Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa
File:                     3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa (raw, json)
Hash identifier:          3cfVTT86jiQjPREV06gIPVMJyCa30A/QVG9p0kevO7c=
Subject key identifier:   33:EA:F8:88:F8:30:65:AD:2A:D5:92:1D:31:3C:80:D7:04:C3:B4:EC
Certificate issuer:       /CN=FED7E42E4E4C7A8F6B2C7D9E39364835717365C1
Certificate serial:       7406EA22DFF57058AFEFEC6BBCB7424297CE9F20
Authority key identifier: FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa
Signing time:             Tue 08 Oct 2024 18:13:59 +0000
ROA not before:           Tue 08 Oct 2024 18:08:59 +0000
ROA not after:            Tue 07 Oct 2025 18:13:59 +0000
asID:                     271337
IP address blocks:        200.106.222.0/23 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:ea:22:df:f5:70:58:af:ef:ec:6b:bc:b7:42:42:97:ce:9f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED7E42E4E4C7A8F6B2C7D9E39364835717365C1
        Validity
            Not Before: Oct  8 18:08:59 2024 GMT
            Not After : Oct  7 18:13:59 2025 GMT
        Subject: CN=33EAF888F83065AD2AD5921D313C80D704C3B4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:ad:b1:d1:13:d8:06:f3:9b:95:06:a8:16:
                    71:5f:67:5d:ba:53:62:3c:bf:a1:ca:a9:2c:da:a9:
                    c6:c0:a1:f6:ed:92:7b:7e:6c:11:5f:7b:bb:16:47:
                    20:49:06:4e:40:6c:95:8b:60:99:49:51:1c:b4:f9:
                    d3:23:7b:ee:8f:92:19:71:6c:64:e4:a1:32:00:aa:
                    b6:9f:9a:cc:06:13:19:85:65:ef:ca:f3:36:16:5c:
                    89:4c:8b:e2:7d:9d:a3:cf:2b:41:3e:3d:1e:4e:43:
                    2f:ce:9c:46:64:20:0a:f9:a6:2f:57:c2:fb:f0:74:
                    f3:ba:97:96:24:b3:ef:b9:28:e1:d3:85:f2:dc:b6:
                    1a:4a:0c:35:ae:7b:54:c8:fb:34:ae:12:b2:ed:2d:
                    82:56:f0:33:16:7c:88:6a:88:2c:8a:0f:bc:f7:b8:
                    68:b8:c6:53:bf:3a:fe:64:cf:81:cc:7c:6c:98:ea:
                    5b:96:87:98:50:2e:61:d9:d9:63:df:fa:11:9a:ae:
                    57:21:3e:fa:21:f8:6c:3a:23:e5:7c:f7:33:f9:ef:
                    3d:e6:81:aa:46:4f:76:2b:a9:22:80:bd:d7:7c:c3:
                    67:0d:91:cf:b7:c3:7f:c4:7a:96:3f:67:29:0d:09:
                    e1:5d:08:ee:a5:c1:6e:0b:7f:d4:fc:64:da:c3:39:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:F8:88:F8:30:65:AD:2A:D5:92:1D:31:3C:80:D7:04:C3:B4:EC
            X509v3 Authority Key Identifier:
                keyid:FE:D7:E4:2E:4E:4C:7A:8F:6B:2C:7D:9E:39:36:48:35:71:73:65:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED7E42E4E4C7A8F6B2C7D9E39364835717365C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54NKmLxabHU5BKeyF2o7dPNJZeX8GauKPPCEmnRKpygK/0/3230302e3130362e3232322e302f32332d3332203d3e20323731333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:76:35:3c:56:59:25:3c:54:9f:e2:33:bc:79:66:aa:57:
         5b:f3:04:a0:1e:45:ee:72:84:64:b7:20:86:9f:a3:98:33:f5:
         33:fb:69:6a:ed:76:ea:6e:e5:4c:cc:a0:0f:a8:a2:3d:87:74:
         f7:17:53:96:aa:45:b6:09:55:ea:66:cd:91:9f:a4:ee:f0:47:
         2c:f4:fe:0e:89:9c:86:b6:3c:d3:12:a8:de:6e:8d:f6:9f:e6:
         62:81:e7:a9:43:9e:64:50:98:61:bc:80:ec:45:53:21:26:70:
         19:e1:41:27:06:de:1c:23:06:53:cc:1b:5b:d6:45:1e:62:9e:
         3e:c9:b6:c9:d2:28:00:9f:46:9d:b6:11:0f:0d:27:49:9a:85:
         78:f9:61:8e:9f:fb:05:02:f6:0f:ef:14:f6:e3:72:11:f2:45:
         8f:b9:2a:22:ef:69:fe:25:d1:fd:62:c7:f9:d9:f2:ff:26:f9:
         50:32:aa:13:f2:00:af:e9:96:05:1a:95:37:ba:20:08:83:4a:
         71:00:e9:49:55:5a:47:98:88:d6:93:e1:66:81:7f:f4:e5:66:
         a9:04:43:88:f9:3e:8c:74:c9:16:09:c1:27:32:18:0e:a9:33:
         c1:c1:98:c4:77:eb:05:2a:3f:bc:9f:c3:c1:1d:a3:c3:1c:6d:
         4c:96:ab:33
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdAbqIt/1cFiv7+xrvLdCQpfOnyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVEN0U0MkU0RTRDN0E4RjZCMkM3RDlFMzkzNjQ4MzU3
MTczNjVDMTAeFw0yNDEwMDgxODA4NTlaFw0yNTEwMDcxODEzNTlaMDMxMTAvBgNV
BAMTKDMzRUFGODg4RjgzMDY1QUQyQUQ1OTIxRDMxM0M4MEQ3MDRDM0I0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqK2x0RPYBvOblQaoFnFfZ126
U2I8v6HKqSzaqcbAofbtknt+bBFfe7sWRyBJBk5AbJWLYJlJURy0+dMje+6Pkhlx
bGTkoTIAqrafmswGExmFZe/K8zYWXIlMi+J9naPPK0E+PR5OQy/OnEZkIAr5pi9X
wvvwdPO6l5Yks++5KOHThfLcthpKDDWue1TI+zSuErLtLYJW8DMWfIhqiCyKD7z3
uGi4xlO/Ov5kz4HMfGyY6luWh5hQLmHZ2WPf+hGarlchPvoh+Gw6I+V89zP57z3m
gapGT3YrqSKAvdd8w2cNkc+3w3/EepY/ZykNCeFdCO6lwW4Lf9T8ZNrDOWfTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUM+r4iPgwZa0q1ZIdMTyA1wTDtOwwHwYDVR0j
BBgwFoAU/tfkLk5Meo9rLH2eOTZINXFzZcEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTROS21MeGFiSFU1QktleUYybzdkUE5KWmVYOEdhdUtQUENFbW5SS3B5
Z0svMC9GRUQ3RTQyRTRFNEM3QThGNkIyQzdEOUUzOTM2NDgzNTcxNzM2NUMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZFRDdFNDJFNEU0QzdBOEY2
QjJDN0Q5RTM5MzY0ODM1NzE3MzY1QzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0TkttTHhhYkhVNUJLZXlGMm83ZFBOSlplWDhHYXVLUFBDRW1uUktweWdLLzAv
MzIzMDMwMmUzMTMwMzYyZTMyMzIzMjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMy
MzczMTMzMzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAchq3jANBgkqhkiG9w0BAQsFAAOCAQEACht2
NTxWWSU8VJ/iM7x5ZqpXW/MEoB5F7nKEZLcghp+jmDP1M/tpau126m7lTMygD6ii
PYd09xdTlqpFtglV6mbNkZ+k7vBHLPT+DomchrY80xKo3m6N9p/mYoHnqUOeZFCY
YbyA7EVTISZwGeFBJwbeHCMGU8wbW9ZFHmKePsm2ydIoAJ9GnbYRDw0nSZqFePlh
jp/7BQL2D+8U9uNyEfJFj7kqIu9p/iXR/WLH+dny/yb5UDKqE/IAr+mWBRqVN7og
CINKcQDpSVVaR5iI1pPhZoF/9OVmqQRDiPk+jHTJFgnBJzIYDqkzwcGYxHfrBSo/
vJ/DwR2jwxxtTJarMw==
-----END CERTIFICATE-----
Generated at Sun Nov 3 23:29:06 2024 by rpki-client on console-ams.rpki-client.org