Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa
File:                     3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa (raw, json)
Hash identifier:          9+9Ecg0L0I+FS9PjkFCIUMAX9/V2/qGL6xrb0Q/ViQ4=
Subject key identifier:   8F:F5:EA:6B:52:01:96:F1:CE:E0:46:8E:9C:6E:4B:6C:59:12:C6:BB
Certificate issuer:       /CN=84555EA2A351023C03643DD4393917DFED046A48
Certificate serial:       5ECB9C658105DC45DEB16827024D071F8107C0F8
Authority key identifier: 84:55:5E:A2:A3:51:02:3C:03:64:3D:D4:39:39:17:DF:ED:04:6A:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84555EA2A351023C03643DD4393917DFED046A48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa
Signing time:             Wed 19 Jun 2024 00:49:27 +0000
ROA not before:           Wed 19 Jun 2024 00:44:27 +0000
ROA not after:            Wed 18 Jun 2025 00:49:27 +0000
asID:                     264211
IP address blocks:        138.99.164.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cb:9c:65:81:05:dc:45:de:b1:68:27:02:4d:07:1f:81:07:c0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84555EA2A351023C03643DD4393917DFED046A48
        Validity
            Not Before: Jun 19 00:44:27 2024 GMT
            Not After : Jun 18 00:49:27 2025 GMT
        Subject: CN=8FF5EA6B520196F1CEE0468E9C6E4B6C5912C6BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:c7:d3:3f:6e:4d:a3:cf:7e:bd:e1:07:d1:
                    f6:b7:cf:2d:64:b6:f0:91:3c:ee:ff:6b:f8:d3:85:
                    de:2d:fa:13:ac:a5:89:bd:6b:14:b2:81:13:38:16:
                    75:34:db:69:6a:2e:9f:75:64:e8:ac:3d:4a:c3:1b:
                    a6:51:9e:1a:ea:ad:d1:50:84:91:58:6a:79:cb:3c:
                    7b:0d:2b:6d:71:1e:da:7d:5b:52:6d:4f:e4:9c:27:
                    c4:f2:95:b5:38:c1:e0:e0:04:aa:06:7b:a6:a8:d6:
                    ab:64:7d:6c:1a:bc:1c:0a:3d:ad:a0:7e:14:a3:4a:
                    f0:46:f6:2e:53:61:40:bc:8f:66:6e:d2:7f:ea:a4:
                    2b:db:ad:ce:78:71:fd:38:de:bc:52:31:0f:0b:ca:
                    8b:74:f0:19:e9:cd:25:59:10:8b:31:d8:c3:07:71:
                    7e:37:2f:0e:32:93:43:6c:50:2e:70:80:ac:ae:2a:
                    cb:38:f3:f0:8d:7c:c0:9e:ef:ae:fa:2e:52:8a:ad:
                    48:ce:40:61:db:e2:71:ab:29:65:3b:50:eb:f4:7a:
                    64:a4:7f:39:c5:72:54:6e:8c:b7:6a:7f:31:81:64:
                    6e:7d:7e:d5:ba:a4:fc:e2:84:1c:1d:0f:e9:fd:53:
                    1f:56:f6:6a:e8:84:11:89:3f:bb:5e:7b:f4:bc:42:
                    51:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F5:EA:6B:52:01:96:F1:CE:E0:46:8E:9C:6E:4B:6C:59:12:C6:BB
            X509v3 Authority Key Identifier:
                keyid:84:55:5E:A2:A3:51:02:3C:03:64:3D:D4:39:39:17:DF:ED:04:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/84555EA2A351023C03643DD4393917DFED046A48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84555EA2A351023C03643DD4393917DFED046A48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/1/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:3b:08:4c:2b:86:e3:c4:b6:e9:83:26:4f:e8:62:43:22:
         f5:67:a8:91:69:90:d0:c9:21:7d:0c:09:4f:46:79:d1:b3:4d:
         db:26:88:9e:2b:cf:35:06:76:6d:34:7d:c0:7a:13:20:d7:bc:
         08:e1:8f:df:56:ed:4b:68:a7:4a:f3:7b:32:21:a4:c5:a9:71:
         ad:b5:fc:7a:40:67:ab:02:97:b9:be:fa:58:d4:af:9e:a6:51:
         65:06:83:fa:0c:b5:a1:72:1c:67:15:61:f5:0c:22:81:32:2b:
         0f:80:86:ed:7d:f4:50:ae:ac:f3:08:f9:5d:fd:25:44:f9:91:
         b7:cf:9a:31:a9:fc:75:7e:a8:bd:1b:fd:d6:0e:21:ea:89:e9:
         65:60:66:b5:ff:2c:b6:5e:30:be:7d:04:ff:a6:c2:d4:65:2c:
         7a:12:fb:3b:d1:bd:0e:9a:46:70:bc:38:df:f3:4e:6f:48:96:
         51:bc:3f:a9:33:79:50:aa:c9:cb:e9:ec:89:f2:19:74:61:e3:
         ae:52:4c:a0:b8:45:0b:18:6d:56:97:cd:7c:ae:ac:d5:1c:24:
         ff:ac:0a:f6:7d:eb:0c:26:ed:6c:88:a7:6d:57:6e:7d:c6:52:
         c4:89:ba:7e:68:54:39:29:10:2b:cb:a9:4b:72:6c:6c:99:f8:
         ca:89:b3:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXsucZYEF3EXesWgnAk0HH4EHwPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1NTVFQTJBMzUxMDIzQzAzNjQzREQ0MzkzOTE3REZF
RDA0NkE0ODAeFw0yNDA2MTkwMDQ0MjdaFw0yNTA2MTgwMDQ5MjdaMDMxMTAvBgNV
BAMTKDhGRjVFQTZCNTIwMTk2RjFDRUUwNDY4RTlDNkU0QjZDNTkxMkM2QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe68fTP25No89+veEH0fa3zy1k
tvCRPO7/a/jThd4t+hOspYm9axSygRM4FnU022lqLp91ZOisPUrDG6ZRnhrqrdFQ
hJFYannLPHsNK21xHtp9W1JtT+ScJ8TylbU4weDgBKoGe6ao1qtkfWwavBwKPa2g
fhSjSvBG9i5TYUC8j2Zu0n/qpCvbrc54cf043rxSMQ8Lyot08BnpzSVZEIsx2MMH
cX43Lw4yk0NsUC5wgKyuKss48/CNfMCe7676LlKKrUjOQGHb4nGrKWU7UOv0emSk
fznFclRujLdqfzGBZG59ftW6pPzihBwdD+n9Ux9W9mrohBGJP7tee/S8QlHFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj/Xqa1IBlvHO4EaOnG5LbFkSxrswHwYDVR0j
BBgwFoAUhFVeoqNRAjwDZD3UOTkX3+0EakgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmpraTVKUWJ5dldxaVVwamM5U0RMMkxMcVlLaVE4aDNTQlV1dHk0TGNr
UkovMS84NDU1NUVBMkEzNTEwMjNDMDM2NDNERDQzOTM5MTdERkVEMDQ2QTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0NTU1RUEyQTM1MTAyM0Mw
MzY0M0RENDM5MzkxN0RGRUQwNDZBNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZqa2k1SlFieXZXcWlVcGpjOVNETDJMTHFZS2lROGgzU0JVdXR5NExja1JKLzEv
MzEzMzM4MmUzOTM5MmUzMTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKY6QwDQYJKoZIhvcNAQELBQADggEBAJfEOwhM
K4bjxLbpgyZP6GJDIvVnqJFpkNDJIX0MCU9GedGzTdsmiJ4rzzUGdm00fcB6EyDX
vAjhj99W7Utop0rzezIhpMWpca21/HpAZ6sCl7m++ljUr56mUWUGg/oMtaFyHGcV
YfUMIoEyKw+Ahu199FCurPMI+V39JUT5kbfPmjGp/HV+qL0b/dYOIeqJ6WVgZrX/
LLZeML59BP+mwtRlLHoS+zvRvQ6aRnC8ON/zTm9IllG8P6kzeVCqycvp7InyGXRh
465STKC4RQsYbVaXzXyurNUcJP+sCvZ96wwm7WyIp21Xbn3GUsSJun5oVDkpECvL
qUtybGyZ+MqJswU=
-----END CERTIFICATE-----