Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3232203d3e20323632343632.roa
File:                     3138312e3232342e38342e302f32322d3232203d3e20323632343632.roa (raw, json)
Hash identifier:          gx8DrdMbiOyVG84XbcNojZqFmTlREjltcC+Wif6IiK4=
Subject key identifier:   7B:14:A2:36:1A:C8:DA:B5:06:AE:E5:BE:79:91:E3:BF:3D:AC:EC:CC
Certificate issuer:       /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial:       686A846685FDB770BF72937A7D1517B8A91ABCCD
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3232203d3e20323632343632.roa
Signing time:             Wed 27 Sep 2023 23:52:40 +0000
ROA not before:           Wed 27 Sep 2023 23:47:40 +0000
ROA not after:            Wed 25 Sep 2024 23:52:40 +0000
asID:                     262462
IP address blocks:        181.224.84.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6a:84:66:85:fd:b7:70:bf:72:93:7a:7d:15:17:b8:a9:1a:bc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
        Validity
            Not Before: Sep 27 23:47:40 2023 GMT
            Not After : Sep 25 23:52:40 2024 GMT
        Subject: CN=7B14A2361AC8DAB506AEE5BE7991E3BF3DACECCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:f7:20:41:ee:f0:83:d5:ff:6b:7a:6f:00:
                    ab:d8:e5:9a:f1:e2:dd:64:59:82:35:8b:4c:e2:75:
                    8c:e1:6c:12:53:7a:2f:0e:51:ea:0e:40:e3:de:c6:
                    94:58:da:0e:f9:52:f0:2f:a9:24:6e:b2:d2:29:ea:
                    99:1e:bb:51:28:51:ec:d3:e5:84:6c:31:55:42:10:
                    62:22:8a:5c:e6:4b:0e:fb:3f:78:c3:14:62:5c:2a:
                    72:36:0b:39:0a:8a:55:de:9c:6d:b4:7d:ad:e3:84:
                    6c:ad:30:e4:14:03:3d:7a:00:d7:16:8b:fc:8c:34:
                    99:d1:23:c6:07:93:b2:08:67:fc:0c:2f:3a:0d:87:
                    a1:0c:1a:4b:39:90:f0:06:b8:d1:7e:69:f6:0e:59:
                    3a:a7:b5:1b:5e:6f:12:df:a6:6b:ae:03:4c:ec:52:
                    35:40:9e:cc:2b:6b:ea:f6:9c:23:8c:2e:9a:5a:fc:
                    8e:30:a6:39:f0:fc:24:b1:92:ff:ea:4a:ef:9e:a7:
                    74:ae:b1:3a:18:93:21:41:27:3c:16:1e:24:c9:bb:
                    b3:8d:c4:51:6c:9a:3b:f6:24:e2:70:14:33:c7:5f:
                    cc:2c:eb:ad:4a:e8:f2:a1:d2:12:8e:17:37:c1:7c:
                    40:9f:51:bd:ff:39:e0:19:f8:03:5f:78:9b:d4:88:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:14:A2:36:1A:C8:DA:B5:06:AE:E5:BE:79:91:E3:BF:3D:AC:EC:CC
            X509v3 Authority Key Identifier:
                keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3138312e3232342e38342e302f32322d3232203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:4e:5b:57:1d:d9:55:eb:ae:08:f4:66:45:93:66:34:bf:95:
