Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137342e302f32342d3234203d3e20323730393839.roa
File:                     3138372e38362e3137342e302f32342d3234203d3e20323730393839.roa (raw, json)
Hash identifier:          azdSssc8SIAUaKijNwe4GFJviJe9Z+7IhEjuShoEOu0=
Subject key identifier:   78:C9:2A:E1:3A:ED:AE:29:AC:CB:B8:7A:68:61:A9:75:16:A4:CB:09
Certificate issuer:       /CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
Certificate serial:       2795E6D92AFEC2A03C59EEA6308128DE765B946C
Authority key identifier: BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137342e302f32342d3234203d3e20323730393839.roa
Signing time:             Fri 05 Apr 2024 03:46:43 +0000
ROA not before:           Fri 05 Apr 2024 03:41:43 +0000
ROA not after:            Fri 04 Apr 2025 03:46:43 +0000
asID:                     270989
IP address blocks:        187.86.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:95:e6:d9:2a:fe:c2:a0:3c:59:ee:a6:30:81:28:de:76:5b:94:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAA30576896DEB7FF35DA058DEC510600DCC1A99
        Validity
            Not Before: Apr  5 03:41:43 2024 GMT
            Not After : Apr  4 03:46:43 2025 GMT
        Subject: CN=78C92AE13AEDAE29ACCBB87A6861A97516A4CB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:f9:d1:5c:76:63:e4:22:fd:da:0b:dd:32:
                    36:a3:73:12:ea:5a:6e:bd:fe:c9:35:e5:17:4e:df:
                    8c:2f:e1:93:29:b8:0b:e2:b0:d4:ee:9c:89:5c:7b:
                    45:2f:e0:17:dd:06:20:65:e7:02:6a:3e:4a:e3:dc:
                    19:b3:00:6c:f2:99:08:b1:de:3d:cf:d0:77:1e:72:
                    06:46:c0:d5:c6:06:06:78:d7:db:b7:ab:3c:f4:1e:
                    03:86:38:a4:ae:a8:de:9c:3c:95:04:6e:77:5b:3a:
                    75:de:49:5f:68:08:6e:ac:a4:83:c9:18:60:05:51:
                    99:78:85:ae:3a:63:f4:34:14:ce:38:a5:15:e9:fe:
                    65:42:c8:e1:c7:9e:93:df:13:68:a7:5c:00:0a:38:
                    17:d7:19:dd:ad:29:8c:f5:0a:b7:07:63:ab:e6:10:
                    4c:44:b1:60:20:55:0b:92:cc:d4:92:74:7c:ce:c4:
                    8a:7f:d1:78:9a:07:45:06:1b:df:50:5e:c1:a9:9e:
                    45:46:76:84:84:a0:62:bc:e5:e1:f3:42:71:c3:51:
                    ac:d5:b5:b0:2a:79:57:6d:a7:a7:96:43:62:ea:6e:
                    c3:2b:e5:3b:51:80:57:6e:0e:3d:26:54:21:1e:c3:
                    be:5d:78:56:3c:53:2b:30:d8:a5:67:5a:b9:11:85:
                    7a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C9:2A:E1:3A:ED:AE:29:AC:CB:B8:7A:68:61:A9:75:16:A4:CB:09
            X509v3 Authority Key Identifier:
                keyid:BA:A3:05:76:89:6D:EB:7F:F3:5D:A0:58:DE:C5:10:60:0D:CC:1A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAA30576896DEB7FF35DA058DEC510600DCC1A99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4wo2ZEuHGGgiBBXvSVzUuonCKt7z8DfM3jhRb4595yx4/1/3138372e38362e3137342e302f32342d3234203d3e20323730393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:97:ae:fe:36:e4:93:7f:12:06:c8:16:dd:c4:64:92:51:
