Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa
File:                     3138362e3232372e36342e302f32322d3234203d3e203631373236.roa (raw, json)
Hash identifier:          E+kg1Zz+g/nGtTqVHsKCvzkCu8fAp65Gu/XXz60kyG0=
Subject key identifier:   D0:9C:D8:F5:96:78:2C:56:48:4F:F2:55:C8:61:6A:3A:9B:BC:6D:CE
Certificate issuer:       /CN=31913C696443B8596EC7722D368B4749C287A025
Certificate serial:       1553AEAA7F955C65340278B1E82E3DD2F63AF89A
Authority key identifier: 31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa
Signing time:             Thu 04 Apr 2024 03:27:35 +0000
ROA not before:           Thu 04 Apr 2024 03:22:35 +0000
ROA not after:            Thu 03 Apr 2025 03:27:35 +0000
asID:                     61726
IP address blocks:        186.227.64.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:53:ae:aa:7f:95:5c:65:34:02:78:b1:e8:2e:3d:d2:f6:3a:f8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31913C696443B8596EC7722D368B4749C287A025
        Validity
            Not Before: Apr  4 03:22:35 2024 GMT
            Not After : Apr  3 03:27:35 2025 GMT
        Subject: CN=D09CD8F596782C56484FF255C8616A3A9BBC6DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:6a:49:a3:2c:49:2d:0d:b4:0f:c3:61:18:
                    c7:43:75:0d:00:55:67:cd:7b:42:45:2e:9a:53:6b:
                    57:4d:b1:e1:9e:c4:7d:8d:6d:16:c2:b8:c2:e5:f0:
                    73:50:44:ae:59:cc:56:e9:30:24:60:3c:06:bc:ac:
                    f1:76:1c:8c:a4:9d:a2:c5:d0:e8:98:a5:b4:87:12:
                    1a:55:c9:13:5a:d2:1f:54:58:08:c3:7c:7c:da:19:
                    cf:a1:7d:57:0a:1e:16:20:41:2c:75:b9:ae:b8:bf:
                    2e:20:2f:3c:84:3a:e7:e2:6f:31:16:91:c7:31:0c:
                    de:6c:9e:21:52:4a:76:24:d8:2c:ca:41:b7:e9:4d:
                    38:b2:e2:b0:11:0e:1f:91:06:10:98:eb:05:1c:fe:
                    00:6b:f1:66:37:64:9f:68:9f:b9:68:10:47:2d:a7:
                    5b:c3:13:99:23:47:53:67:46:72:c5:d9:04:1e:e2:
                    a2:70:68:d2:27:85:2e:ab:35:14:5e:02:09:bb:79:
                    fb:13:a1:b9:7d:1a:9e:8d:c1:63:40:0c:f0:59:c0:
                    bd:42:c4:47:67:13:6c:95:56:54:02:e2:ce:df:e5:
                    2c:5b:cb:8f:f1:de:51:75:2b:88:8b:49:d0:68:a9:
                    71:b4:de:73:48:8b:1f:e5:88:08:b7:01:f3:12:cc:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9C:D8:F5:96:78:2C:56:48:4F:F2:55:C8:61:6A:3A:9B:BC:6D:CE
            X509v3 Authority Key Identifier:
                keyid:31:91:3C:69:64:43:B8:59:6E:C7:72:2D:36:8B:47:49:C2:87:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/31913C696443B8596EC7722D368B4749C287A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31913C696443B8596EC7722D368B4749C287A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/1/3138362e3232372e36342e302f32322d3234203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:8a:3f:56:c0:ee:ec:cf:53:20:43:29:99:6b:e7:16:57:
