Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32342d3234203d3e20323632393838.roa
File:                     3136382e39302e38302e302f32342d3234203d3e20323632393838.roa (raw, json)
Hash identifier:          +jSYyOzww3swIXrW36MiHtXQptviL4H2iWIZeN6YCEc=
Subject key identifier:   99:CF:C2:A1:68:6F:18:A0:E1:43:18:8A:D0:F5:C8:42:14:69:1E:5F
Certificate issuer:       /CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
Certificate serial:       4E885277A688A11DABB094FEB39AC1E40C442073
Authority key identifier: 29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32342d3234203d3e20323632393838.roa
Signing time:             Mon 15 Jul 2024 15:18:46 +0000
ROA not before:           Mon 15 Jul 2024 15:13:46 +0000
ROA not after:            Mon 14 Jul 2025 15:18:46 +0000
asID:                     262988
IP address blocks:        168.90.80.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:52:77:a6:88:a1:1d:ab:b0:94:fe:b3:9a:c1:e4:0c:44:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A1282E326330DF4E04F369E0E196F6DA4FB102
        Validity
            Not Before: Jul 15 15:13:46 2024 GMT
            Not After : Jul 14 15:18:46 2025 GMT
        Subject: CN=99CFC2A1686F18A0E143188AD0F5C84214691E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:00:fd:fa:4a:16:77:92:9b:c4:fa:ac:88:3f:
                    ab:dd:d0:1b:6b:bd:ed:54:8e:37:ce:f3:b6:5a:c2:
                    a3:5d:c5:eb:71:95:76:2f:05:64:71:19:5b:14:61:
                    5b:02:6f:14:05:1d:8e:aa:ae:a0:22:9e:2a:1a:e7:
                    b9:d4:91:f9:20:92:9c:46:df:6b:46:28:85:b6:f5:
                    fc:eb:99:8e:df:80:d6:fb:51:81:9a:c9:22:34:36:
                    5a:53:9e:13:e5:08:4e:9c:ae:a6:d4:41:36:19:18:
                    28:b4:e1:b5:f7:cb:20:e7:91:be:08:ce:5b:4c:29:
                    19:3c:cc:11:4e:9a:31:d6:a2:73:5b:64:ce:e5:e3:
                    47:59:75:3c:9e:49:cd:95:41:1a:65:5a:8d:25:c7:
                    0e:38:84:d3:53:7f:b5:2c:fa:a7:47:b3:97:0b:38:
                    bf:30:13:b1:04:54:fc:a8:57:bc:d1:11:f1:49:c7:
                    4f:ee:b9:04:5c:96:3f:d8:74:38:21:ff:d6:fc:72:
                    5d:25:da:57:25:ba:e7:c9:3c:31:66:24:0d:2c:86:
                    98:0f:23:64:5d:80:23:74:b1:44:59:3b:25:bf:f5:
                    ca:74:12:19:26:b7:07:08:7f:da:29:f9:b4:96:bb:
                    78:b6:89:60:ba:78:df:4f:bc:88:4b:40:c9:47:9a:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:C2:A1:68:6F:18:A0:E1:43:18:8A:D0:F5:C8:42:14:69:1E:5F
            X509v3 Authority Key Identifier:
                keyid:29:A1:28:2E:32:63:30:DF:4E:04:F3:69:E0:E1:96:F6:DA:4F:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/29A1282E326330DF4E04F369E0E196F6DA4FB102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A1282E326330DF4E04F369E0E196F6DA4FB102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54WxTfovDirxgxcH8Rnz5BmeyymnPPSzg4FmhRyH2JCq/0/3136382e39302e38302e302f32342d3234203d3e20323632393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f9:ca:71:40:e2:d9:e9:1c:06:50:1d:65:8d:24:c4:c3:08:
