Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3137372e38372e3135322e302f32322d3332203d3e203532353739.roa
File:                     3137372e38372e3135322e302f32322d3332203d3e203532353739.roa (raw, json)
Hash identifier:          j3IcTloIg71JigxKN6jgBv785JUkay+RN1deBYygqEQ=
Subject key identifier:   87:59:10:96:A0:53:7B:0A:7E:E2:6D:A5:12:5E:6E:9E:23:15:F4:14
Certificate issuer:       /CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
Certificate serial:       49C0C160CF898352BBD820E792AE88589BB38170
Authority key identifier: 0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3137372e38372e3135322e302f32322d3332203d3e203532353739.roa
Signing time:             Mon 15 Apr 2024 13:14:57 +0000
ROA not before:           Mon 15 Apr 2024 13:09:57 +0000
ROA not after:            Mon 14 Apr 2025 13:14:57 +0000
asID:                     52579
IP address blocks:        177.87.152.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:c1:60:cf:89:83:52:bb:d8:20:e7:92:ae:88:58:9b:b3:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
        Validity
            Not Before: Apr 15 13:09:57 2024 GMT
            Not After : Apr 14 13:14:57 2025 GMT
        Subject: CN=87591096A0537B0A7EE26DA5125E6E9E2315F414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:05:ff:71:34:11:5e:b4:92:87:7b:70:a7:
                    cf:01:b7:d1:81:e5:70:6d:71:83:f2:dd:6b:52:0c:
                    0a:a4:f5:25:57:ef:b5:73:92:f9:a9:88:aa:b4:02:
                    13:0b:5a:88:1c:6d:05:dc:36:b2:d7:58:01:ab:8a:
                    73:71:9e:be:83:9b:2f:b4:91:4c:5e:24:e3:aa:33:
                    e4:bd:b6:f3:fa:1c:40:09:2f:37:8a:bd:5b:9f:8f:
                    a9:3e:ba:95:4b:20:d7:c6:a4:1f:e5:7e:77:ec:45:
                    39:0e:c8:17:72:1a:e5:bb:3d:fc:ec:1e:a1:bb:7b:
                    42:0b:3f:8c:ad:1a:f6:80:fa:6e:bd:4c:9b:de:66:
                    b3:16:3b:6f:4c:f5:35:7b:ee:b8:5d:15:df:5b:ab:
                    62:40:fb:6b:5d:e2:30:08:b3:30:20:ab:90:ce:be:
                    e5:a3:79:e8:5f:d6:5f:d6:aa:c1:9f:cb:16:6c:ab:
                    be:4b:ec:c2:54:f7:a0:30:f6:09:33:84:58:54:31:
                    bf:79:f3:6d:25:1e:66:ec:ce:cf:bd:f1:46:c7:b8:
                    ec:7c:25:41:8d:61:fd:e7:13:af:9c:ec:7c:11:be:
                    02:ff:f6:7e:87:15:5d:35:f3:1f:48:72:f9:e1:b0:
                    01:47:5d:1f:58:a5:a3:fc:77:31:0f:b9:bb:47:12:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:59:10:96:A0:53:7B:0A:7E:E2:6D:A5:12:5E:6E:9E:23:15:F4:14
            X509v3 Authority Key Identifier:
                keyid:0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3137372e38372e3135322e302f32322d3332203d3e203532353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:15:99:3f:18:24:04:a3:a9:28:35:73:89:85:6d:54:08:
