Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131342e302f32332d3233203d3e203532393332.roa
File:                     3137372e3138352e3131342e302f32332d3233203d3e203532393332.roa (raw, json)
Hash identifier:          Z0djwefqJor69j8L0sw0kRpKtj7cBW/5EP4M4N1y7qs=
Subject key identifier:   2A:BD:E6:6F:B7:73:B0:77:2B:93:6B:88:18:33:F0:B2:71:56:A5:61
Certificate issuer:       /CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
Certificate serial:       550B0088BF7CDAC21F4F6EDBF881B343749973C3
Authority key identifier: EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131342e302f32332d3233203d3e203532393332.roa
Signing time:             Wed 08 May 2024 18:20:58 +0000
ROA not before:           Wed 08 May 2024 18:15:58 +0000
ROA not after:            Wed 07 May 2025 18:20:58 +0000
asID:                     52932
IP address blocks:        177.185.114.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0b:00:88:bf:7c:da:c2:1f:4f:6e:db:f8:81:b3:43:74:99:73:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C
        Validity
            Not Before: May  8 18:15:58 2024 GMT
            Not After : May  7 18:20:58 2025 GMT
        Subject: CN=2ABDE66FB773B0772B936B881833F0B27156A561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:c2:4e:b9:69:f2:7d:79:77:ce:eb:30:8b:
                    e1:cb:3a:5a:1b:69:88:8b:a5:f3:a5:19:8b:ca:01:
                    e0:66:fa:86:63:26:11:48:6e:49:87:5c:f4:76:f9:
                    6f:18:e8:88:9a:69:2e:f2:9d:5a:69:7b:6a:68:4a:
                    da:c2:a2:28:ba:29:61:9b:ed:66:6a:e0:c2:a1:a3:
                    09:36:d7:f5:d2:26:81:e5:f6:50:a6:a2:71:16:3c:
                    4c:0e:b0:23:95:86:6e:2b:80:de:01:91:25:fe:3c:
                    11:bd:81:10:b1:ce:bc:8e:62:f5:66:2b:6d:9a:6a:
                    b6:af:a9:d8:84:f3:47:a8:47:1f:53:75:52:8a:4d:
                    67:e6:bb:f4:82:12:12:5f:e3:f6:3d:57:45:dc:26:
                    4c:d4:eb:fb:23:af:8a:55:10:2d:e3:89:4a:99:9e:
                    e3:f6:49:11:84:aa:ef:e5:7f:ba:d0:12:53:ea:31:
                    73:96:c0:88:f1:18:03:a3:7d:8a:40:ae:04:d9:d5:
                    b2:d7:ef:af:56:d7:0d:84:be:19:93:94:c8:69:53:
                    39:ac:84:ae:c9:99:58:af:0a:9d:6c:5e:6b:04:0f:
                    c5:18:1b:97:be:47:fa:44:0a:8e:96:33:64:87:f7:
                    75:24:37:a8:63:31:7f:28:60:60:46:be:e2:f5:74:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:E6:6F:B7:73:B0:77:2B:93:6B:88:18:33:F0:B2:71:56:A5:61
            X509v3 Authority Key Identifier:
                keyid:EA:6A:D2:F5:F5:BC:E7:E9:DC:FF:7F:3C:3E:EC:4B:E0:12:0E:1C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA6AD2F5F5BCE7E9DCFF7F3C3EEC4BE0120E1C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/0/3137372e3138352e3131342e302f32332d3233203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.185.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:4b:f7:7a:a7:bc:8d:3a:c1:5e:2b:4b:04:71:df:11:9e:
