Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3234203d3e20323634393833.roa
File:                     3137302e302e3233362e302f32322d3234203d3e20323634393833.roa (raw, json)
Hash identifier:          sP4OGAp094jNRItKmEeaiw63MUqzd+gcstRr95+X77E=
Subject key identifier:   AB:DF:CE:81:3A:19:2E:DC:9A:D5:97:D4:09:80:DD:E0:5B:AB:03:B4
Certificate issuer:       /CN=8353A54CD0F063F40A00ECF155063FC7DAB8DF64
Certificate serial:       239C695B3D7EFA0C7BEE615429CC8F9129C4F785
Authority key identifier: 83:53:A5:4C:D0:F0:63:F4:0A:00:EC:F1:55:06:3F:C7:DA:B8:DF:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3234203d3e20323634393833.roa
Signing time:             Thu 29 Aug 2024 18:51:47 +0000
ROA not before:           Thu 29 Aug 2024 18:46:47 +0000
ROA not after:            Thu 28 Aug 2025 18:51:47 +0000
asID:                     264983
IP address blocks:        170.0.236.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9c:69:5b:3d:7e:fa:0c:7b:ee:61:54:29:cc:8f:91:29:c4:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353A54CD0F063F40A00ECF155063FC7DAB8DF64
        Validity
            Not Before: Aug 29 18:46:47 2024 GMT
            Not After : Aug 28 18:51:47 2025 GMT
        Subject: CN=ABDFCE813A192EDC9AD597D40980DDE05BAB03B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:8a:4f:bd:d6:24:77:f0:7d:f7:e5:c8:f0:
                    b9:4b:90:56:66:f5:a2:5a:7a:52:54:18:c1:38:fd:
                    84:13:b5:52:95:d4:33:1a:4e:2d:15:8c:92:35:33:
                    49:36:f3:b6:ee:66:e7:a6:50:b3:fc:0e:54:c7:1d:
                    e3:d5:47:99:ad:d0:75:06:e7:33:62:ad:78:a3:8c:
                    dc:73:95:54:76:41:44:92:b6:43:25:3d:86:70:0f:
                    5b:08:9e:f7:ea:54:d7:45:8f:4c:35:a2:2c:d2:a9:
                    08:86:67:b9:d9:54:2f:e2:c9:b4:03:64:a5:a8:78:
                    58:6a:eb:e9:39:3e:d7:08:f0:cb:b4:6b:5a:8e:3b:
                    4a:20:54:f8:0d:e4:3c:42:20:0f:79:6c:0d:6d:df:
                    78:69:9a:9f:8f:9d:62:3c:00:43:67:ee:ae:80:2d:
                    ef:e7:98:5c:ca:35:6b:fa:0d:e5:b8:62:33:aa:68:
                    db:a6:b1:68:6d:8b:64:62:cf:65:40:ba:9f:f2:21:
                    da:6f:6d:95:6e:b8:d5:94:98:1b:a0:79:3f:e1:5b:
                    34:c1:68:9a:10:5e:71:8b:58:25:ad:06:d2:14:b1:
                    b8:fe:57:fa:92:a5:6a:4f:52:82:76:1f:d7:1e:50:
                    81:e9:f1:c4:9f:17:18:c1:fe:2e:b4:1e:a0:60:6f:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:CE:81:3A:19:2E:DC:9A:D5:97:D4:09:80:DD:E0:5B:AB:03:B4
            X509v3 Authority Key Identifier:
                keyid:83:53:A5:4C:D0:F0:63:F4:0A:00:EC:F1:55:06:3F:C7:DA:B8:DF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8353A54CD0F063F40A00ECF155063FC7DAB8DF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/3137302e302e3233362e302f32322d3234203d3e20323634393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:30:f8:3c:50:fb:f1:05:4a:86:1d:c2:58:24:d5:0d:bb:7a:
         60:c3:07:41:00:8a:13:cc:94:ed:3f:9c:5a:5e:fa:a0:e5:08:
         b6:84:00:48:e6:3b:7b:4c:33:cf:08:80:ba:83:93:07:05:db:
         9c:ab:b6:8c:fd:ef:9d:49:5e:38:1e:0b:60:83:8b:d7:e4:74:
         2b:79:30:09:3a:81:54:42:96:f1:62:4d:a3:95:ee:b1:61:f1:
         ab:cc:da:f0:2d:26:6e:3e:6b:53:41:a3:23:46:e2:a5:1c:ba:
         d9:c2:c2:bb:9b:37:0a:a6:73:84:bc:bf:ab:08:f0:0d:c1:98:
         36:3d:ef:f3:78:7a:88:b4:ae:a2:f2:e4:70:9e:d1:9d:18:b3:
         a7:37:6f:67:e5:35:40:75:f9:32:ed:61:67:0a:9e:4e:f5:8c:
         4b:f9:a1:32:89:43:4e:b2:6d:4c:0f:e7:6a:f7:05:af:f1:56:
         2a:63:35:d2:d9:ba:36:f4:e0:0b:f4:08:e3:87:f3:d0:3b:a3:
         c8:52:19:72:67:17:25:f3:38:fd:25:0f:e9:6d:b9:35:d5:f8:
         cd:1f:a0:66:ab:b3:8a:68:ce:4b:07:70:c5:55:54:42:40:13:
         84:2b:ab:f7:e0:85:37:3a:fc:26:65:91:55:2e:37:3d:19:0c:
         3d:54:ae:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUI5xpWz1++gx77mFUKcyPkSnE94UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM1M0E1NENEMEYwNjNGNDBBMDBFQ0YxNTUwNjNGQzdE
QUI4REY2NDAeFw0yNDA4MjkxODQ2NDdaFw0yNTA4MjgxODUxNDdaMDMxMTAvBgNV
BAMTKEFCREZDRTgxM0ExOTJFREM5QUQ1OTdENDA5ODBEREUwNUJBQjAzQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkYpPvdYkd/B99+XI8LlLkFZm
9aJaelJUGME4/YQTtVKV1DMaTi0VjJI1M0k287buZuemULP8DlTHHePVR5mt0HUG
5zNirXijjNxzlVR2QUSStkMlPYZwD1sInvfqVNdFj0w1oizSqQiGZ7nZVC/iybQD
ZKWoeFhq6+k5PtcI8Mu0a1qOO0ogVPgN5DxCIA95bA1t33hpmp+PnWI8AENn7q6A
Le/nmFzKNWv6DeW4YjOqaNumsWhti2Riz2VAup/yIdpvbZVuuNWUmBugeT/hWzTB
aJoQXnGLWCWtBtIUsbj+V/qSpWpPUoJ2H9ceUIHp8cSfFxjB/i60HqBgb+sxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq9/OgToZLtya1ZfUCYDd4FurA7QwHwYDVR0j
BBgwFoAUg1OlTNDwY/QKAOzxVQY/x9q432QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdzZU1MQUFYdHllUUhZV052TEJDZ3RSSlVGeW9zV2M0VG5XeFRGQkh0
ckwvMC84MzUzQTU0Q0QwRjA2M0Y0MEEwMEVDRjE1NTA2M0ZDN0RBQjhERjY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgzNTNBNTRDRDBGMDYzRjQw
QTAwRUNGMTU1MDYzRkM3REFCOERGNjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHc2VNTEFBWHR5ZVFIWVdOdkxCQ2d0UkpVRnlvc1djNFRuV3hURkJIdHJMLzAv
MzEzNzMwMmUzMDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzkzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDsMA0GCSqGSIb3DQEBCwUAA4IBAQAlMPg8UPvx
BUqGHcJYJNUNu3pgwwdBAIoTzJTtP5xaXvqg5Qi2hABI5jt7TDPPCIC6g5MHBduc
q7aM/e+dSV44Hgtgg4vX5HQreTAJOoFUQpbxYk2jle6xYfGrzNrwLSZuPmtTQaMj
RuKlHLrZwsK7mzcKpnOEvL+rCPANwZg2Pe/zeHqItK6i8uRwntGdGLOnN29n5TVA
dfky7WFnCp5O9YxL+aEyiUNOsm1MD+dq9wWv8VYqYzXS2bo29OAL9Ajjh/PQO6PI
UhlyZxcl8zj9JQ/pbbk11fjNH6Bmq7OKaM5LB3DFVVRCQBOEK6v34IU3OvwmZZFV
Ljc9GQw9VK7o
-----END CERTIFICATE-----
Generated at Sat Nov 2 09:44:09 2024 by rpki-client on console-fra.rpki-client.org