Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa
File:                     3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          3UWFJA+ZISj7kouOAatCnLqny9N+0BvrWjLMdC7Ykzs=
Subject key identifier:   3C:DB:65:A4:92:24:23:E5:83:18:0F:1E:85:15:E9:FA:35:8B:2E:AF
Certificate issuer:       /CN=4A37933AEC7393FFCE6E23DD1727255F75948217
Certificate serial:       47D3E8D4ECF8A5DE67DF31309CC1F846B9DB2004
Authority key identifier: 4A:37:93:3A:EC:73:93:FF:CE:6E:23:DD:17:27:25:5F:75:94:82:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A37933AEC7393FFCE6E23DD1727255F75948217.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa
Signing time:             Tue 27 Jun 2023 20:46:19 +0000
ROA not before:           Tue 27 Jun 2023 20:41:19 +0000
ROA not after:            Tue 25 Jun 2024 20:46:19 +0000
asID:                     262316
IP address blocks:        167.250.152.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d3:e8:d4:ec:f8:a5:de:67:df:31:30:9c:c1:f8:46:b9:db:20:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A37933AEC7393FFCE6E23DD1727255F75948217
        Validity
            Not Before: Jun 27 20:41:19 2023 GMT
            Not After : Jun 25 20:46:19 2024 GMT
        Subject: CN=3CDB65A4922423E583180F1E8515E9FA358B2EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:fa:72:e4:37:9b:70:82:ee:c1:e8:00:6f:
                    b4:8f:3c:f9:57:c7:b3:5d:02:07:55:b6:02:d4:c0:
                    3b:38:81:10:30:b2:97:80:cd:33:b7:a5:cf:50:d2:
                    d5:f4:08:c2:14:e3:53:d1:16:3f:bc:86:b7:00:fc:
                    29:9b:d4:35:5b:4d:8d:f9:85:8d:ff:d1:81:c5:e0:
                    96:72:d0:d5:47:74:7b:a1:05:5f:e5:2f:7d:1f:5e:
                    da:fe:f0:be:ea:81:7b:67:49:5b:04:4f:07:8b:3f:
                    28:37:c0:89:54:3a:2d:7f:95:e0:cd:24:df:67:38:
                    39:05:69:ba:38:93:94:fe:8c:21:be:8f:18:0d:26:
                    1a:f8:69:91:69:23:3f:8c:36:65:b5:51:34:ae:75:
                    74:a4:48:07:de:f2:5b:dc:eb:25:d9:b8:a9:73:b1:
                    d3:c1:4c:6d:03:e9:f7:ef:61:70:4b:21:35:0b:9f:
                    b4:da:29:fc:8d:8b:a2:a3:7d:fc:43:ba:67:dc:ea:
                    c3:4a:c1:a2:83:91:95:da:cd:07:5b:3d:e6:ef:55:
                    d7:d4:a3:0f:a3:5f:5e:a2:3b:a1:a7:97:2a:aa:18:
                    74:5b:f0:d4:03:b9:63:fc:53:d4:09:f7:ec:96:31:
                    7a:aa:e0:19:83:b5:61:f8:35:60:7a:4a:5a:99:90:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DB:65:A4:92:24:23:E5:83:18:0F:1E:85:15:E9:FA:35:8B:2E:AF
            X509v3 Authority Key Identifier:
