Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32332d3233203d3e20323635303631.roa
File:                     3137302e3233312e35382e302f32332d3233203d3e20323635303631.roa (raw, json)
Hash identifier:          tmurvXH8xxpZaRJ1fEOmQYti/8T19KmkwH9j3h6R280=
Subject key identifier:   F9:27:40:45:26:E8:AE:28:85:5E:C0:CC:01:33:43:3D:62:5D:63:75
Certificate issuer:       /CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
Certificate serial:       2182803517A508D5310971D175AE4BB43F0C9F5B
Authority key identifier: 34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32332d3233203d3e20323635303631.roa
Signing time:             Tue 28 Mar 2023 14:47:53 +0000
ROA not before:           Tue 28 Mar 2023 14:42:53 +0000
ROA not after:            Tue 26 Mar 2024 14:47:53 +0000
asID:                     265061
IP address blocks:        170.231.58.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:82:80:35:17:a5:08:d5:31:09:71:d1:75:ae:4b:b4:3f:0c:9f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3494EAAED32893449A2D1041487BFE2C13F32DA8
        Validity
            Not Before: Mar 28 14:42:53 2023 GMT
            Not After : Mar 26 14:47:53 2024 GMT
        Subject: CN=F927404526E8AE28855EC0CC0133433D625D6375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:37:b4:cb:9f:bb:4a:a3:90:06:e8:7c:fb:
                    dd:0b:65:d3:68:cd:07:58:55:46:f4:b5:22:3d:b7:
                    d1:d5:27:85:e8:f0:39:d5:52:d2:c6:03:80:67:88:
                    d6:a8:e0:22:01:ef:f4:a0:34:7a:15:17:d2:2a:2d:
                    6b:26:83:7c:92:82:1a:05:f2:3c:02:01:6d:ad:8d:
                    4f:81:9f:7c:5a:0c:8d:b0:89:35:d0:c4:4e:3b:7a:
                    e4:41:fe:6b:9b:0d:9e:c1:30:63:78:37:06:8a:e4:
                    ee:f5:36:99:18:a5:55:0a:97:31:a8:89:d9:44:24:
                    fe:c6:9c:e6:a0:f2:4d:3a:d3:eb:c6:0e:5a:9c:b1:
                    ae:54:e8:47:3c:d0:3b:df:90:84:be:e9:95:cb:90:
                    4e:0b:dc:b7:50:47:8d:e8:5f:e3:9a:fa:74:95:6f:
                    d4:8c:e4:c5:64:73:70:89:b6:19:ac:94:e8:42:7a:
                    71:a5:4b:61:f9:de:47:73:ae:17:34:80:6f:2b:fb:
                    54:8f:9c:8a:3a:5f:34:6e:90:90:ed:de:99:f9:88:
                    bf:de:52:28:5b:b6:3b:7f:1d:8c:4e:1e:41:68:04:
                    13:1c:a8:f0:8c:65:86:fb:fb:27:c2:37:99:a8:c6:
                    24:02:da:4c:34:69:a0:09:6e:72:a2:13:ab:57:71:
                    d8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:27:40:45:26:E8:AE:28:85:5E:C0:CC:01:33:43:3D:62:5D:63:75
            X509v3 Authority Key Identifier:
                keyid:34:94:EA:AE:D3:28:93:44:9A:2D:10:41:48:7B:FE:2C:13:F3:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3494EAAED32893449A2D1041487BFE2C13F32DA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/0/3137302e3233312e35382e302f32332d3233203d3e20323635303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:03:9b:ec:f5:bf:b1:0d:c3:48:07:4f:c8:4e:e0:aa:93:
