Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa
File:                     3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa (raw, json)
Hash identifier:          MIPl5dlDkCOXfeG5eOlaJNxb5HgnQzF1fERatXIn0oQ=
Subject key identifier:   79:97:FB:F4:5C:BF:23:D2:74:45:79:CB:BD:8F:C0:60:97:65:CA:A5
Certificate issuer:       /CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
Certificate serial:       4B5AEFEBD3B978041DF60BD0CD68672DFD4BC0FE
Authority key identifier: 5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa
Signing time:             Thu 18 Jul 2024 15:36:08 +0000
ROA not before:           Thu 18 Jul 2024 15:31:08 +0000
ROA not after:            Thu 17 Jul 2025 15:36:08 +0000
asID:                     265287
IP address blocks:        168.90.132.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5a:ef:eb:d3:b9:78:04:1d:f6:0b:d0:cd:68:67:2d:fd:4b:c0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17
        Validity
            Not Before: Jul 18 15:31:08 2024 GMT
            Not After : Jul 17 15:36:08 2025 GMT
        Subject: CN=7997FBF45CBF23D2744579CBBD8FC0609765CAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:ab:ed:e8:55:d7:f4:49:4e:f9:c5:8d:62:
                    29:d2:20:94:e8:ef:12:1c:1c:13:d5:70:be:2f:74:
                    ee:3d:b3:e6:23:f1:5b:cb:b2:d0:f0:14:94:e7:f7:
                    e5:d9:8a:c9:84:45:6e:bc:9a:a7:a5:9d:52:ce:48:
                    f0:4d:7a:fb:5d:4d:fa:04:98:42:c0:77:1e:84:0f:
                    23:b0:79:aa:db:0c:70:0c:e7:29:1b:a9:85:62:c0:
                    98:0b:33:87:d9:51:3f:29:c8:dc:00:3a:a7:6d:f6:
                    8a:5a:da:01:1f:fe:44:2d:ea:c5:de:da:6b:ce:c9:
                    af:e3:73:e8:03:dc:ee:6f:a2:00:53:e3:b8:f5:19:
                    eb:b2:2d:8f:b8:97:a2:87:a7:bf:47:7f:67:d9:d5:
                    c3:9a:0b:0d:d8:ee:ab:7e:94:4b:93:27:ac:6d:cc:
                    2d:03:35:9d:e2:98:54:ed:f3:13:e2:4b:c0:57:da:
                    e2:63:62:8f:fb:72:5b:74:94:12:23:48:cd:da:ae:
                    f2:1c:09:b4:c3:9f:41:e5:87:71:fa:99:46:01:c1:
                    ad:13:99:79:3c:6b:62:ee:0f:e7:ca:94:1d:86:6f:
                    a9:f7:be:37:69:fa:4a:f2:30:5b:f6:b9:5f:f2:23:
                    4f:b5:27:bb:c6:4b:ff:f8:50:f3:09:9e:7d:ec:fb:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:97:FB:F4:5C:BF:23:D2:74:45:79:CB:BD:8F:C0:60:97:65:CA:A5
            X509v3 Authority Key Identifier:
                keyid:5C:A3:41:8C:8C:7C:A4:61:5E:84:AA:D4:D7:42:A5:C1:EC:34:5B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CA3418C8C7CA4615E84AAD4D742A5C1EC345B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QbFALBm5DY5jxXJcJkqX5WXGGjxGdbBRmoTChNSk4gt/0/3136382e39302e3133322e302f32342d3234203d3e20323635323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:af:b8:74:03:f3:f3:16:f4:17:0b:42:19:32:88:e2:25:
         26:26:01:2c:bd:aa:5b:00:38:e5:fc:f1:c7:d4:9a:a7:f2:14:
         aa:07:cf:89:40:10:13:05:a9:39:a5:85:6f:65:69:45:00:f3:
         97:31:b1:9d:d1:25:e9:c9:21:73:20:d0:94:f2:0d:36:5f:0c:
         49:37:c3:23:fe:fc:34:5e:2f:b9:b9:01:14:e2:3e:8c:a3:9b:
         45:12:85:f6:aa:c2:f8:fd:30:63:e9:b2:91:1d:33:59:a7:2e:
         6d:6c:54:1b:b4:b4:1c:92:2d:ea:4a:58:52:7c:35:c8:b5:6e:
         a6:30:1d:e1:a8:39:35:54:9c:e1:d4:00:37:8b:88:05:dc:d4:
         b5:5e:42:c9:74:36:7b:be:12:74:20:42:1a:80:d5:54:69:58:
         0f:bb:9c:c1:11:46:26:c3:72:3b:fc:f7:48:a1:02:37:f1:13:
         e7:d4:32:8f:f9:42:29:56:85:d7:f6:e6:bc:12:8f:8d:44:20:
         ab:eb:3d:8d:eb:b0:97:19:94:be:40:34:7f:15:10:92:33:a0:
         c7:c1:10:c6:38:3a:e2:4c:a8:6b:50:c1:cf:75:c9:a6:c5:d5:
         38:94:59:1e:02:96:76:fe:95:d3:cf:8d:73:9e:5d:e7:28:5d:
         a2:a3:79:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS1rv69O5eAQd9gvQzWhnLf1LwP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNBMzQxOEM4QzdDQTQ2MTVFODRBQUQ0RDc0MkE1QzFF
QzM0NUIxNzAeFw0yNDA3MTgxNTMxMDhaFw0yNTA3MTcxNTM2MDhaMDMxMTAvBgNV
BAMTKDc5OTdGQkY0NUNCRjIzRDI3NDQ1NzlDQkJEOEZDMDYwOTc2NUNBQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYqvt6FXX9ElO+cWNYinSIJTo
7xIcHBPVcL4vdO49s+Yj8VvLstDwFJTn9+XZismERW68mqelnVLOSPBNevtdTfoE
mELAdx6EDyOwearbDHAM5ykbqYViwJgLM4fZUT8pyNwAOqdt9opa2gEf/kQt6sXe
2mvOya/jc+gD3O5vogBT47j1GeuyLY+4l6KHp79Hf2fZ1cOaCw3Y7qt+lEuTJ6xt
zC0DNZ3imFTt8xPiS8BX2uJjYo/7clt0lBIjSM3arvIcCbTDn0Hlh3H6mUYBwa0T
mXk8a2LuD+fKlB2Gb6n3vjdp+kryMFv2uV/yI0+1J7vGS//4UPMJnn3s+/WXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeZf79Fy/I9J0RXnLvY/AYJdlyqUwHwYDVR0j
BBgwFoAUXKNBjIx8pGFehKrU10Klwew0WxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1FiRkFMQm01RFk1anhYSmNKa3FYNVdYR0dqeEdkYkJSbW9UQ2hOU2s0
Z3QvMC81Q0EzNDE4QzhDN0NBNDYxNUU4NEFBRDRENzQyQTVDMUVDMzQ1QjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVDQTM0MThDOEM3Q0E0NjE1
RTg0QUFENEQ3NDJBNUMxRUMzNDVCMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdRYkZBTEJtNURZNWp4WEpjSmtxWDVXWEdHanhHZGJCUm1vVENoTlNrNGd0LzAv
MzEzNjM4MmUzOTMwMmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACoWoQwDQYJKoZIhvcNAQELBQADggEBAIwFr7h0
A/PzFvQXC0IZMojiJSYmASy9qlsAOOX88cfUmqfyFKoHz4lAEBMFqTmlhW9laUUA
85cxsZ3RJenJIXMg0JTyDTZfDEk3wyP+/DReL7m5ARTiPoyjm0UShfaqwvj9MGPp
spEdM1mnLm1sVBu0tBySLepKWFJ8Nci1bqYwHeGoOTVUnOHUADeLiAXc1LVeQsl0
Nnu+EnQgQhqA1VRpWA+7nMERRibDcjv890ihAjfxE+fUMo/5QilWhdf25rwSj41E
IKvrPY3rsJcZlL5ANH8VEJIzoMfBEMY4OuJMqGtQwc91yabF1TiUWR4Clnb+ldPP
jXOeXecoXaKjeTU=
-----END CERTIFICATE-----
Generated at Sun Sep 22 19:35:17 2024 by rpki-client on console-fra.rpki-client.org