         0c:2e:33:70:6c:94:38:91:d0:89:50:e6:5f:0a:6c:0a:d4:17:
         c3:d4:82:5c:fb:3f:88:18:c8:86:29:9c:51:88:92:42:d0:4e:
         c7:04:b4:bf:92:f0:26:80:92:7e:c6:00:48:8a:70:ac:aa:fe:
         fe:0d:ee:86:ca:d2:a5:aa:8e:78:72:3c:78:ef:46:f4:f4:8a:
         91:82:5c:4a:f7:63:95:39:86:b0:36:33:90:ea:1a:a4:9b:66:
         5b:3f:32:7b:9f:a9:cf:e1:b4:96:05:86:fc:a1:1b:00:77:5a:
         6b:c3:4b:17:f5:eb:4d:fb:8c:f8:a5:e5:50:9c:f6:2e:e6:51:
         2a:1a:b8:5a:54:d7:70:e0:d0:5f:de:45:6a:4a:06:0d:ff:ea:
         dc:55:a9:dc:70:bc:80:cc:b9:9f:b9:f7:ce:7b:5c:61:85:5d:
         24:ea:9c:7a:ed:5b:6c:4d:34:d5:28:30:04:8a:36:f0:19:44:
         4a:82:ae:5c:02:d0:07:33:e6:09:83:20:ad:1d:5d:71:bb:70:
         3b:67:57:fb:cd:d2:c2:60:6a:ae:53:7d:e7:f0:85:a7:f5:42:
         3b:69:e5:97:98:5f:a2:0c:b3:89:f2:26:e0:30:87:5a:f0:aa:
         86:4e:71:7a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaGqEZoX9t3C/cpN6fRUXuKkavM0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGQ0EwNDAzRTVDQTA5RTNGNUFGNEJBNjNFMkNERkRF
QkEwMDMyRDAeFw0yMzA5MjcyMzQ3NDBaFw0yNDA5MjUyMzUyNDBaMDMxMTAvBgNV
BAMTKDdCMTRBMjM2MUFDOERBQjUwNkFFRTVCRTc5OTFFM0JGM0RBQ0VDQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVovcgQe7wg9X/a3pvAKvY5Zrx
4t1kWYI1i0zidYzhbBJTei8OUeoOQOPexpRY2g75UvAvqSRustIp6pkeu1EoUezT
5YRsMVVCEGIiilzmSw77P3jDFGJcKnI2CzkKilXenG20fa3jhGytMOQUAz16ANcW
i/yMNJnRI8YHk7IIZ/wMLzoNh6EMGks5kPAGuNF+afYOWTqntRtebxLfpmuuA0zs
UjVAnswra+r2nCOMLppa/I4wpjnw/CSxkv/qSu+ep3SusToYkyFBJzwWHiTJu7ON
xFFsmjv2JOJwFDPHX8ws661K6PKh0hKOFzfBfECfUb3/OeAZ+ANfeJvUiHGZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUexSiNhrI2rUGruW+eZHjvz2s7MwwHwYDVR0j
BBgwFoAULfygQD5coJ4/WvS6Y+LN/eugAy0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMC8yREZDQTA0MDNFNUNBMDlFM0Y1QUY0QkE2M0UyQ0RGREVCQTAwMzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERkNBMDQwM0U1Q0EwOUUz
RjVBRjRCQTYzRTJDREZERUJBMDAzMkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRab0hNc1JEQTJHTUI0U1VSZHJpOWNvRm5QQlFCRzVlaWhLWWdoRm1iblU0LzAv
MzEzODMxMmUzMjMyMzQyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK14FQwDQYJKoZIhvcNAQELBQADggEBAClOW1cd
2VXrrgj0ZkWTZjS/lQwuM3BslDiR0IlQ5l8KbArUF8PUglz7P4gYyIYpnFGIkkLQ
TscEtL+S8CaAkn7GAEiKcKyq/v4N7obK0qWqjnhyPHjvRvT0ipGCXEr3Y5U5hrA2
M5DqGqSbZls/Mnufqc/htJYFhvyhGwB3WmvDSxf16037jPil5VCc9i7mUSoauFpU
13Dg0F/eRWpKBg3/6txVqdxwvIDMuZ+59857XGGFXSTqnHrtW2xNNNUoMASKNvAZ
REqCrlwC0Acz5gmDIK0dXXG7cDtnV/vN0sJgaq5Tfefwhaf1Qjtp5ZeYX6IMs4ny
JuAwh1rwqoZOcXo=
-----END CERTIFICATE-----
Generated at Sat Feb 10 01:22:07 2024 by rpki-client on console-fra.rpki-client.org