Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa
File:                     3230312e35342e3136302e302f32302d3332203d3e203238363234.roa (raw, json)
Hash identifier:          f6P/BQtZJZyAvrQDzUvMf3ngNyWHtP3rjQKN+d3iNp8=
Subject key identifier:   3B:A9:E6:C0:B7:CC:B9:35:28:6F:07:BF:5C:8F:31:85:8C:22:C9:26
Certificate issuer:       /CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
Certificate serial:       3B1A23A423FA195F25F8CA5905377BFC89F9537F
Authority key identifier: 81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa
Signing time:             Wed 03 Apr 2024 19:58:58 +0000
ROA not before:           Wed 03 Apr 2024 19:53:58 +0000
ROA not after:            Wed 02 Apr 2025 19:58:58 +0000
asID:                     28624
IP address blocks:        201.54.160.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1a:23:a4:23:fa:19:5f:25:f8:ca:59:05:37:7b:fc:89:f9:53:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817F44DF70A1D14D9825D4B258089BFBB4A6B04C
        Validity
            Not Before: Apr  3 19:53:58 2024 GMT
            Not After : Apr  2 19:58:58 2025 GMT
        Subject: CN=3BA9E6C0B7CCB935286F07BF5C8F31858C22C926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:22:df:fa:c3:77:72:5d:0c:86:ca:cd:7d:32:
                    aa:fe:d9:ed:3e:f0:9c:5f:19:40:b5:78:50:95:81:
                    6e:5c:04:9b:ca:15:0b:52:9a:4c:0c:45:2f:47:fe:
                    f3:de:a9:ae:38:48:9e:c9:78:f0:60:c6:a4:18:13:
                    cc:f7:42:b4:9f:97:f2:bf:7a:a0:25:4e:22:f7:cb:
                    a8:f3:79:49:0f:23:7c:77:9b:66:a0:37:5c:18:b1:
                    66:69:c2:e7:d6:16:ac:f7:7b:12:4c:61:d6:2b:18:
                    b7:59:17:43:a6:88:cb:3b:a5:b9:19:2d:b4:f7:1d:
                    79:80:59:6b:dc:71:93:5f:58:b8:d5:7d:e3:c7:14:
                    54:de:d8:4b:50:ce:ea:96:4b:c4:0f:3f:4d:5d:8c:
                    4a:bb:b0:5a:31:d5:a9:80:53:47:e1:c5:97:b6:ad:
                    69:14:dd:63:61:3c:69:3e:f3:e4:87:80:1f:7b:d2:
                    27:6f:d1:22:a7:d7:fb:47:2e:40:7f:f7:88:66:59:
                    af:88:ba:63:cc:98:48:e8:b1:40:99:05:dd:91:cb:
                    f9:cb:fe:f9:39:f8:59:8f:b4:48:d1:15:65:fb:68:
                    17:1a:f1:62:0a:bb:d1:75:b5:7d:57:82:cd:8c:ef:
                    ba:35:01:24:dd:7f:71:b0:4a:b2:0d:5c:a5:dc:49:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:E6:C0:B7:CC:B9:35:28:6F:07:BF:5C:8F:31:85:8C:22:C9:26
            X509v3 Authority Key Identifier:
                keyid:81:7F:44:DF:70:A1:D1:4D:98:25:D4:B2:58:08:9B:FB:B4:A6:B0:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/817F44DF70A1D14D9825D4B258089BFBB4A6B04C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Lc6dy9iwwWt2a8W3Aqxa7me44UG2vomggM4Zmu2QvKq/1/3230312e35342e3136302e302f32302d3332203d3e203238363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:e6:1c:bd:ff:9b:ba:5e:a0:af:24:84:bb:59:65:9e:34:b3:
         3c:88:49:81:e8:7d:6a:53:4b:ff:9b:1b:6e:96:b5:6f:94:a0:
         57:0c:77:6c:e1:39:c1:3e:ee:3c:23:1c:70:ed:b3:00:e8:ca:
         88:84:c5:cd:be:92:b2:83:92:ff:80:da:d6:f1:c1:f4:aa:12:
         43:a8:a4:2f:3a:2f:2c:94:aa:48:b8:c4:a5:56:8f:6c:1d:75:
         0b:e8:2c:28:ad:31:cf:1a:f6:9f:44:d6:9d:81:29:18:79:5e:
         d3:14:c2:77:3e:cc:17:35:70:db:4f:9f:db:1e:c2:68:a5:cf:
         0d:b0:0a:da:e7:cd:2d:e7:15:11:0f:c4:3a:4d:8f:8b:32:66:
         4e:50:34:31:d2:22:24:76:47:d0:01:28:89:db:0f:a4:c1:a5:
         7e:eb:30:b6:1a:e6:dd:2e:52:42:55:9f:13:68:68:98:de:b9:
         d9:ae:d8:39:05:d5:75:36:2f:32:f5:53:10:b0:97:c4:e5:29:
         da:d9:7d:32:43:9b:15:bf:32:36:9c:e1:4e:6f:48:ac:4e:d1:
         36:62:d1:f3:73:8a:45:7c:99:38:7b:dd:ec:06:12:ee:19:40:
         3c:bb:39:27:d4:a9:01:44:b3:51:19:b5:e2:d5:37:31:85:50:
         df:9b:65:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOxojpCP6GV8l+MpZBTd7/In5U38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE3RjQ0REY3MEExRDE0RDk4MjVENEIyNTgwODlCRkJC
NEE2QjA0QzAeFw0yNDA0MDMxOTUzNThaFw0yNTA0MDIxOTU4NThaMDMxMTAvBgNV
BAMTKDNCQTlFNkMwQjdDQ0I5MzUyODZGMDdCRjVDOEYzMTg1OEMyMkM5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIt/6w3dyXQyGys19Mqr+2e0+
8JxfGUC1eFCVgW5cBJvKFQtSmkwMRS9H/vPeqa44SJ7JePBgxqQYE8z3QrSfl/K/
eqAlTiL3y6jzeUkPI3x3m2agN1wYsWZpwufWFqz3exJMYdYrGLdZF0OmiMs7pbkZ
LbT3HXmAWWvccZNfWLjVfePHFFTe2EtQzuqWS8QPP01djEq7sFox1amAU0fhxZe2
rWkU3WNhPGk+8+SHgB970idv0SKn1/tHLkB/94hmWa+IumPMmEjosUCZBd2Ry/nL
/vk5+FmPtEjRFWX7aBca8WIKu9F1tX1Xgs2M77o1ASTdf3GwSrINXKXcSaT9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUO6nmwLfMuTUobwe/XI8xhYwiySYwHwYDVR0j
BBgwFoAUgX9E33Ch0U2YJdSyWAib+7SmsEwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUxjNmR5OWl3d1d0MmE4VzNBcXhhN21lNDRVRzJ2b21nZ000Wm11MlF2
S3EvMS84MTdGNDRERjcwQTFEMTREOTgyNUQ0QjI1ODA4OUJGQkI0QTZCMDRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxN0Y0NERGNzBBMUQxNEQ5
ODI1RDRCMjU4MDg5QkZCQjRBNkIwNEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMYzZkeTlpd3dXdDJhOFczQXF4YTdtZTQ0VUcydm9tZ2dNNFptdTJRdktxLzEv
MzIzMDMxMmUzNTM0MmUzMTM2MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyTagMA0GCSqGSIb3DQEBCwUAA4IBAQBt5hy9/5u6
XqCvJIS7WWWeNLM8iEmB6H1qU0v/mxtulrVvlKBXDHds4TnBPu48Ixxw7bMA6MqI
hMXNvpKyg5L/gNrW8cH0qhJDqKQvOi8slKpIuMSlVo9sHXUL6CworTHPGvafRNad
gSkYeV7TFMJ3PswXNXDbT5/bHsJopc8NsAra580t5xURD8Q6TY+LMmZOUDQx0iIk
dkfQASiJ2w+kwaV+6zC2GubdLlJCVZ8TaGiY3rnZrtg5BdV1Ni8y9VMQsJfE5Sna
2X0yQ5sVvzI2nOFOb0isTtE2YtHzc4pFfJk4e93sBhLuGUA8uzkn1KkBRLNRGbXi
1TcxhVDfm2Wq
-----END CERTIFICATE-----
Generated at Fri Nov 8 00:15:59 2024 by rpki-client on console-fra.rpki-client.org