                keyid:4A:37:93:3A:EC:73:93:FF:CE:6E:23:DD:17:27:25:5F:75:94:82:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/4A37933AEC7393FFCE6E23DD1727255F75948217.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A37933AEC7393FFCE6E23DD1727255F75948217.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3136372e3235302e3135322e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:c2:c1:3a:0d:82:56:04:0c:7c:e7:64:15:46:77:ea:2a:
         ca:e5:9d:8c:60:aa:94:81:91:19:71:b0:10:c8:db:93:27:c0:
         6d:0e:27:2a:3b:77:e4:6c:0c:89:ec:7f:73:e7:07:28:18:e7:
         fe:39:4a:30:2e:5b:bf:ef:0b:d9:ad:31:c2:53:fa:88:45:ca:
         c8:b8:e9:6a:28:b3:52:a8:dc:9d:7d:cc:ad:69:76:3f:ff:f4:
         f6:3d:84:f2:6f:c3:d9:fc:99:6c:6b:5c:a5:24:35:80:25:e2:
         4e:46:d3:83:7e:23:6f:41:f6:1c:9d:24:6e:3c:20:a5:7d:4c:
         fc:bd:0d:44:ba:c2:e6:b8:b2:6f:bc:ab:86:32:f0:a4:30:08:
         30:3d:12:e3:da:dd:c2:c6:7f:bf:50:64:53:44:24:de:ed:50:
         bf:40:82:7e:95:ef:1a:d5:c6:91:eb:3e:d4:fd:b5:71:fa:86:
         f7:c1:7c:5e:6f:44:4a:52:97:b4:46:7f:c4:6e:36:ba:c3:2a:
         89:b4:aa:28:21:21:41:10:19:f5:62:f7:0e:bd:c1:37:9d:5e:
         5e:0a:3f:1e:02:3c:26:59:03:11:f5:bb:17:1d:52:ad:4f:ba:
         64:16:fb:24:42:d2:53:41:aa:3d:70:05:0c:7f:13:2f:77:ea:
         15:47:a2:de
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUR9Po1Oz4pd5n3zEwnMH4RrnbIAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEEzNzkzM0FFQzczOTNGRkNFNkUyM0REMTcyNzI1NUY3
NTk0ODIxNzAeFw0yMzA2MjcyMDQxMTlaFw0yNDA2MjUyMDQ2MTlaMDMxMTAvBgNV
BAMTKDNDREI2NUE0OTIyNDIzRTU4MzE4MEYxRTg1MTVFOUZBMzU4QjJFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL4fpy5DebcILuwegAb7SPPPlX
x7NdAgdVtgLUwDs4gRAwspeAzTO3pc9Q0tX0CMIU41PRFj+8hrcA/Cmb1DVbTY35
hY3/0YHF4JZy0NVHdHuhBV/lL30fXtr+8L7qgXtnSVsETweLPyg3wIlUOi1/leDN
JN9nODkFabo4k5T+jCG+jxgNJhr4aZFpIz+MNmW1UTSudXSkSAfe8lvc6yXZuKlz
sdPBTG0D6ffvYXBLITULn7TaKfyNi6KjffxDumfc6sNKwaKDkZXazQdbPebvVdfU
ow+jX16iO6GnlyqqGHRb8NQDuWP8U9QJ9+yWMXqq4BmDtWH4NWB6SlqZkCnlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPNtlpJIkI+WDGA8ehRXp+jWLLq8wHwYDVR0j
BBgwFoAUSjeTOuxzk//ObiPdFyclX3WUghcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC80QTM3OTMzQUVDNzM5M0ZGQ0U2RTIzREQxNzI3MjU1Rjc1OTQ4MjE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBMzc5MzNBRUM3MzkzRkZD
RTZFMjNERDE3MjcyNTVGNzU5NDgyMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNjM3MmUzMjM1MzAyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqf6mDANBgkqhkiG9w0BAQsFAAOCAQEAnnPC
wToNglYEDHznZBVGd+oqyuWdjGCqlIGRGXGwEMjbkyfAbQ4nKjt35GwMiex/c+cH
KBjn/jlKMC5bv+8L2a0xwlP6iEXKyLjpaiizUqjcnX3MrWl2P//09j2E8m/D2fyZ
bGtcpSQ1gCXiTkbTg34jb0H2HJ0kbjwgpX1M/L0NRLrC5riyb7yrhjLwpDAIMD0S
49rdwsZ/v1BkU0Qk3u1Qv0CCfpXvGtXGkes+1P21cfqG98F8Xm9ESlKXtEZ/xG42
usMqibSqKCEhQRAZ9WL3Dr3BN51eXgo/HgI8JlkDEfW7Fx1SrU+6ZBb7JELSU0Gq
PXAFDH8TL3fqFUei3g==
-----END CERTIFICATE-----
Generated at Mon Aug 14 07:49:35 2023 by rpki-client on console-fra.rpki-client.org