Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32322d3232203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32322d3232203d3e20323633353433.roa (raw, json)
Hash identifier:          UrZ9bAsOL9X/roiyCPur9qTNK1HjIGoRB8sbR+IUAKo=
Subject key identifier:   5B:E6:27:E1:A5:53:17:68:30:EB:0A:A4:62:EA:55:93:24:51:50:CB
Certificate issuer:       /CN=E62F6460EB005BCAA989A94867C16F940F2157C8
Certificate serial:       0E8E80E131241B02014BA1C8EE65CA9F2F1DAE35
Authority key identifier: E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32322d3232203d3e20323633353433.roa
Signing time:             Thu 04 Apr 2024 20:40:41 +0000
ROA not before:           Thu 04 Apr 2024 20:35:41 +0000
ROA not after:            Thu 03 Apr 2025 20:40:41 +0000
asID:                     263543
IP address blocks:        143.202.120.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:80:e1:31:24:1b:02:01:4b:a1:c8:ee:65:ca:9f:2f:1d:ae:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F6460EB005BCAA989A94867C16F940F2157C8
        Validity
            Not Before: Apr  4 20:35:41 2024 GMT
            Not After : Apr  3 20:40:41 2025 GMT
        Subject: CN=5BE627E1A553176830EB0AA462EA5593245150CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:02:3b:fb:0f:75:a2:d2:90:4f:d6:49:7f:
                    62:f8:44:4b:24:94:93:84:8f:14:96:da:c3:28:6b:
                    c6:a7:11:d6:89:55:f9:7b:98:60:69:43:d7:71:4c:
                    30:26:cb:c2:a9:9a:48:1d:6d:43:20:5c:59:e0:96:
                    58:49:17:a0:b9:d6:82:37:da:fc:39:81:91:32:fc:
                    e7:ad:be:ec:db:03:7d:ac:b7:19:b5:44:1d:cb:20:
                    3e:cc:6e:36:60:80:69:20:63:84:a2:f0:42:e8:85:
                    37:7f:8f:f0:f5:11:33:c9:f6:30:84:d3:25:25:08:
                    63:fa:9b:a5:99:25:9e:84:85:06:78:b9:f0:2e:60:
                    23:9a:2f:7d:e5:99:3b:fd:a4:63:8d:50:9f:78:81:
                    e2:a1:59:53:ff:8e:e3:f1:34:b4:3e:92:e0:ab:78:
                    a3:e4:49:90:fe:27:ea:ae:c5:a9:47:85:1f:14:37:
                    7c:40:e4:e4:95:6b:ce:24:d9:c0:da:6c:36:9a:7b:
                    4c:8d:0c:6a:21:5c:cb:44:02:7c:77:4b:f9:5f:aa:
                    4e:95:e9:d5:7e:8a:f8:d2:8e:d1:c1:04:6a:3f:fc:
                    94:99:36:3c:90:38:0c:d9:8b:2d:f9:48:e9:cb:c1:
                    4d:c2:b4:f3:d5:68:af:c8:c6:36:24:14:a2:0d:37:
                    3d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E6:27:E1:A5:53:17:68:30:EB:0A:A4:62:EA:55:93:24:51:50:CB
            X509v3 Authority Key Identifier:
                keyid:E6:2F:64:60:EB:00:5B:CA:A9:89:A9:48:67:C1:6F:94:0F:21:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/E62F6460EB005BCAA989A94867C16F940F2157C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E62F6460EB005BCAA989A94867C16F940F2157C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/1/3134332e3230322e3132302e302f32322d3232203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:52:86:b5:f2:13:d6:d9:1c:8a:b7:ea:c8:4e:a7:54:4f:
         ad:f9:1c:5d:72:7e:a5:38:b2:ce:60:46:0c:ee:53:b0:03:a8:
         49:f5:8e:34:37:1a:12:db:05:c0:0e:21:14:c1:4f:90:ad:96:
         26:7d:9a:75:18:26:f2:0a:27:28:79:b3:0f:fd:eb:8d:ba:51:
         39:2a:e2:ed:c3:06:0e:02:81:69:8b:c5:ec:c5:0d:b0:c1:e4:
         e1:f3:88:8e:53:62:af:b5:46:0c:32:a1:a6:3f:60:ca:4d:95:
         16:9f:36:1c:7f:e6:af:ec:be:51:05:2a:b0:83:f1:a0:42:01:
         f9:3a:8a:2b:27:b4:65:19:e4:47:f2:56:a9:f3:e0:fc:a8:4a:
         b0:47:f8:2e:eb:7d:f3:f3:09:07:33:17:49:33:0f:74:69:a0:
         56:cc:41:7c:90:d2:45:04:6c:f1:4b:a5:c9:38:1e:95:7f:7b:
         8c:f5:88:d3:73:89:43:0a:81:06:3f:30:1d:d0:49:2c:bf:ba:
         a4:00:aa:4a:f7:1a:49:a5:30:7f:7d:7f:fc:20:df:4a:af:0a:
         26:60:4a:c9:b1:19:f4:86:a2:b2:8a:ef:d4:f6:ca:f4:49:99:
         77:c1:26:70:94:be:48:bb:f6:9b:05:24:ac:8a:cf:70:b0:de:
         91:14:2d:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDo6A4TEkGwIBS6HI7mXKny8drjUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTYyRjY0NjBFQjAwNUJDQUE5ODlBOTQ4NjdDMTZGOTQw
RjIxNTdDODAeFw0yNDA0MDQyMDM1NDFaFw0yNTA0MDMyMDQwNDFaMDMxMTAvBgNV
BAMTKDVCRTYyN0UxQTU1MzE3NjgzMEVCMEFBNDYyRUE1NTkzMjQ1MTUwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qgI7+w91otKQT9ZJf2L4REsk
lJOEjxSW2sMoa8anEdaJVfl7mGBpQ9dxTDAmy8KpmkgdbUMgXFngllhJF6C51oI3
2vw5gZEy/OetvuzbA32stxm1RB3LID7MbjZggGkgY4Si8ELohTd/j/D1ETPJ9jCE
0yUlCGP6m6WZJZ6EhQZ4ufAuYCOaL33lmTv9pGONUJ94geKhWVP/juPxNLQ+kuCr
eKPkSZD+J+quxalHhR8UN3xA5OSVa84k2cDabDaae0yNDGohXMtEAnx3S/lfqk6V
6dV+ivjSjtHBBGo//JSZNjyQOAzZiy35SOnLwU3CtPPVaK/IxjYkFKINNz2zAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUW+Yn4aVTF2gw6wqkYupVkyRRUMswHwYDVR0j
BBgwFoAU5i9kYOsAW8qpialIZ8FvlA8hV8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMS9FNjJGNjQ2MEVCMDA1QkNBQTk4OUE5NDg2N0MxNkY5NDBGMjE1N0M4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2MkY2NDYwRUIwMDVCQ0FB
OTg5QTk0ODY3QzE2Rjk0MEYyMTU3QzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKY1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzEv
MzEzNDMzMmUzMjMwMzIyZTMxMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo/KeDANBgkqhkiG9w0BAQsFAAOCAQEALjBS
hrXyE9bZHIq36shOp1RPrfkcXXJ+pTiyzmBGDO5TsAOoSfWONDcaEtsFwA4hFMFP
kK2WJn2adRgm8gonKHmzD/3rjbpROSri7cMGDgKBaYvF7MUNsMHk4fOIjlNir7VG
DDKhpj9gyk2VFp82HH/mr+y+UQUqsIPxoEIB+TqKKye0ZRnkR/JWqfPg/KhKsEf4
Lut98/MJBzMXSTMPdGmgVsxBfJDSRQRs8UulyTgelX97jPWI03OJQwqBBj8wHdBJ
LL+6pACqSvcaSaUwf31//CDfSq8KJmBKybEZ9Iaisorv1PbK9EmZd8EmcJS+SLv2
mwUkrIrPcLDekRQt3g==
-----END CERTIFICATE-----
Generated at Wed Oct 30 08:32:27 2024 by rpki-client on console-ams.rpki-client.org