         81:f3:1d:b0:c2:47:fd:f9:fb:9b:d3:d5:b4:75:1f:9a:6e:08:
         6f:8f:35:7c:98:f6:07:63:8f:35:b6:36:7b:08:cf:fc:90:45:
         9c:12:16:e0:2b:e7:f2:cf:5e:6c:50:08:60:09:af:bb:49:3f:
         9a:0a:33:52:60:d1:ce:72:a7:8f:ed:f6:4f:7c:ee:9e:70:64:
         36:93:d2:01:bd:4c:44:7a:cc:1e:68:be:c2:e7:30:b8:c2:f5:
         06:ec:22:0c:81:73:12:15:68:91:e1:22:69:7e:6a:12:2e:c6:
         84:f3:7b:45:e8:56:60:98:73:70:e4:0b:95:87:af:07:58:5c:
         e2:10:35:2e:29:7c:47:51:b6:30:42:ac:11:8f:7e:eb:5f:6e:
         d7:fa:d8:6b:6f:8a:67:63:5e:39:29:ed:cc:67:da:8e:85:05:
         f8:81:e4:2b:c3:93:6f:6f:2e:cc:9b:60:01:0e:28:a4:eb:7b:
         f2:92:b9:35:68:22:70:ad:2d:3e:84:e9:d3:4e:a5:b3:eb:b4:
         a8:63:d6:db:be:0f:37:7c:7e:ba:e8:05:49:65:83:90:e4:a5:
         08:51:f4:c1:ef:e8:3e:7c:24:64:4b:b4:61:21:d9:f9:4c:7d:
         19:31:04:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ5Xm2Sr+wqA8We6mMIEo3nZblGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFBMzA1NzY4OTZERUI3RkYzNURBMDU4REVDNTEwNjAw
RENDMUE5OTAeFw0yNDA0MDUwMzQxNDNaFw0yNTA0MDQwMzQ2NDNaMDMxMTAvBgNV
BAMTKDc4QzkyQUUxM0FFREFFMjlBQ0NCQjg3QTY4NjFBOTc1MTZBNENCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbfnRXHZj5CL92gvdMjajcxLq
Wm69/sk15RdO34wv4ZMpuAvisNTunIlce0Uv4BfdBiBl5wJqPkrj3BmzAGzymQix
3j3P0HcecgZGwNXGBgZ419u3qzz0HgOGOKSuqN6cPJUEbndbOnXeSV9oCG6spIPJ
GGAFUZl4ha46Y/Q0FM44pRXp/mVCyOHHnpPfE2inXAAKOBfXGd2tKYz1CrcHY6vm
EExEsWAgVQuSzNSSdHzOxIp/0XiaB0UGG99QXsGpnkVGdoSEoGK85eHzQnHDUazV
tbAqeVdtp6eWQ2LqbsMr5TtRgFduDj0mVCEew75deFY8Uysw2KVnWrkRhXqhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeMkq4Trtrimsy7h6aGGpdRakywkwHwYDVR0j
BBgwFoAUuqMFdolt63/zXaBY3sUQYA3MGpkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHdvMlpFdUhHR2dpQkJYdlNWelV1b25DS3Q3ejhEZk0zamhSYjQ1OTV5
eDQvMS9CQUEzMDU3Njg5NkRFQjdGRjM1REEwNThERUM1MTA2MDBEQ0MxQTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBQTMwNTc2ODk2REVCN0ZG
MzVEQTA1OERFQzUxMDYwMERDQzFBOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3bzJaRXVIR0dnaUJCWHZTVnpVdW9uQ0t0N3o4RGZNM2poUmI0NTk1eXg0LzEv
MzEzODM3MmUzODM2MmUzMTM3MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzOTM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Vq4wDQYJKoZIhvcNAQELBQADggEBAIngl67+
NuSTfxIGyBbdxGSSUYHzHbDCR/35+5vT1bR1H5puCG+PNXyY9gdjjzW2NnsIz/yQ
RZwSFuAr5/LPXmxQCGAJr7tJP5oKM1Jg0c5yp4/t9k987p5wZDaT0gG9TER6zB5o
vsLnMLjC9QbsIgyBcxIVaJHhIml+ahIuxoTze0XoVmCYc3DkC5WHrwdYXOIQNS4p
fEdRtjBCrBGPfutfbtf62GtvimdjXjkp7cxn2o6FBfiB5CvDk29vLsybYAEOKKTr
e/KSuTVoInCtLT6E6dNOpbPrtKhj1tu+Dzd8frroBUllg5DkpQhR9MHv6D58JGRL
tGEh2flMfRkxBFA=
-----END CERTIFICATE-----
Generated at Mon Jul 22 23:41:14 2024 by rpki-client on console-ams.rpki-client.org