Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/3138362e3230392e3132342e302f32322d3332203d3e20323730373033.roa
File:                     3138362e3230392e3132342e302f32322d3332203d3e20323730373033.roa (raw, json)
Hash identifier:          +UTWNjBVHnJFZUcor1oq3EKhm7P8vYxT/jADQr0vvt4=
Subject key identifier:   A6:C8:61:D4:00:49:8A:5D:14:BE:02:6C:44:BF:27:D8:18:D2:27:37
Certificate issuer:       /CN=7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C
Certificate serial:       4316A7B6C60DC738325580218192C45D676292BB
Authority key identifier: 7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/3138362e3230392e3132342e302f32322d3332203d3e20323730373033.roa
Signing time:             Tue 06 Aug 2024 17:32:11 +0000
ROA not before:           Tue 06 Aug 2024 17:27:11 +0000
ROA not after:            Tue 05 Aug 2025 17:32:11 +0000
asID:                     270703
IP address blocks:        186.209.124.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:a7:b6:c6:0d:c7:38:32:55:80:21:81:92:c4:5d:67:62:92:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C
        Validity
            Not Before: Aug  6 17:27:11 2024 GMT
            Not After : Aug  5 17:32:11 2025 GMT
        Subject: CN=A6C861D400498A5D14BE026C44BF27D818D22737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:bc:dc:d6:9c:fd:1d:75:58:6f:3f:0f:08:
                    39:09:ab:2a:6f:a1:e8:47:1c:6c:ed:23:99:c7:9e:
                    d9:2a:5d:d1:b3:3f:e8:a8:5d:50:3b:f6:16:27:54:
                    6f:93:09:34:59:ad:9b:65:38:77:4a:96:88:84:5a:
                    7d:2a:92:4c:8d:45:6d:7d:13:22:c5:19:51:b1:44:
                    92:f0:40:9c:57:a5:83:f8:e3:75:3d:f1:19:16:61:
                    a2:c0:c0:8e:51:58:98:86:0a:a8:2b:3d:5d:34:9a:
                    c4:c6:94:01:df:c7:a7:f3:65:c6:19:8a:fb:68:84:
                    c4:5b:bb:76:44:d2:b2:a2:eb:cd:6b:4f:f5:9f:b6:
                    f6:71:95:c2:57:e6:21:86:f8:59:3c:f1:3a:14:50:
                    9c:3e:76:74:fe:60:df:ad:10:9f:e8:43:b0:70:5b:
                    de:a3:d5:bd:9a:a1:ad:15:9f:e4:df:f3:32:be:39:
                    8f:9c:9b:99:b1:94:ee:c0:fb:c0:15:7e:1a:ee:6d:
                    c9:ca:90:5c:b6:c4:3c:12:f6:c6:2d:c3:34:06:1e:
                    43:6f:da:a8:2a:be:06:eb:a3:af:6e:87:aa:80:b2:
                    98:e1:78:98:ee:6e:9e:08:f8:5b:f1:36:c0:65:93:
                    19:3c:47:48:77:09:8e:f7:81:2c:fa:9a:c7:22:f6:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C8:61:D4:00:49:8A:5D:14:BE:02:6C:44:BF:27:D8:18:D2:27:37
            X509v3 Authority Key Identifier:
                keyid:7F:3F:61:BF:6C:2E:81:A3:DC:FB:31:6F:AA:5B:38:13:7C:AE:CA:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F3F61BF6C2E81A3DCFB316FAA5B38137CAECA1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uZi9RWs7h1UCLPWHtofMRdvYRHXFy8wAgDeWAmrb4HV/0/3138362e3230392e3132342e302f32322d3332203d3e20323730373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:ff:d5:91:d4:4b:7e:89:94:d9:18:09:41:76:4f:4b:dd:
         d8:59:98:35:03:86:b0:d0:13:4e:ef:27:4d:91:e4:d6:5b:bf:
         61:8d:49:92:e8:37:c1:b1:79:62:a7:9d:99:01:8b:50:1d:22:
         5f:e1:23:f3:81:ac:68:b2:3a:2f:57:4b:67:40:42:28:ac:69:
         2b:db:4a:d5:6a:11:a4:6f:17:10:39:9f:11:f7:19:0e:8f:e5:
         eb:87:80:73:3a:28:fb:56:5d:9c:1e:fc:e6:40:43:73:b1:10:
         46:38:be:94:84:0a:34:6f:f7:cc:64:34:5c:7a:5c:ab:30:03:
         3b:1e:31:cc:e9:0e:21:25:4e:74:a3:89:e3:2b:e4:1b:4e:2c:
         fd:c7:ce:58:6b:1d:ab:b8:4e:a1:c0:50:4f:ac:6e:9d:b0:e4:
         ae:ba:3d:4a:ed:86:fe:a6:d4:68:26:5e:b3:37:2f:7d:9d:f2:
         c5:c5:3a:8a:66:93:fd:6d:77:02:b0:39:96:82:32:f9:e6:47:
         df:c7:13:53:4b:21:8f:98:36:ac:3f:0f:a8:e5:6c:5a:99:ae:
         75:3f:1d:b0:2f:a6:8a:f6:50:2d:0a:9b:c0:1e:3f:3e:c0:3a:
         33:38:b6:ca:39:df:b3:6d:83:97:a8:b2:9f:26:30:9f:ac:d7:
         db:13:13:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQxantsYNxzgyVYAhgZLEXWdikrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzRjYxQkY2QzJFODFBM0RDRkIzMTZGQUE1QjM4MTM3
Q0FFQ0ExQzAeFw0yNDA4MDYxNzI3MTFaFw0yNTA4MDUxNzMyMTFaMDMxMTAvBgNV
BAMTKEE2Qzg2MUQ0MDA0OThBNUQxNEJFMDI2QzQ0QkYyN0Q4MThEMjI3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRLzc1pz9HXVYbz8PCDkJqypv
oehHHGztI5nHntkqXdGzP+ioXVA79hYnVG+TCTRZrZtlOHdKloiEWn0qkkyNRW19
EyLFGVGxRJLwQJxXpYP443U98RkWYaLAwI5RWJiGCqgrPV00msTGlAHfx6fzZcYZ
ivtohMRbu3ZE0rKi681rT/WftvZxlcJX5iGG+Fk88ToUUJw+dnT+YN+tEJ/oQ7Bw
W96j1b2aoa0Vn+Tf8zK+OY+cm5mxlO7A+8AVfhrubcnKkFy2xDwS9sYtwzQGHkNv
2qgqvgbro69uh6qAspjheJjubp4I+FvxNsBlkxk8R0h3CY73gSz6msci9qpbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpshh1ABJil0UvgJsRL8n2BjSJzcwHwYDVR0j
BBgwFoAUfz9hv2wugaPc+zFvqls4E3yuyhwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVaaTlSV3M3aDFVQ0xQV0h0b2ZNUmR2WVJIWEZ5OHdBZ0RlV0FtcmI0
SFYvMC83RjNGNjFCRjZDMkU4MUEzRENGQjMxNkZBQTVCMzgxMzdDQUVDQTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdGM0Y2MUJGNkMyRTgxQTNE
Q0ZCMzE2RkFBNUIzODEzN0NBRUNBMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1Wmk5UldzN2gxVUNMUFdIdG9mTVJkdllSSFhGeTh3QWdEZVdBbXJiNEhWLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM3MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrRfDANBgkqhkiG9w0BAQsFAAOCAQEATpn/
1ZHUS36JlNkYCUF2T0vd2FmYNQOGsNATTu8nTZHk1lu/YY1Jkug3wbF5YqedmQGL
UB0iX+Ej84GsaLI6L1dLZ0BCKKxpK9tK1WoRpG8XEDmfEfcZDo/l64eAczoo+1Zd
nB785kBDc7EQRji+lIQKNG/3zGQ0XHpcqzADOx4xzOkOISVOdKOJ4yvkG04s/cfO
WGsdq7hOocBQT6xunbDkrro9Su2G/qbUaCZeszcvfZ3yxcU6imaT/W13ArA5loIy
+eZH38cTU0shj5g2rD8PqOVsWpmudT8dsC+mivZQLQqbwB4/PsA6Mzi2yjnfs22D
l6iynyYwn6zX2xMTJA==
-----END CERTIFICATE-----
Generated at Thu Nov 14 12:27:54 2024 by rpki-client on console-fra.rpki-client.org