Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34332e302f32342d3234203d3e203631363934.roa
File:                     3136382e3139342e34332e302f32342d3234203d3e203631363934.roa (raw, json)
Hash identifier:          Lq+nK/i6HxSZadjABcBFYEZbYfh5wWEDgKtEcrwoN/o=
Subject key identifier:   54:47:C3:20:64:87:FD:B4:88:C6:2E:96:28:BF:DA:48:D7:28:BF:14
Certificate issuer:       /CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
Certificate serial:       20FC52A580E96BF7924E43F1514591216CE5F310
Authority key identifier: EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34332e302f32342d3234203d3e203631363934.roa
Signing time:             Wed 03 Apr 2024 19:19:09 +0000
ROA not before:           Wed 03 Apr 2024 19:14:09 +0000
ROA not after:            Wed 02 Apr 2025 19:19:09 +0000
asID:                     61694
IP address blocks:        168.194.43.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fc:52:a5:80:e9:6b:f7:92:4e:43:f1:51:45:91:21:6c:e5:f3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE9E3B8C44E817B12E9E0A3E53713589553FDE47
        Validity
            Not Before: Apr  3 19:14:09 2024 GMT
            Not After : Apr  2 19:19:09 2025 GMT
        Subject: CN=5447C3206487FDB488C62E9628BFDA48D728BF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:0a:62:bf:98:c9:fb:98:cb:15:e8:6d:6d:
                    cf:f6:45:fe:67:fd:bc:f9:44:dd:da:c9:5e:28:58:
                    9d:f5:16:0d:91:2c:92:b9:1f:07:90:1d:7b:cf:44:
                    aa:a4:cd:68:61:3d:01:a8:5e:7f:73:4f:8b:ce:09:
                    ee:b7:a2:7d:b4:0f:40:96:1f:2a:fb:97:d2:5c:11:
                    3f:88:9a:c0:3f:c8:11:15:24:14:95:c7:1d:ac:17:
                    79:39:64:0f:b6:ca:3b:59:1f:95:50:0c:66:57:07:
                    aa:e3:ed:65:65:01:f2:8e:d9:16:a9:3f:f7:60:5b:
                    d3:2d:bb:91:98:10:0e:eb:7c:e3:0f:5b:a7:86:dd:
                    66:17:6e:04:6d:e1:00:cb:2b:d7:47:b2:1b:c0:e3:
                    b3:88:21:1b:1d:ab:f0:3b:7b:4d:15:a0:79:ac:13:
                    79:56:9f:b4:f9:4a:30:2e:bf:85:40:d8:02:d2:9f:
                    cd:38:68:4f:3c:91:62:4a:4e:74:4b:ed:24:f1:bb:
                    72:71:0b:ca:3d:31:72:7e:4b:21:c7:4d:91:23:4c:
                    c2:95:57:1a:d9:41:07:af:54:14:f0:67:5e:6e:fe:
                    d1:db:68:f4:fe:72:eb:7e:2c:06:eb:ac:f6:41:d0:
                    47:c4:07:bd:f8:fc:1c:6e:c7:30:1e:0c:ab:50:36:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:47:C3:20:64:87:FD:B4:88:C6:2E:96:28:BF:DA:48:D7:28:BF:14
            X509v3 Authority Key Identifier:
                keyid:EE:9E:3B:8C:44:E8:17:B1:2E:9E:0A:3E:53:71:35:89:55:3F:DE:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE9E3B8C44E817B12E9E0A3E53713589553FDE47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/1/3136382e3139342e34332e302f32342d3234203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:59:aa:10:ce:83:dd:63:75:10:09:3e:6a:31:4c:2b:2d:30:
         3a:e7:6b:c8:a0:69:3d:09:3b:08:29:60:86:14:6c:2b:d4:8d:
         e4:82:4e:34:4d:c4:d0:77:a4:9c:d4:c3:31:f1:f1:33:c0:f7:
         18:30:94:6d:5f:42:a4:3c:13:5c:cf:d5:c6:2a:f5:57:92:6f:
         3f:6b:71:f4:54:af:e4:62:22:3e:00:50:a7:b3:8c:2f:96:2d:
         2f:67:df:74:b7:26:0a:0d:e1:f2:93:46:5b:52:6f:18:0d:20:
         e2:be:34:c7:f5:b4:2c:5e:0d:f4:ca:37:6c:a2:56:76:64:7b:
         40:cd:f6:56:b6:15:78:0b:ee:0c:f4:fa:9b:e9:54:40:1a:e1:
         12:0f:82:c7:25:56:5f:16:9f:11:8e:21:81:d4:eb:c6:e1:f2:
         38:0d:a5:b9:3a:00:0a:f3:01:09:60:ef:4f:23:4a:29:20:21:
         2c:5f:c9:3c:71:54:29:a4:ff:57:36:0c:b8:e2:5c:ec:f2:5b:
         c5:a5:e3:bb:ee:92:90:78:bd:19:8f:50:37:ad:0f:17:80:aa:
         bc:50:f5:c0:14:61:2d:0a:d3:84:9f:1a:38:40:83:66:26:63:
         53:15:fb:27:0e:bc:8a:56:fc:21:23:97:5d:3b:58:7f:32:fe:
         c8:85:73:4e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIPxSpYDpa/eSTkPxUUWRIWzl8xAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5RTNCOEM0NEU4MTdCMTJFOUUwQTNFNTM3MTM1ODk1
NTNGREU0NzAeFw0yNDA0MDMxOTE0MDlaFw0yNTA0MDIxOTE5MDlaMDMxMTAvBgNV
BAMTKDU0NDdDMzIwNjQ4N0ZEQjQ4OEM2MkU5NjI4QkZEQTQ4RDcyOEJGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VQpiv5jJ+5jLFehtbc/2Rf5n
/bz5RN3ayV4oWJ31Fg2RLJK5HweQHXvPRKqkzWhhPQGoXn9zT4vOCe63on20D0CW
Hyr7l9JcET+ImsA/yBEVJBSVxx2sF3k5ZA+2yjtZH5VQDGZXB6rj7WVlAfKO2Rap
P/dgW9Mtu5GYEA7rfOMPW6eG3WYXbgRt4QDLK9dHshvA47OIIRsdq/A7e00VoHms
E3lWn7T5SjAuv4VA2ALSn804aE88kWJKTnRL7STxu3JxC8o9MXJ+SyHHTZEjTMKV
VxrZQQevVBTwZ15u/tHbaPT+cut+LAbrrPZB0EfEB734/BxuxzAeDKtQNpw9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVEfDIGSH/bSIxi6WKL/aSNcovxQwHwYDVR0j
BBgwFoAU7p47jEToF7Eungo+U3E1iVU/3kcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmtlTGRUREVCUnMzYlVOYnE5RVFkU1VwQlFIQ0dieG9qNXBHN3dYamdL
YWsvMS9FRTlFM0I4QzQ0RTgxN0IxMkU5RTBBM0U1MzcxMzU4OTU1M0ZERTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFOUUzQjhDNDRFODE3QjEy
RTlFMEEzRTUzNzEzNTg5NTUzRkRFNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZrZUxkVERFQlJzM2JVTmJxOUVRZFNVcEJRSENHYnhvajVwRzd3WGpnS2FrLzEv
MzEzNjM4MmUzMTM5MzQyZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqMIrMA0GCSqGSIb3DQEBCwUAA4IBAQBgWaoQzoPd
Y3UQCT5qMUwrLTA652vIoGk9CTsIKWCGFGwr1I3kgk40TcTQd6Sc1MMx8fEzwPcY
MJRtX0KkPBNcz9XGKvVXkm8/a3H0VK/kYiI+AFCns4wvli0vZ990tyYKDeHyk0Zb
Um8YDSDivjTH9bQsXg30yjdsolZ2ZHtAzfZWthV4C+4M9Pqb6VRAGuESD4LHJVZf
Fp8RjiGB1OvG4fI4DaW5OgAK8wEJYO9PI0opICEsX8k8cVQppP9XNgy44lzs8lvF
peO77pKQeL0Zj1A3rQ8XgKq8UPXAFGEtCtOEnxo4QINmJmNTFfsnDryKVvwhI5dd
O1h/Mv7IhXNO
-----END CERTIFICATE-----
Generated at Wed Jul 3 22:27:55 2024 by rpki-client on console-ams.rpki-client.org