         7c:25:0c:bf:3f:42:bb:ae:33:65:8e:56:d3:f6:f4:ee:31:b4:
         ae:76:b0:47:f4:b8:59:25:55:f2:30:c0:53:da:50:7e:bc:12:
         8f:c6:7a:8d:46:81:3e:75:1e:13:69:c2:6a:9f:c9:b5:06:90:
         e6:f5:21:e6:ef:ba:c1:14:30:b4:f8:d0:65:79:b1:1f:d3:ee:
         b4:4f:e5:bd:c6:1d:e7:67:36:c6:e1:2f:16:87:12:1e:64:9a:
         54:fd:e6:f0:5f:fe:14:5b:3b:59:c5:08:13:16:66:a6:c5:d3:
         24:d9:c7:37:48:3f:56:43:f0:b3:ad:e7:07:b8:0b:25:7c:cc:
         e9:e8:f2:17:02:61:37:a0:37:61:36:44:c4:a0:50:69:0c:6d:
         30:94:2f:47:cc:62:18:8d:aa:a6:de:79:e0:2e:f5:cd:21:af:
         b9:ce:54:58:22:07:c0:cc:36:ff:17:c6:f7:c3:4c:33:86:53:
         45:d2:5f:4f:00:94:ec:2f:e1:61:e1:74:7e:f9:1c:4f:48:4d:
         01:34:4e:98:de:7d:6a:57:4e:c9:e0:5f:d0:62:ce:13:34:3a:
         de:01:08:73:ae:6d:03:01:6c:05:a5:7f:36:d6:5b:da:00:2f:
         51:d2:9a:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTohSd6aIoR2rsJT+s5rB5AxEIHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlBMTI4MkUzMjYzMzBERjRFMDRGMzY5RTBFMTk2RjZE
QTRGQjEwMjAeFw0yNDA3MTUxNTEzNDZaFw0yNTA3MTQxNTE4NDZaMDMxMTAvBgNV
BAMTKDk5Q0ZDMkExNjg2RjE4QTBFMTQzMTg4QUQwRjVDODQyMTQ2OTFFNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAP36ShZ3kpvE+qyIP6vd0Btr
ve1UjjfO87ZawqNdxetxlXYvBWRxGVsUYVsCbxQFHY6qrqAinioa57nUkfkgkpxG
32tGKIW29fzrmY7fgNb7UYGaySI0NlpTnhPlCE6crqbUQTYZGCi04bX3yyDnkb4I
zltMKRk8zBFOmjHWonNbZM7l40dZdTyeSc2VQRplWo0lxw44hNNTf7Us+qdHs5cL
OL8wE7EEVPyoV7zREfFJx0/uuQRclj/YdDgh/9b8cl0l2lcluufJPDFmJA0shpgP
I2RdgCN0sURZOyW/9cp0EhkmtwcIf9op+bSWu3i2iWC6eN9PvIhLQMlHmlJHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmc/CoWhvGKDhQxiK0PXIQhRpHl8wHwYDVR0j
BBgwFoAUKaEoLjJjMN9OBPNp4OGW9tpPsQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTRXeFRmb3ZEaXJ4Z3hjSDhSbno1Qm1leXltblBQU3pnNEZtaFJ5SDJK
Q3EvMC8yOUExMjgyRTMyNjMzMERGNEUwNEYzNjlFMEUxOTZGNkRBNEZCMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5QTEyODJFMzI2MzMwREY0
RTA0RjM2OUUwRTE5NkY2REE0RkIxMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0V3hUZm92RGlyeGd4Y0g4Um56NUJtZXl5bW5QUFN6ZzRGbWhSeUgySkNxLzAv
MzEzNjM4MmUzOTMwMmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzkzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqFpQMA0GCSqGSIb3DQEBCwUAA4IBAQBg+cpxQOLZ
6RwGUB1ljSTEwwh8JQy/P0K7rjNljlbT9vTuMbSudrBH9LhZJVXyMMBT2lB+vBKP
xnqNRoE+dR4TacJqn8m1BpDm9SHm77rBFDC0+NBlebEf0+60T+W9xh3nZzbG4S8W
hxIeZJpU/ebwX/4UWztZxQgTFmamxdMk2cc3SD9WQ/CzrecHuAslfMzp6PIXAmE3
oDdhNkTEoFBpDG0wlC9HzGIYjaqm3nngLvXNIa+5zlRYIgfAzDb/F8b3w0wzhlNF
0l9PAJTsL+Fh4XR++RxPSE0BNE6Y3n1qV07J4F/QYs4TNDreAQhzrm0DAWwFpX82
1lvaAC9R0prC
-----END CERTIFICATE-----
Generated at Sat Oct 19 15:37:42 2024 by rpki-client on console-fra.rpki-client.org