Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa
File:                     3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          Yg0zhF99S/L7Jd2DYWcKJR+PZszxNiBL8D3u2aQiG54=
Subject key identifier:   94:1C:C4:45:88:B3:C9:23:46:9A:BA:2B:6D:DA:E6:5D:5D:21:D4:5F
Certificate issuer:       /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial:       5E6DBF6ED7AAD538FFFD9486F752A064B008A94D
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa
Signing time:             Mon 28 Oct 2024 14:40:57 +0000
ROA not before:           Mon 28 Oct 2024 14:35:57 +0000
ROA not after:            Mon 27 Oct 2025 14:40:57 +0000
asID:                     267388
IP address blocks:        132.255.46.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6d:bf:6e:d7:aa:d5:38:ff:fd:94:86:f7:52:a0:64:b0:08:a9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
        Validity
            Not Before: Oct 28 14:35:57 2024 GMT
            Not After : Oct 27 14:40:57 2025 GMT
        Subject: CN=941CC44588B3C923469ABA2B6DDAE65D5D21D45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:67:29:96:94:f6:70:0c:f2:69:2e:58:8e:
                    07:10:cc:7a:b5:11:f3:d7:71:e0:5f:8f:e9:73:bd:
                    a8:6e:02:3c:6f:fa:be:f0:63:04:3c:61:cd:f3:2a:
                    60:85:bc:0d:d4:b6:bb:ce:7b:03:50:13:b5:5e:49:
                    f7:b4:ac:71:59:c5:db:e1:c9:d5:f5:fa:58:1e:68:
                    82:3f:77:f5:80:61:a7:48:02:35:d0:95:73:44:b2:
                    20:05:06:e0:17:b4:e5:dd:6a:a7:15:4d:13:c9:1c:
                    18:27:b7:3f:ee:fc:3b:1c:14:20:55:cf:c2:8e:a3:
                    0e:29:fa:8c:0d:0f:50:f9:86:cf:ee:e3:81:32:9b:
                    c4:93:88:c3:83:0b:a1:f8:73:b0:06:b1:31:31:c4:
                    74:21:3c:df:c1:00:dc:09:d6:95:0f:01:b2:dd:71:
                    d2:8e:9f:d1:07:3e:51:72:50:43:25:06:7b:b5:51:
                    6e:f9:d7:6e:89:41:45:c5:9c:2a:32:2a:c2:50:b4:
                    a6:07:00:66:53:23:4d:3e:b7:b8:a7:bc:29:97:f4:
                    65:03:55:bf:90:fc:f5:07:ab:36:58:e3:e4:c2:ff:
                    c6:22:0c:0d:18:50:d9:0a:af:c2:8a:11:29:ae:b0:
                    4a:b1:4c:ae:8d:da:13:57:53:61:0e:b6:50:be:d4:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:C4:45:88:B3:C9:23:46:9A:BA:2B:6D:DA:E6:5D:5D:21:D4:5F
            X509v3 Authority Key Identifier:
                keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/3133322e3235352e34362e302f32342d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:8a:59:2a:c0:93:8e:3f:aa:43:21:1e:92:15:69:c4:80:
         aa:52:92:49:1b:b8:3d:c0:3b:e6:17:b1:77:22:4c:d4:e9:de:
         63:1d:52:aa:0b:ce:2e:3c:3c:8d:2c:8c:99:8a:96:6c:02:c2:
         a9:3f:b1:59:87:a5:34:19:fe:0b:3d:59:45:38:33:bc:c8:7e:
         e0:93:8e:58:ac:b0:f6:85:f7:38:83:06:6c:f4:11:db:57:6a:
         c5:7b:ec:cd:60:7a:47:5b:00:e4:30:60:82:cd:f6:97:55:1a:
         9f:b9:a2:43:d4:b5:f9:4d:b4:2a:27:a0:19:50:76:43:ae:f8:
         e3:1e:7a:f6:7f:c5:fc:0f:49:54:7f:45:45:f9:dd:03:ff:00:
         9e:ff:11:90:6d:39:a6:9d:4a:90:2d:6c:40:71:a0:5f:a0:43:
         5c:70:38:4e:76:c0:c8:08:6f:9e:9a:b7:38:e5:c2:4c:22:fc:
         d3:fd:3c:f8:d0:e8:2e:8a:6a:f7:4c:61:c6:e1:62:fd:f3:6a:
         0a:16:b3:85:bb:43:92:41:fb:5a:f5:3d:46:06:cf:04:40:8b:
         a9:d2:9a:4c:f9:b2:3e:73:45:69:6c:dd:0c:6d:19:36:4d:9b:
         66:7d:01:96:4f:04:ac:2a:65:61:36:d6:7d:99:79:46:55:8f:
         cc:95:ae:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXm2/bteq1Tj//ZSG91KgZLAIqU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ2RDVBNTQzMEI2RjVGMDhCMkIwMEEwNkI5MUI5QzRC
QUJEQUE1MjAeFw0yNDEwMjgxNDM1NTdaFw0yNTEwMjcxNDQwNTdaMDMxMTAvBgNV
BAMTKDk0MUNDNDQ1ODhCM0M5MjM0NjlBQkEyQjZEREFFNjVENUQyMUQ0NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJX2cplpT2cAzyaS5YjgcQzHq1
EfPXceBfj+lzvahuAjxv+r7wYwQ8Yc3zKmCFvA3UtrvOewNQE7VeSfe0rHFZxdvh
ydX1+lgeaII/d/WAYadIAjXQlXNEsiAFBuAXtOXdaqcVTRPJHBgntz/u/DscFCBV
z8KOow4p+owND1D5hs/u44Eym8STiMODC6H4c7AGsTExxHQhPN/BANwJ1pUPAbLd
cdKOn9EHPlFyUEMlBnu1UW75126JQUXFnCoyKsJQtKYHAGZTI00+t7invCmX9GUD
Vb+Q/PUHqzZY4+TC/8YiDA0YUNkKr8KKESmusEqxTK6N2hNXU2EOtlC+1N7RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlBzERYizySNGmrorbdrmXV0h1F8wHwYDVR0j
BBgwFoAUTW1aVDC29fCLKwCga5G5xLq9qlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC80RDZENUE1NDMwQjZGNUYwOEIyQjAwQTA2QjkxQjlDNEJBQkRBQTUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRENkQ1QTU0MzBCNkY1RjA4
QjJCMDBBMDZCOTFCOUM0QkFCREFBNTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzEzMzMyMmUzMjM1MzUyZTM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACE/y4wDQYJKoZIhvcNAQELBQADggEBAB61ilkq
wJOOP6pDIR6SFWnEgKpSkkkbuD3AO+YXsXciTNTp3mMdUqoLzi48PI0sjJmKlmwC
wqk/sVmHpTQZ/gs9WUU4M7zIfuCTjlissPaF9ziDBmz0EdtXasV77M1gekdbAOQw
YILN9pdVGp+5okPUtflNtConoBlQdkOu+OMeevZ/xfwPSVR/RUX53QP/AJ7/EZBt
OaadSpAtbEBxoF+gQ1xwOE52wMgIb56atzjlwkwi/NP9PPjQ6C6KavdMYcbhYv3z
agoWs4W7Q5JB+1r1PUYGzwRAi6nSmkz5sj5zRWls3QxtGTZNm2Z9AZZPBKwqZWE2
1n2ZeUZVj8yVrnM=
-----END CERTIFICATE-----
Generated at Sun Nov 10 22:35:44 2024 by rpki-client on console-ams.rpki-client.org