b:95:5e:69:5e:18:41:48:e8:61:7c:85:6a:a5:73:
         43:1e:8b:02:c9:26:9a:57:48:f7:8e:6f:3b:91:b5:4f:3f:95:
         82:f9:dc:6b:60:05:6c:dc:d0:e0:3d:f1:7f:77:40:72:94:da:
         02:d3:fa:9e:df:1c:22:fb:19:d8:b4:24:90:ff:59:53:c1:51:
         ab:b7:3b:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJxsJXLzQSRxohm8Os8pbqHSslqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJENkRCNDg4OUFBQjYxQ0YyMzk0QkY2NjJFMUU0OTA3
OTVBNEVFRDAeFw0yNDA0MDUwMTAyNTlaFw0yNTA0MDQwMTA3NTlaMDMxMTAvBgNV
BAMTKDY0QkJDNjJCM0YwNTJFRUI5NEREMzJERUFEMzg3RkIyM0M4NzY3M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqTMzbKnluX8UhEUpu1mTOZ0W
U2VXSt9+1C1k4u/759wlMDx10To+AeSr+jRvBzAFGXPQVAv+FRkOQBuccm8mD/ON
E/bnIdLML2yfCKVhr8pbhM4vmXgRLrfDkiDev8n+BACXwAndMYuwp8SdM/3ZB72V
/vevSoLCC0AjgyZwqcz4QgBoFgjmV/QuSw5AcqsCRiadEg2XNw6EIwV22NrxaUdk
zFrz0Sjm1L1zJ/8+FMHz5I/mTzOAm7aGJ835H5ET3D/dxDXT43UaARGB5cTtAsY+
hyiXfmGNS8zn9EKqaqUPxHUhFYvc2XqFyPLmiJdQiJi99ivCJstWp9V4nZSnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZLvGKz8FLuuU3TLerTh/sjyHZz0wHwYDVR0j
BBgwFoAUwtbbSImqthzyOUv2YuHkkHlaTu0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFyeVhxUDlYcTRDVFJxNFMydkdIWWZwQmFkUEJ6dDhScTJNVEN5NGRW
S3QvMS9DMkQ2REI0ODg5QUFCNjFDRjIzOTRCRjY2MkUxRTQ5MDc5NUE0RUVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyRDZEQjQ4ODlBQUI2MUNG
MjM5NEJGNjYyRTFFNDkwNzk1QTRFRUQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRcnlYcVA5WHE0Q1RScTRTMnZHSFlmcEJhZFBCenQ4UnEyTVRDeTRkVkt0LzEv
MzEzNjM4MmUzMTM4MzEyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1nDANBgkqhkiG9w0BAQsFAAOCAQEAPIqe
6qgXin+t6y32O1fZaZ7t9qIH3+AYizQQIy+uudrcNQfNtNKKkDVAOVtwHE0BVz4y
7ExKO2/VsEYQSt5uD2LtKnXqSqSMQCqGJJB87SyJVzYcag0mgcsNB5uRo3TrqeyK
2WLtU0fvI9cAJbwLUvUPGSeZiBj2cqxcfZRPdSaL2FbPh2oo8n7N18DR5bgv4dQn
zsxdbE0jKPwJpRViGMoASoJaGuDYLjP8Nfe+vtZK8EG3ae9Pa5VeaV4YQUjoYXyF
aqVzQx6LAskmmldI945vO5G1Tz+Vgvnca2AFbNzQ4D3xf3dAcpTaAtP6nt8cIvsZ
2LQkkP9ZU8FRq7c7oA==
-----END CERTIFICATE-----
Generated at Mon Oct 7 06:38:32 2024 by rpki-client on console-ams.rpki-client.org