         bb:f2:a1:ee:31:d6:d8:92:76:d4:f8:74:02:26:e0:a1:9d:c9:
         57:28:1e:81:3d:e8:4b:8b:b1:32:73:02:8c:57:29:af:88:22:
         0b:08:8b:38:56:78:7c:4c:fe:5f:19:f4:9c:94:00:fb:d8:61:
         e2:04:b0:44:7d:c2:ba:97:b9:98:30:25:a8:57:c7:d3:03:e8:
         2d:23:99:03:2c:99:c8:2f:35:a9:a2:2a:a1:4f:a8:29:b2:ed:
         29:15:1c:e4:2c:bf:bb:6c:49:8e:75:41:22:c3:96:51:5d:2a:
         5a:b0:6e:ff:3e:ae:bd:f0:e9:a9:49:86:cf:56:9a:5c:78:7a:
         93:1d:91:06:58:c3:9b:b8:e7:3e:d7:f2:29:73:c9:c3:50:a5:
         b3:35:63:db:aa:63:ff:a9:6f:64:1a:8a:79:e8:ff:2e:d6:1c:
         d8:21:d6:ed:df:36:6e:f9:99:b4:44:14:a0:3d:ef:53:95:1d:
         0f:0e:16:67:8d:d3:7f:e1:52:d9:b4:a4:02:66:1e:f7:00:4a:
         8a:1f:27:8a:99:94:b4:36:34:3d:aa:6b:1e:70:cf:d2:88:1b:
         ae:dd:66:fc:73:aa:f1:94:ba:32:28:bd:79:f0:58:12:84:2a:
         30:0a:a6:ad
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUScDBYM+Jg1K72CDnkq6IWJuzgXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzQ0U5MDFFMDZDOEJDNTVGRkYxMTFEOTUwMTdGRTZE
QkFDOUZGMTAeFw0yNDA0MTUxMzA5NTdaFw0yNTA0MTQxMzE0NTdaMDMxMTAvBgNV
BAMTKDg3NTkxMDk2QTA1MzdCMEE3RUUyNkRBNTEyNUU2RTlFMjMxNUY0MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcxQX/cTQRXrSSh3twp88Bt9GB
5XBtcYPy3WtSDAqk9SVX77VzkvmpiKq0AhMLWogcbQXcNrLXWAGrinNxnr6Dmy+0
kUxeJOOqM+S9tvP6HEAJLzeKvVufj6k+upVLINfGpB/lfnfsRTkOyBdyGuW7Pfzs
HqG7e0ILP4ytGvaA+m69TJveZrMWO29M9TV77rhdFd9bq2JA+2td4jAIszAgq5DO
vuWjeehf1l/WqsGfyxZsq75L7MJU96Aw9gkzhFhUMb95820lHmbszs+98UbHuOx8
JUGNYf3nE6+c7HwRvgL/9n6HFV018x9IcvnhsAFHXR9YpaP8dzEPubtHErFNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUh1kQlqBTewp+4m2lEl5uniMV9BQwHwYDVR0j
BBgwFoAUDjzpAeBsi8Vf/xEdlQF/5tusn/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0VE5UTVJjUHRoY1o2a3p1NFdpcmNKeDc0R2h5UXNUYVY0VVpqUUNp
RTgvMC8wRTNDRTkwMUUwNkM4QkM1NUZGRjExMUQ5NTAxN0ZFNkRCQUM5RkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFM0NFOTAxRTA2QzhCQzU1
RkZGMTExRDk1MDE3RkU2REJBQzlGRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dFROVE1SY1B0aGNaNmt6dTRXaXJjSng3NEdoeVFzVGFWNFVaalFDaUU4LzAv
MzEzNzM3MmUzODM3MmUzMTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNTMy
MzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVeYMA0GCSqGSIb3DQEBCwUAA4IBAQAZwRWZPxgk
BKOpKDVziYVtVAi78qHuMdbYknbU+HQCJuChnclXKB6BPehLi7EycwKMVymviCIL
CIs4Vnh8TP5fGfSclAD72GHiBLBEfcK6l7mYMCWoV8fTA+gtI5kDLJnILzWpoiqh
T6gpsu0pFRzkLL+7bEmOdUEiw5ZRXSpasG7/Pq698OmpSYbPVppceHqTHZEGWMOb
uOc+1/Ipc8nDUKWzNWPbqmP/qW9kGop56P8u1hzYIdbt3zZu+Zm0RBSgPe9TlR0P
DhZnjdN/4VLZtKQCZh73AEqKHyeKmZS0NjQ9qmsecM/SiBuu3Wb8c6rxlLoyKL15
8FgShCowCqat
-----END CERTIFICATE-----
Generated at Fri Jul 19 15:54:56 2024 by rpki-client on console-fra.rpki-client.org