Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa
File:                     3138372e38352e3132382e302f32302d3230203d3e203533303631.roa (raw, json)
Hash identifier:          4yX/hbQnDkINU0PAyjwCLnJIF4a+SNcteMCD0N7tbTQ=
Subject key identifier:   CC:FB:3B:90:AF:50:8C:64:A6:24:82:8C:74:C4:98:44:ED:0D:FC:A1
Certificate issuer:       /CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
Certificate serial:       4A14794244673C24C656891CC9C383E2B506DC2C
Authority key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa
Signing time:             Thu 04 Apr 2024 19:52:53 +0000
ROA not before:           Thu 04 Apr 2024 19:47:53 +0000
ROA not after:            Thu 03 Apr 2025 19:52:53 +0000
asID:                     53061
IP address blocks:        187.85.128.0/20 maxlen: 20

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:14:79:42:44:67:3c:24:c6:56:89:1c:c9:c3:83:e2:b5:06:dc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Validity
            Not Before: Apr  4 19:47:53 2024 GMT
            Not After : Apr  3 19:52:53 2025 GMT
        Subject: CN=CCFB3B90AF508C64A624828C74C49844ED0DFCA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:92:f1:6b:f3:b4:76:34:36:bd:f8:c8:a6:
                    ed:89:10:30:92:06:30:d4:9f:a7:dc:48:16:43:62:
                    74:f1:6c:9e:20:90:15:39:40:5e:55:1a:2d:ee:37:
                    92:d4:52:bc:b7:e5:e6:b8:7c:fd:e8:42:42:9e:97:
                    05:5e:f8:9d:b8:80:30:f3:04:c9:e5:7d:4b:e0:7a:
                    5d:0b:9b:c1:5c:2f:48:77:f5:be:75:e8:40:ed:e8:
                    95:00:3a:53:18:8c:96:0f:4d:41:56:b1:29:0a:95:
                    74:e1:ca:c1:da:95:83:58:f4:6b:60:63:cd:08:cb:
                    4d:f9:ac:26:07:d2:e2:c4:1c:5b:e7:f1:93:ea:cc:
                    2b:7e:ba:94:c2:c2:65:74:77:24:35:1c:46:bf:e9:
                    2a:e2:e3:b7:db:88:81:e9:8f:f4:85:02:b0:f8:1c:
                    b1:90:3a:bd:a6:4e:6a:42:3f:90:13:79:6f:a4:ce:
                    e7:a4:bf:b5:b8:ce:14:78:07:8b:4b:90:99:ee:4f:
                    05:28:d1:fe:b2:2a:32:69:72:bd:85:28:ae:0a:fe:
                    91:41:f0:94:dd:6b:a9:8d:b4:9e:02:64:a1:f3:4b:
                    27:95:69:0d:2b:6b:e1:5a:35:66:e4:89:44:d6:ad:
                    3f:cd:4f:b2:72:40:6a:72:97:ff:f8:67:18:e4:66:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:3B:90:AF:50:8C:64:A6:24:82:8C:74:C4:98:44:ED:0D:FC:A1
            X509v3 Authority Key Identifier:
                keyid:F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3132382e302f32302d3230203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:e4:45:dc:8d:10:aa:e4:16:1e:50:1b:d4:a8:9e:67:1f:
         e5:1d:5f:5d:4c:49:e7:43:ae:12:2b:c9:d5:48:d3:03:a0:41:
         d3:2d:63:d5:45:ec:b1:4a:df:55:02:b2:85:50:fc:45:7b:7e:
         bb:73:60:ee:17:c6:68:46:ff:f3:a8:ca:2d:d3:f7:1b:0d:5a:
         04:8b:31:53:73:f1:22:92:74:87:93:9a:67:3a:2e:e1:92:b2:
         c8:9d:4d:54:82:17:f2:a7:19:fa:1e:f3:b8:55:d9:b7:bb:e5:
         99:d8:69:26:17:bd:f7:5f:2d:fc:ee:2f:d9:8e:6d:91:2a:23:
         c8:d2:48:44:68:1c:f7:f8:2d:2b:e9:82:d2:39:40:16:82:a1:
         e0:fe:a4:0a:d8:c1:48:e5:70:85:42:8b:44:93:f6:df:a1:03:
         3a:ad:f9:23:95:94:66:32:08:97:f2:3e:0f:be:1a:2e:c1:8f:
         d0:96:83:19:1f:8d:9b:7f:e5:9c:49:bd:f2:cf:2e:48:91:de:
         8a:63:d2:4f:9f:a2:4a:da:7c:59:57:d8:ee:b2:3a:03:3e:39:
         91:87:49:96:20:bc:f0:15:da:43:9d:7a:15:9c:50:99:b6:2a:
         8c:93:f2:f7:3a:80:8c:06:77:0f:97:0c:81:81:ba:0c:0a:74:
         42:5d:b7:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUShR5QkRnPCTGVokcycOD4rUG3CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQzNTBEMEY3OTQwRDJDOUUxOTNBMjdDMEExNEI2NTEz
OTYxNDFENjAeFw0yNDA0MDQxOTQ3NTNaFw0yNTA0MDMxOTUyNTNaMDMxMTAvBgNV
BAMTKENDRkIzQjkwQUY1MDhDNjRBNjI0ODI4Qzc0QzQ5ODQ0RUQwREZDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwvpLxa/O0djQ2vfjIpu2JEDCS
BjDUn6fcSBZDYnTxbJ4gkBU5QF5VGi3uN5LUUry35ea4fP3oQkKelwVe+J24gDDz
BMnlfUvgel0Lm8FcL0h39b516EDt6JUAOlMYjJYPTUFWsSkKlXThysHalYNY9Gtg
Y80Iy035rCYH0uLEHFvn8ZPqzCt+upTCwmV0dyQ1HEa/6Sri47fbiIHpj/SFArD4
HLGQOr2mTmpCP5ATeW+kzuekv7W4zhR4B4tLkJnuTwUo0f6yKjJpcr2FKK4K/pFB
8JTda6mNtJ4CZKHzSyeVaQ0ra+FaNWbkiUTWrT/NT7JyQGpyl//4ZxjkZpJBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzPs7kK9QjGSmJIKMdMSYRO0N/KEwHwYDVR0j
BBgwFoAU9DUND3lA0snhk6J8ChS2UTlhQdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMS9GNDM1MEQwRjc5NDBEMkM5RTE5M0EyN0MwQTE0QjY1MTM5NjE0MUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzUwRDBGNzk0MEQyQzlF
MTkzQTI3QzBBMTRCNjUxMzk2MTQxRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzEv
MzEzODM3MmUzODM1MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu1WAMA0GCSqGSIb3DQEBCwUAA4IBAQB3DeRF3I0Q
quQWHlAb1KieZx/lHV9dTEnnQ64SK8nVSNMDoEHTLWPVReyxSt9VArKFUPxFe367
c2DuF8ZoRv/zqMot0/cbDVoEizFTc/EiknSHk5pnOi7hkrLInU1Ughfypxn6HvO4
Vdm3u+WZ2GkmF733Xy387i/Zjm2RKiPI0khEaBz3+C0r6YLSOUAWgqHg/qQK2MFI
5XCFQotEk/bfoQM6rfkjlZRmMgiX8j4PvhouwY/QloMZH42bf+WcSb3yzy5Ikd6K
Y9JPn6JK2nxZV9jusjoDPjmRh0mWILzwFdpDnXoVnFCZtiqMk/L3OoCMBncPlwyB
gboMCnRCXbfa
-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org