Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa
File:                     3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          9nqajrcwnI2m9vKvJj5fBCj5ioGDDzrCg82rfv0sLdI=
Subject key identifier:   0B:79:4A:96:01:04:D1:48:0B:94:28:BB:A2:78:03:23:6B:5F:A2:FD
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       55DD2D1D1B3A0016B414A738F160790E83476423
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        167.249.170.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:dd:2d:1d:1b:3a:00:16:b4:14:a7:38:f1:60:79:0e:83:47:64:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=0B794A960104D1480B9428BBA27803236B5FA2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:ee:de:58:55:53:74:0e:a2:0f:16:58:60:
                    c7:d0:24:a4:20:58:81:bc:9d:ea:25:1e:62:28:36:
                    0c:68:cb:b8:77:ce:48:7a:f4:15:9b:99:47:56:41:
                    9b:77:89:a6:80:61:08:55:dd:a9:34:16:ca:fe:b7:
                    0b:3c:67:7b:cc:54:5a:19:29:63:73:07:f6:29:c3:
                    2d:c9:dd:9b:7a:03:ad:ab:92:16:1a:49:3b:8d:55:
                    1e:98:8b:1c:a3:48:57:bb:34:95:85:bc:13:5c:b0:
                    d5:ea:7a:70:fe:4e:71:e7:81:88:2b:0c:75:25:eb:
                    8a:8d:e2:57:03:ad:90:8e:03:c1:dc:7e:22:51:e4:
                    9e:de:e2:ba:d0:c1:6c:1c:3c:2c:b9:d6:ef:8f:b9:
                    bb:33:a5:4e:64:5d:7f:14:f2:40:35:ee:35:7d:e8:
                    4a:73:f3:e2:da:24:f0:26:b7:66:13:0e:21:e9:e2:
                    99:0c:5d:e9:9c:fd:b3:fd:b9:86:6d:88:43:61:6c:
                    6c:1c:40:8f:cf:11:0c:c4:b7:17:08:ae:0d:8f:d6:
                    e2:86:d4:5e:a8:24:92:16:da:dc:44:7a:75:2c:d5:
                    03:9f:16:8c:e8:86:40:75:05:60:8b:84:79:92:00:
                    03:af:bb:b7:c7:4e:2e:3e:77:14:0b:03:cb:f8:08:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:4A:96:01:04:D1:48:0B:94:28:BB:A2:78:03:23:6B:5F:A2:FD
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3137302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:85:70:41:0b:5a:79:aa:f1:4b:b7:64:d4:5a:1d:2c:e0:0e:
         16:33:ff:b9:72:bc:ea:3a:a5:c4:ae:4a:f4:d9:67:41:9d:5a:
         6e:ff:01:d1:86:91:f9:94:d3:ac:ea:d3:f9:60:14:dc:8e:ff:
         46:15:65:47:2a:07:d7:d8:ee:f8:10:e3:27:e7:a0:8a:fd:3d:
         1e:29:67:c3:1f:00:7e:da:7d:7e:48:51:f6:09:b9:5b:d1:86:
         0e:80:56:ec:24:f4:15:e0:6f:95:9a:4c:d8:8f:a2:9b:c6:c1:
         26:b8:b0:b1:11:30:04:fc:12:9a:e3:98:51:d5:5d:18:d9:09:
         4a:2d:01:61:6d:d9:3f:bb:6a:a0:f7:d5:fd:78:16:99:ed:32:
         48:be:9a:a1:8c:ba:53:ba:95:25:2d:a2:42:4f:21:44:89:b8:
         c0:25:69:fe:e4:85:9f:ec:82:34:f7:7a:2b:11:17:b7:41:8a:
         1a:f1:4a:aa:7f:f9:05:3d:83:e1:e1:5d:e7:ef:cd:5f:d3:57:
         e0:25:dc:70:23:1b:9a:8c:d2:f8:c6:cd:29:ac:3c:dc:08:fb:
         94:d1:06:e6:b1:99:6e:3a:53:b3:30:3c:80:89:11:74:45:c9:
         8e:59:c1:d2:4b:7e:bb:62:0f:36:2c:7b:dc:bf:56:54:c5:7c:
         16:ac:b4:ed
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVd0tHRs6ABa0FKc48WB5DoNHZCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDA4NUQ1MjNDMTlFQjY5QzVGMDg2QUY3ODQ4RTM0QUJG
QzFENjdBOTAeFw0yNDA2MjUxMjEzNTVaFw0yNTA2MjQxMjE4NTVaMDMxMTAvBgNV
BAMTKDBCNzk0QTk2MDEwNEQxNDgwQjk0MjhCQkEyNzgwMzIzNkI1RkEyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXG+7eWFVTdA6iDxZYYMfQJKQg
WIG8neolHmIoNgxoy7h3zkh69BWbmUdWQZt3iaaAYQhV3ak0Fsr+tws8Z3vMVFoZ
KWNzB/Ypwy3J3Zt6A62rkhYaSTuNVR6YixyjSFe7NJWFvBNcsNXqenD+TnHngYgr
DHUl64qN4lcDrZCOA8HcfiJR5J7e4rrQwWwcPCy51u+PubszpU5kXX8U8kA17jV9
6Epz8+LaJPAmt2YTDiHp4pkMXemc/bP9uYZtiENhbGwcQI/PEQzEtxcIrg2P1uKG
1F6oJJIW2txEenUs1QOfFozohkB1BWCLhHmSAAOvu7fHTi4+dxQLA8v4CKyBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUC3lKlgEE0UgLlCi7ongDI2tfov0wHwYDVR0j
BBgwFoAUAIXVI8GetpxfCGr3hI40q/wdZ6kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC8wMDg1RDUyM0MxOUVCNjlDNUYwODZBRjc4NDhFMzRBQkZDMUQ2N0E5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAwODVENTIzQzE5RUI2OUM1
RjA4NkFGNzg0OEUzNEFCRkMxRDY3QTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzEzNjM3MmUzMjM0MzkyZTMxMzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKf5qjANBgkqhkiG9w0BAQsFAAOCAQEAG4Vw
QQtaearxS7dk1FodLOAOFjP/uXK86jqlxK5K9NlnQZ1abv8B0YaR+ZTTrOrT+WAU
3I7/RhVlRyoH19ju+BDjJ+egiv09Hilnwx8Aftp9fkhR9gm5W9GGDoBW7CT0FeBv
lZpM2I+im8bBJriwsREwBPwSmuOYUdVdGNkJSi0BYW3ZP7tqoPfV/XgWme0ySL6a
oYy6U7qVJS2iQk8hRIm4wCVp/uSFn+yCNPd6KxEXt0GKGvFKqn/5BT2D4eFd5+/N
X9NX4CXccCMbmozS+MbNKaw83Aj7lNEG5rGZbjpTszA8gIkRdEXJjlnB0kt+u2IP
Nix73L9WVMV8Fqy07Q==
-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org