Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa
File:                     3138372e38352e3133302e302f32332d3233203d3e203533303631.roa (raw, json)
Hash identifier:          Tg4Kfmu4LXnje32j8e+TxUvDvV6999xkl1Bsz2bgnCc=
Subject key identifier:   D9:57:79:69:94:39:3C:59:F4:C0:12:AB:A8:60:55:CC:00:9C:FF:E5
Certificate issuer:       /CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
Certificate serial:       26208356498177A31AB22F4A4657CD1087AF5C4B
Authority key identifier: F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa
Signing time:             Thu 04 Apr 2024 19:52:52 +0000
ROA not before:           Thu 04 Apr 2024 19:47:52 +0000
ROA not after:            Thu 03 Apr 2025 19:52:52 +0000
asID:                     53061
IP address blocks:        187.85.130.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:20:83:56:49:81:77:a3:1a:b2:2f:4a:46:57:cd:10:87:af:5c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4350D0F7940D2C9E193A27C0A14B651396141D6
        Validity
            Not Before: Apr  4 19:47:52 2024 GMT
            Not After : Apr  3 19:52:52 2025 GMT
        Subject: CN=D957796994393C59F4C012ABA86055CC009CFFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:97:da:ab:97:6c:c9:ec:be:1a:b3:d7:32:
                    2b:17:89:2c:c7:bf:dd:75:21:dc:b5:c5:73:18:08:
                    a2:1d:1e:9a:a4:a9:7d:26:4c:9d:96:a2:ac:f4:2e:
                    be:8c:1c:fe:f9:5b:a0:69:c7:2a:da:fd:a3:48:61:
                    c8:52:1f:8e:c3:a1:b9:21:12:b1:4e:15:78:fe:0a:
                    79:82:79:cf:43:8d:2e:b0:a4:8a:a3:0e:ed:d1:66:
                    ec:54:73:4b:20:b4:5d:f4:fb:b7:74:a5:7b:42:8c:
                    d4:56:3a:76:24:c2:42:5b:52:7f:11:27:78:60:9f:
                    99:05:4e:d5:89:3f:12:5d:d7:c1:a0:ea:e9:37:3d:
                    b6:3a:64:29:7e:3c:bd:10:1b:5d:6f:da:0e:ec:e9:
                    91:24:04:54:0d:0e:83:46:51:ab:da:ea:a6:1c:00:
                    1b:94:a0:8b:9a:c3:52:8f:59:eb:ce:d9:1f:ab:0e:
                    bb:ab:13:66:68:f9:f6:92:3a:6e:4f:84:35:5a:5e:
                    ac:00:b8:97:93:67:01:84:25:60:38:6b:4a:c5:d4:
                    d1:db:27:7a:07:07:cd:94:51:c5:82:bd:5d:49:25:
                    c2:11:2c:84:b7:65:ff:d9:84:08:8a:2a:3a:e8:89:
                    1b:a8:70:82:36:40:2d:7e:4c:3b:03:9d:4b:d8:7f:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:57:79:69:94:39:3C:59:F4:C0:12:AB:A8:60:55:CC:00:9C:FF:E5
            X509v3 Authority Key Identifier:
                keyid:F4:35:0D:0F:79:40:D2:C9:E1:93:A2:7C:0A:14:B6:51:39:61:41:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4350D0F7940D2C9E193A27C0A14B651396141D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/1/3138372e38352e3133302e302f32332d3233203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:f4:72:ea:4f:dd:ef:7e:68:da:0e:6b:02:d7:21:cd:62:
         27:c3:cd:b4:56:79:5c:80:e2:b7:35:62:95:6f:44:6e:2f:47:
         c5:02:ec:54:dc:82:b0:3f:8b:94:be:23:c2:90:cb:59:29:81:
         57:71:9d:d4:25:ec:81:16:84:51:4b:ac:4b:c5:0a:43:d4:d2:
         fd:e6:2a:be:dc:f1:67:fd:32:46:e5:ea:b3:52:ea:74:16:8b:
         89:4c:d6:a7:d9:c6:14:5f:b8:3d:c5:75:50:16:e2:1f:d5:b6:
         4c:97:ee:1b:47:b2:e3:9f:db:1a:9a:fb:59:c2:f0:5d:d1:1f:
         34:c7:b9:66:b1:8f:04:9e:fa:2b:22:20:f9:e2:4a:fd:f3:e8:
         6b:26:66:19:a4:81:3d:8e:3d:e5:8d:6d:5e:ce:74:ca:55:ae:
         00:43:cb:1c:71:4b:30:5f:8d:d0:4b:18:99:fd:8b:79:68:41:
         01:c4:a9:86:46:0c:27:21:e6:31:33:c0:dc:33:a4:04:50:5e:
         19:dd:70:aa:04:ff:39:17:a3:10:68:d9:e8:33:01:9c:0c:fe:
         30:00:78:e2:07:88:30:94:aa:24:60:89:69:4e:3a:06:c3:2c:
         dc:fe:68:5e:f6:5e:16:60:48:c4:7b:27:eb:62:2f:7e:32:b1:
         78:8b:14:ce
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJiCDVkmBd6Masi9KRlfNEIevXEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQzNTBEMEY3OTQwRDJDOUUxOTNBMjdDMEExNEI2NTEz
OTYxNDFENjAeFw0yNDA0MDQxOTQ3NTJaFw0yNTA0MDMxOTUyNTJaMDMxMTAvBgNV
BAMTKEQ5NTc3OTY5OTQzOTNDNTlGNEMwMTJBQkE4NjA1NUNDMDA5Q0ZGRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPJfaq5dsyey+GrPXMisXiSzH
v911Idy1xXMYCKIdHpqkqX0mTJ2Woqz0Lr6MHP75W6Bpxyra/aNIYchSH47Dobkh
ErFOFXj+CnmCec9DjS6wpIqjDu3RZuxUc0sgtF30+7d0pXtCjNRWOnYkwkJbUn8R
J3hgn5kFTtWJPxJd18Gg6uk3PbY6ZCl+PL0QG11v2g7s6ZEkBFQNDoNGUava6qYc
ABuUoIuaw1KPWevO2R+rDrurE2Zo+faSOm5PhDVaXqwAuJeTZwGEJWA4a0rF1NHb
J3oHB82UUcWCvV1JJcIRLIS3Zf/ZhAiKKjroiRuocII2QC1+TDsDnUvYf4a9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2Vd5aZQ5PFn0wBKrqGBVzACc/+UwHwYDVR0j
BBgwFoAU9DUND3lA0snhk6J8ChS2UTlhQdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JabldkNlkzNWN0YzNhWGR4V1V4dmZBNTFyVDFDajhENXpIdHVLNzJ0
OWMvMS9GNDM1MEQwRjc5NDBEMkM5RTE5M0EyN0MwQTE0QjY1MTM5NjE0MUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0MzUwRDBGNzk0MEQyQzlF
MTkzQTI3QzBBMTRCNjUxMzk2MTQxRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiWm5XZDZZMzVjdGMzYVhkeFdVeHZmQTUxclQxQ2o4RDV6SHR1SzcydDljLzEv
MzEzODM3MmUzODM1MmUzMTMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBu1WCMA0GCSqGSIb3DQEBCwUAA4IBAQALVfRy6k/d
735o2g5rAtchzWInw820VnlcgOK3NWKVb0RuL0fFAuxU3IKwP4uUviPCkMtZKYFX
cZ3UJeyBFoRRS6xLxQpD1NL95iq+3PFn/TJG5eqzUup0FouJTNan2cYUX7g9xXVQ
FuIf1bZMl+4bR7Ljn9samvtZwvBd0R80x7lmsY8EnvorIiD54kr98+hrJmYZpIE9
jj3ljW1eznTKVa4AQ8sccUswX43QSxiZ/Yt5aEEBxKmGRgwnIeYxM8DcM6QEUF4Z
3XCqBP85F6MQaNnoMwGcDP4wAHjiB4gwlKokYIlpTjoGwyzc/mhe9l4WYEjEeyfr
Yi9+MrF4ixTO
-----END CERTIFICATE-----
Generated at Wed Jul 3 11:06:33 2024 by rpki-client on console-fra.rpki-client.org