         75:84:fa:9f:a3:3c:80:11:e9:d2:cc:2b:5f:10:6a:f7:da:56:
         d4:ae:93:c2:3e:cf:41:92:d6:97:84:30:5a:00:5e:c3:28:33:
         ad:fb:41:8c:82:2d:24:4b:75:a3:f9:74:a9:f2:82:ee:24:d3:
         91:3a:c0:0b:e4:1b:bf:e4:54:31:f8:bd:36:7f:75:2c:fa:c0:
         9b:e9:49:f4:7f:36:82:14:89:75:5a:ce:b1:ea:d8:e0:37:42:
         6c:e4:02:f0:2e:f0:b2:27:08:a1:f9:38:04:f5:bc:06:3c:90:
         23:b6:0b:40:b6:77:30:fd:61:3c:09:77:6e:2c:ed:bc:3a:7e:
         bd:50:ec:88:42:3f:20:ce:58:75:2c:f0:ec:da:a7:80:1e:70:
         5d:da:98:a1:96:9b:57:f6:8c:12:f1:19:5f:96:76:b1:12:06:
         35:b0:ee:c2:75:a9:12:65:a8:29:f0:aa:5c:5c:76:28:7d:b2:
         19:77:14:5f:e4:b9:a5:75:31:d0:22:53:36:c3:c6:33:c5:1e:
         d8:76:02:39:d1:39:2f:cd:0d:b1:50:13:a2:eb:0f:96:84:ff:
         82:dd:2e:79:57:52:93:d6:b2:c4:d5:65:7e:55:70:d8:75:8b:
         83:31:c2:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVQsAiL982sIfT27b+IGzQ3SZc8MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE2QUQyRjVGNUJDRTdFOURDRkY3RjNDM0VFQzRCRTAx
MjBFMUM0QzAeFw0yNDA1MDgxODE1NThaFw0yNTA1MDcxODIwNThaMDMxMTAvBgNV
BAMTKDJBQkRFNjZGQjc3M0IwNzcyQjkzNkI4ODE4MzNGMEIyNzE1NkE1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUcJOuWnyfXl3zuswi+HLOlob
aYiLpfOlGYvKAeBm+oZjJhFIbkmHXPR2+W8Y6IiaaS7ynVppe2poStrCoii6KWGb
7WZq4MKhowk21/XSJoHl9lCmonEWPEwOsCOVhm4rgN4BkSX+PBG9gRCxzryOYvVm
K22aaravqdiE80eoRx9TdVKKTWfmu/SCEhJf4/Y9V0XcJkzU6/sjr4pVEC3jiUqZ
nuP2SRGEqu/lf7rQElPqMXOWwIjxGAOjfYpArgTZ1bLX769W1w2EvhmTlMhpUzms
hK7JmVivCp1sXmsED8UYG5e+R/pECo6WM2SH93UkN6hjMX8oYGBGvuL1dBIJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKr3mb7dzsHcrk2uIGDPwsnFWpWEwHwYDVR0j
BBgwFoAU6mrS9fW85+nc/388PuxL4BIOHEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhXY2s2Qm80bVExQnV4QkZiR2JBbVFVWTJ4VW4yYWhkdW01TTJ6ZHpQ
R2QvMC9FQTZBRDJGNUY1QkNFN0U5RENGRjdGM0MzRUVDNEJFMDEyMEUxQzRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBNkFEMkY1RjVCQ0U3RTlE
Q0ZGN0YzQzNFRUM0QkUwMTIwRTFDNEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4V2NrNkJvNG1RMUJ1eEJGYkdiQW1RVVkyeFVuMmFoZHVtNU0yemR6UEdkLzAv
MzEzNzM3MmUzMTM4MzUyZTMxMzEzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzOTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxuXIwDQYJKoZIhvcNAQELBQADggEBAATKS/d6
p7yNOsFeK0sEcd8RnnWE+p+jPIAR6dLMK18QavfaVtSuk8I+z0GS1peEMFoAXsMo
M637QYyCLSRLdaP5dKnygu4k05E6wAvkG7/kVDH4vTZ/dSz6wJvpSfR/NoIUiXVa
zrHq2OA3QmzkAvAu8LInCKH5OAT1vAY8kCO2C0C2dzD9YTwJd24s7bw6fr1Q7IhC
PyDOWHUs8Ozap4AecF3amKGWm1f2jBLxGV+WdrESBjWw7sJ1qRJlqCnwqlxcdih9
shl3FF/kuaV1MdAiUzbDxjPFHth2AjnROS/NDbFQE6LrD5aE/4LdLnlXUpPWssTV
ZX5VcNh1i4Mxwh8=
-----END CERTIFICATE-----
Generated at Wed Jul 3 01:34:23 2024 by rpki-client on console-fra.rpki-client.org