         15:e0:53:3b:ee:54:fa:5a:65:e5:c5:e0:3a:3c:0f:9b:26:26:
         98:ab:8f:18:bb:f1:6e:88:43:b3:13:d8:7a:7e:92:48:25:1f:
         d4:63:84:78:29:85:7e:64:07:55:a3:73:9c:b8:63:92:7a:02:
         53:39:be:cf:df:43:fd:f7:c6:fc:c2:80:8a:00:66:15:7d:f2:
         c6:a9:b8:aa:33:56:4a:a9:b0:8e:60:2f:fe:04:a0:36:64:e8:
         e8:c2:d9:34:fc:0d:92:d9:b5:42:dc:5e:98:d5:fd:68:c0:d8:
         39:cd:18:17:fb:bd:9b:1e:c6:03:13:7a:ab:72:cd:61:1a:e4:
         a6:ea:b6:75:a5:1a:b8:78:fe:6c:9e:ab:62:cd:43:72:10:e1:
         96:be:b6:d7:e0:52:ac:c6:46:70:da:b9:94:80:6e:5e:70:eb:
         dd:ff:16:cc:f0:5d:08:e1:51:41:7e:80:ab:ae:c6:01:86:0d:
         ae:3e:10:46:f5:ec:e8:a6:a2:a1:0f:04:78:b7:b1:cb:18:a6:
         eb:ed:b4:8b:21:d8:31:7c:d1:78:cb:99:76:67:5c:a1:3b:8b:
         46:22:a9:fe:a4:9e:4a:91:0e:12:1c:b3:55:e2:41:01:3c:9a:
         57:e5:ef:9b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFVOuqn+VXGU0Anix6C490vY6+JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5MTNDNjk2NDQzQjg1OTZFQzc3MjJEMzY4QjQ3NDlD
Mjg3QTAyNTAeFw0yNDA0MDQwMzIyMzVaFw0yNTA0MDMwMzI3MzVaMDMxMTAvBgNV
BAMTKEQwOUNEOEY1OTY3ODJDNTY0ODRGRjI1NUM4NjE2QTNBOUJCQzZEQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZGpJoyxJLQ20D8NhGMdDdQ0A
VWfNe0JFLppTa1dNseGexH2NbRbCuMLl8HNQRK5ZzFbpMCRgPAa8rPF2HIyknaLF
0OiYpbSHEhpVyRNa0h9UWAjDfHzaGc+hfVcKHhYgQSx1ua64vy4gLzyEOufibzEW
kccxDN5sniFSSnYk2CzKQbfpTTiy4rARDh+RBhCY6wUc/gBr8WY3ZJ9on7loEEct
p1vDE5kjR1NnRnLF2QQe4qJwaNInhS6rNRReAgm7efsTobl9Gp6NwWNADPBZwL1C
xEdnE2yVVlQC4s7f5Sxby4/x3lF1K4iLSdBoqXG03nNIix/liAi3AfMSzM0FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0JzY9ZZ4LFZIT/JVyGFqOpu8bc4wHwYDVR0j
BBgwFoAUMZE8aWRDuFlux3ItNotHScKHoCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGh3QlkycHdVRVV6cDJhWnVMQ1doNUNQV0NxOHI0WGZZZTM0OXZnWTFp
NWgvMS8zMTkxM0M2OTY0NDNCODU5NkVDNzcyMkQzNjhCNDc0OUMyODdBMDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOTEzQzY5NjQ0M0I4NTk2
RUM3NzIyRDM2OEI0NzQ5QzI4N0EwMjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhod0JZMnB3VUVVenAyYVp1TENXaDVDUFdDcThyNFhmWWUzNDl2Z1kxaTVoLzEv
MzEzODM2MmUzMjMyMzcyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuuNAMA0GCSqGSIb3DQEBCwUAA4IBAQByO4o/VsDu
7M9TIEMpmWvnFlcV4FM77lT6WmXlxeA6PA+bJiaYq48Yu/FuiEOzE9h6fpJIJR/U
Y4R4KYV+ZAdVo3OcuGOSegJTOb7P30P998b8woCKAGYVffLGqbiqM1ZKqbCOYC/+
BKA2ZOjowtk0/A2S2bVC3F6Y1f1owNg5zRgX+72bHsYDE3qrcs1hGuSm6rZ1pRq4
eP5snqtizUNyEOGWvrbX4FKsxkZw2rmUgG5ecOvd/xbM8F0I4VFBfoCrrsYBhg2u
PhBG9ezopqKhDwR4t7HLGKbr7bSLIdgxfNF4y5l2Z1yhO4tGIqn+pJ5KkQ4SHLNV
4kEBPJpX5e+b
-----END CERTIFICATE-----
Generated at Sat Aug 10 09:26:57 2024 by rpki-client on console-fra.rpki-client.org