         92:e5:e0:ba:0b:c2:66:37:09:c9:dc:43:57:22:7c:f4:28:b5:
         7d:73:57:66:64:32:5f:b8:16:ec:71:f5:9e:d9:fd:99:6b:3e:
         5e:7a:ae:e7:d2:e2:0f:bb:ab:3f:a9:28:cc:18:63:a8:47:cf:
         2b:b3:36:b7:4e:f9:8f:08:86:b1:fc:1c:19:26:3e:72:75:f1:
         f5:e4:2f:c3:7b:53:84:34:0f:69:cd:9d:d3:5e:00:a6:db:7d:
         d7:02:52:50:f2:f7:b5:d2:9c:ce:d2:5c:82:5e:b8:f3:6c:df:
         06:08:f0:a3:b8:1d:01:67:f2:44:66:e9:f9:de:f0:ae:0e:a1:
         cb:95:62:f4:05:c2:b1:c7:80:02:68:54:1d:5d:71:67:c8:a6:
         6b:07:cb:23:58:f3:9e:bb:f1:0b:87:d4:48:5a:d0:82:21:1f:
         f8:3a:ab:95:3b:53:9b:bd:cc:bc:a1:e1:3c:f6:53:4e:38:8a:
         cf:95:b3:20:d2:0c:41:42:cf:d8:fc:66:da:9a:30:d2:4e:96:
         1a:17:4d:4f:5e:72:da:d9:bb:b2:cb:d6:7a:25:fc:0e:3a:e7:
         6e:b0:11:c6:78:db:70:e1:92:e5:94:d9:4d:97:7e:10:76:a5:
         7c:0f:68:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIYKANRelCNUxCXHRda5LtD8Mn1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ5NEVBQUVEMzI4OTM0NDlBMkQxMDQxNDg3QkZFMkMx
M0YzMkRBODAeFw0yMzAzMjgxNDQyNTNaFw0yNDAzMjYxNDQ3NTNaMDMxMTAvBgNV
BAMTKEY5Mjc0MDQ1MjZFOEFFMjg4NTVFQzBDQzAxMzM0MzNENjI1RDYzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyDe0y5+7SqOQBuh8+90LZdNo
zQdYVUb0tSI9t9HVJ4Xo8DnVUtLGA4BniNao4CIB7/SgNHoVF9IqLWsmg3ySghoF
8jwCAW2tjU+Bn3xaDI2wiTXQxE47euRB/mubDZ7BMGN4NwaK5O71NpkYpVUKlzGo
idlEJP7GnOag8k060+vGDlqcsa5U6Ec80DvfkIS+6ZXLkE4L3LdQR43oX+Oa+nSV
b9SM5MVkc3CJthmslOhCenGlS2H53kdzrhc0gG8r+1SPnIo6XzRukJDt3pn5iL/e
Uihbtjt/HYxOHkFoBBMcqPCMZYb7+yfCN5moxiQC2kw0aaAJbnKiE6tXcdg1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+SdARSboriiFXsDMATNDPWJdY3UwHwYDVR0j
BBgwFoAUNJTqrtMok0SaLRBBSHv+LBPzLagwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1VRMmNvY1B3ZFFuRjZHM0txYnoxTEZ5RG5XYTFYRGVuVzJzb01UMTZw
Z2IvMC8zNDk0RUFBRUQzMjg5MzQ0OUEyRDEwNDE0ODdCRkUyQzEzRjMyREE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0OTRFQUFFRDMyODkzNDQ5
QTJEMTA0MTQ4N0JGRTJDMTNGMzJEQTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdVUTJjb2NQd2RRbkY2RzNLcWJ6MUxGeURuV2ExWERlblcyc29NVDE2cGdiLzAv
MzEzNzMwMmUzMjMzMzEyZTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGq5zowDQYJKoZIhvcNAQELBQADggEBAIjPA5vs
9b+xDcNIB0/ITuCqk5Ll4LoLwmY3CcncQ1cifPQotX1zV2ZkMl+4Fuxx9Z7Z/Zlr
Pl56rufS4g+7qz+pKMwYY6hHzyuzNrdO+Y8IhrH8HBkmPnJ18fXkL8N7U4Q0D2nN
ndNeAKbbfdcCUlDy97XSnM7SXIJeuPNs3wYI8KO4HQFn8kRm6fne8K4OocuVYvQF
wrHHgAJoVB1dcWfIpmsHyyNY85678QuH1Eha0IIhH/g6q5U7U5u9zLyh4Tz2U044
is+VsyDSDEFCz9j8ZtqaMNJOlhoXTU9ectrZu7LL1nol/A46526wEcZ423DhkuWU
2U2XfhB2pXwPaPg=
-----END CERTIFICATE-----
Generated at Wed Feb 28 11:44:36 2024 by rpki-client on console-fra.rpki-client.org