Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3136382e3138312e3134382e302f32322d3332203d3e203532353739.roa
File:                     3136382e3138312e3134382e302f32322d3332203d3e203532353739.roa (raw, json)
Hash identifier:          CkBJpL4+s/6e66kM84Iw6pVZHVQIspl3FbqJgSPPo90=
Subject key identifier:   D4:86:80:01:49:1C:07:10:EC:B9:9C:6B:60:D3:58:EF:43:0E:96:6F
Certificate issuer:       /CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
Certificate serial:       2D480FB9D62B594D94B57032171075D212D05D85
Authority key identifier: 0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3136382e3138312e3134382e302f32322d3332203d3e203532353739.roa
Signing time:             Mon 15 Apr 2024 13:15:31 +0000
ROA not before:           Mon 15 Apr 2024 13:10:31 +0000
ROA not after:            Mon 14 Apr 2025 13:15:31 +0000
asID:                     52579
IP address blocks:        168.181.148.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:48:0f:b9:d6:2b:59:4d:94:b5:70:32:17:10:75:d2:12:d0:5d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
        Validity
            Not Before: Apr 15 13:10:31 2024 GMT
            Not After : Apr 14 13:15:31 2025 GMT
        Subject: CN=D4868001491C0710ECB99C6B60D358EF430E966F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:f3:45:40:fc:2c:56:66:05:fc:d8:cb:0c:
                    45:5c:29:e4:28:6f:5a:4a:a2:aa:ad:39:71:48:2a:
                    5a:c1:19:46:9b:75:4d:62:ad:12:79:e0:4a:cf:1a:
                    f3:ef:52:3f:2f:68:1a:10:eb:c7:3c:68:02:41:43:
                    55:f6:b1:dd:73:45:ab:0a:5e:18:cd:a1:00:f8:e7:
                    8c:11:a6:03:34:92:d4:28:ae:d7:6a:d2:c5:6d:fc:
                    6c:5e:14:85:68:08:00:b1:e2:78:29:51:de:9b:a2:
                    6e:91:8c:a0:2f:89:47:56:fc:18:b4:eb:d1:a2:9c:
                    23:25:6e:ab:7a:6a:f7:bb:cd:5c:47:54:5a:ea:52:
                    6a:1f:4c:f1:93:3a:a4:27:7e:16:93:2c:66:6f:a8:
                    f8:56:c2:cb:95:08:c7:aa:e4:41:f8:9b:86:26:c9:
                    61:c2:6e:ae:2e:59:60:b6:47:71:31:e5:2f:37:9a:
                    b8:2f:eb:a1:2a:e6:91:5f:a3:58:96:ee:e3:fc:7c:
                    68:f3:d2:a9:3f:2f:fa:1f:28:0b:68:9e:eb:92:ee:
                    e7:e8:02:21:a8:ba:8e:c3:68:a5:ac:07:4a:1a:9f:
                    27:4e:37:49:c2:51:e1:7a:d8:6e:9c:3a:70:c2:9d:
                    ff:a0:b3:76:02:db:16:ba:20:79:32:ac:a3:04:9c:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:86:80:01:49:1C:07:10:EC:B9:9C:6B:60:D3:58:EF:43:0E:96:6F
            X509v3 Authority Key Identifier:
                keyid:0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3136382e3138312e3134382e302f32322d3332203d3e203532353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:8c:54:bb:c4:4c:44:5d:5a:c8:fb:37:65:6c:88:5c:f3:26:
         3c:5a:2e:c9:13:f1:32:2a:7c:ec:5f:6b:b6:b3:65:7f:a3:58:
         0d:61:3a:ea:99:03:1b:ac:ac:1f:85:f4:9b:e8:e3:a0:91:06:
         a1:d0:f6:07:d9:b3:2c:25:c0:1c:49:0e:d7:7e:cd:8f:7b:4c:
         70:3f:58:17:3d:dc:2f:d1:14:1e:bf:84:20:ed:f7:4b:95:fe:
         b3:49:6c:cc:2c:a7:80:37:a5:b0:c2:55:34:73:29:b5:7f:92:
         83:df:5a:79:d7:74:5a:5e:b8:7c:af:8b:55:bd:e9:c7:a5:fc:
         f8:f7:af:7f:7c:e9:61:fc:c2:15:6d:dc:66:57:db:55:02:2f:
         2c:6b:66:71:3a:2c:18:28:77:32:c1:b1:7d:2d:d6:c8:5e:9d:
         e1:30:68:46:67:54:40:8c:be:72:4b:31:e2:a3:e1:5d:31:b5:
         c3:66:38:a3:80:b4:d3:3f:90:51:99:84:71:38:9e:59:fa:e3:
         74:42:17:1c:a3:b0:11:5d:5f:d4:10:97:be:40:8d:b7:26:ea:
         2a:cd:0d:62:ba:59:a0:77:34:79:6a:19:20:c0:97:0a:f9:61:
         d9:ff:33:fe:c2:51:10:53:7f:94:5e:bd:ee:ce:0f:43:d5:ef:
         85:53:5b:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULUgPudYrWU2UtXAyFxB10hLQXYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzQ0U5MDFFMDZDOEJDNTVGRkYxMTFEOTUwMTdGRTZE
QkFDOUZGMTAeFw0yNDA0MTUxMzEwMzFaFw0yNTA0MTQxMzE1MzFaMDMxMTAvBgNV
BAMTKEQ0ODY4MDAxNDkxQzA3MTBFQ0I5OUM2QjYwRDM1OEVGNDMwRTk2NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9vNFQPwsVmYF/NjLDEVcKeQo
b1pKoqqtOXFIKlrBGUabdU1irRJ54ErPGvPvUj8vaBoQ68c8aAJBQ1X2sd1zRasK
XhjNoQD454wRpgM0ktQortdq0sVt/GxeFIVoCACx4ngpUd6bom6RjKAviUdW/Bi0
69GinCMlbqt6ave7zVxHVFrqUmofTPGTOqQnfhaTLGZvqPhWwsuVCMeq5EH4m4Ym
yWHCbq4uWWC2R3Ex5S83mrgv66Eq5pFfo1iW7uP8fGjz0qk/L/ofKAtonuuS7ufo
AiGouo7DaKWsB0oanydON0nCUeF62G6cOnDCnf+gs3YC2xa6IHkyrKMEnCttAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1IaAAUkcBxDsuZxrYNNY70MOlm8wHwYDVR0j
BBgwFoAUDjzpAeBsi8Vf/xEdlQF/5tusn/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0VE5UTVJjUHRoY1o2a3p1NFdpcmNKeDc0R2h5UXNUYVY0VVpqUUNp
RTgvMC8wRTNDRTkwMUUwNkM4QkM1NUZGRjExMUQ5NTAxN0ZFNkRCQUM5RkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFM0NFOTAxRTA2QzhCQzU1
RkZGMTExRDk1MDE3RkU2REJBQzlGRjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dFROVE1SY1B0aGNaNmt6dTRXaXJjSng3NEdoeVFzVGFWNFVaalFDaUU4LzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKotZQwDQYJKoZIhvcNAQELBQADggEBAIaMVLvE
TERdWsj7N2VsiFzzJjxaLskT8TIqfOxfa7azZX+jWA1hOuqZAxusrB+F9Jvo46CR
BqHQ9gfZsywlwBxJDtd+zY97THA/WBc93C/RFB6/hCDt90uV/rNJbMwsp4A3pbDC
VTRzKbV/koPfWnnXdFpeuHyvi1W96cel/Pj3r3986WH8whVt3GZX21UCLyxrZnE6
LBgodzLBsX0t1sheneEwaEZnVECMvnJLMeKj4V0xtcNmOKOAtNM/kFGZhHE4nln6
43RCFxyjsBFdX9QQl75Ajbcm6irNDWK6WaB3NHlqGSDAlwr5Ydn/M/7CURBTf5Re
ve7OD0PV74VTW/I=
-----END CERTIFICATE-----
Generated at Fri Jul 19 15:54:56 2024 by rpki-client on console-fra.rpki-client.org