Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139302e302f32332d3233203d3e203532353339.roa
File:                     3137392e3130362e3139302e302f32332d3233203d3e203532353339.roa (raw, json)
Hash identifier:          CarMlA27Jc6CyMwDzrjufMKzK1elXx4HYmxdTCqjM4Q=
Subject key identifier:   7D:BA:52:FF:4A:98:1E:45:BF:7E:C1:FA:4D:5C:66:B3:79:B4:1A:CC
Certificate issuer:       /CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
Certificate serial:       4DDF83200936816386A52556BD28E2FC6E975BAD
Authority key identifier: B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139302e302f32332d3233203d3e203532353339.roa
Signing time:             Fri 02 Aug 2024 17:56:01 +0000
ROA not before:           Fri 02 Aug 2024 17:51:01 +0000
ROA not after:            Fri 01 Aug 2025 17:56:01 +0000
asID:                     52539
IP address blocks:        179.106.190.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:df:83:20:09:36:81:63:86:a5:25:56:bd:28:e2:fc:6e:97:5b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1214CBB1D3872E5DA2F8261F742772B88CC3B9D
        Validity
            Not Before: Aug  2 17:51:01 2024 GMT
            Not After : Aug  1 17:56:01 2025 GMT
        Subject: CN=7DBA52FF4A981E45BF7EC1FA4D5C66B379B41ACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e1:7b:3c:0d:a6:92:f5:e1:b3:94:a5:27:69:
                    91:01:9e:17:59:6d:d6:80:e0:6f:0f:91:7f:26:9e:
                    4a:98:3d:3c:da:6d:f4:a4:0e:36:ea:bf:84:c5:2a:
                    29:81:0f:c9:1e:1a:aa:82:b3:26:e7:f8:1b:27:82:
                    7a:e2:27:be:23:07:cf:15:09:bf:3b:ce:de:1f:b0:
                    86:45:ff:51:95:45:c7:46:9e:0a:e5:dd:c2:0a:10:
                    39:16:e6:0a:0c:61:54:0f:20:a5:a1:1e:01:7b:13:
                    25:e1:79:10:f3:47:1b:cd:77:c1:6e:6d:39:4f:5c:
                    b7:69:2f:cf:4d:d4:d1:a8:f4:80:03:94:e9:df:b3:
                    ec:31:7f:d7:02:71:9d:3e:8b:5c:42:48:61:db:c0:
                    0a:9a:34:63:dd:62:1e:85:68:cf:6c:82:bc:50:45:
                    2d:8f:26:68:ae:7d:55:45:e3:f9:1a:12:43:35:cc:
                    74:e4:c4:24:1c:c7:61:d4:f1:f1:9a:19:31:03:21:
                    3d:f7:74:c5:8d:d5:08:4b:83:21:50:76:44:19:92:
                    92:45:c0:bf:8d:dc:0b:cf:36:4d:fc:02:6a:ac:2b:
                    45:af:9e:52:5e:b4:52:a4:61:ac:9f:77:e0:95:9f:
                    d2:1c:c4:1c:91:6e:5f:6d:64:72:84:b3:75:19:d3:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BA:52:FF:4A:98:1E:45:BF:7E:C1:FA:4D:5C:66:B3:79:B4:1A:CC
            X509v3 Authority Key Identifier:
                keyid:B1:21:4C:BB:1D:38:72:E5:DA:2F:82:61:F7:42:77:2B:88:CC:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1214CBB1D3872E5DA2F8261F742772B88CC3B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8m3LcL6b4YVrEFHsFNwDkZtMS2pcjbhQ35fFbDVECEfA/0/3137392e3130362e3139302e302f32332d3233203d3e203532353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:c7:10:dc:70:d1:f0:9f:51:b7:1b:c9:6b:ad:78:ca:b3:
         1d:fc:87:9e:c3:3b:12:3d:d6:0b:7d:26:36:ee:ba:77:3e:d7:
         78:94:e6:90:67:4c:a1:5c:76:64:01:39:7e:c4:ac:fc:f2:37:
         35:c0:d5:2c:ab:4e:ba:cc:dc:19:a9:56:7b:35:3c:0b:31:51:
         2e:fd:dc:a2:e9:bc:a3:16:54:f1:60:b2:04:3b:33:65:27:8a:
         2d:6a:bb:f7:d2:07:2e:7a:7c:64:33:87:95:97:8a:e3:cd:1e:
         88:dd:25:11:aa:2c:a9:3b:a7:63:f3:93:4d:38:69:ae:85:17:
         c8:1f:af:d6:8d:a0:d5:ef:54:fe:64:e6:4e:e2:1b:4f:57:67:
         b4:04:d9:7f:3d:aa:e2:13:8d:1c:27:f7:d6:ac:f6:bb:a8:20:
         ce:fa:ba:97:53:9c:45:40:e0:3c:aa:a4:43:62:0b:2a:21:09:
         0e:67:cd:66:77:c2:94:7b:bc:67:1a:26:c2:d7:b0:f0:16:f2:
         a2:5e:07:aa:73:06:78:96:15:31:9c:b8:d6:ce:1d:70:98:d8:
         be:0f:fa:ae:0d:9f:64:02:9a:08:29:65:2a:44:07:01:f3:dc:
         6a:e2:ed:56:7b:34:f3:87:91:59:19:82:01:24:5f:2c:f5:78:
         8e:4b:59:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTd+DIAk2gWOGpSVWvSji/G6XW60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEyMTRDQkIxRDM4NzJFNURBMkY4MjYxRjc0Mjc3MkI4
OENDM0I5RDAeFw0yNDA4MDIxNzUxMDFaFw0yNTA4MDExNzU2MDFaMDMxMTAvBgNV
BAMTKDdEQkE1MkZGNEE5ODFFNDVCRjdFQzFGQTRENUM2NkIzNzlCNDFBQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4Xs8DaaS9eGzlKUnaZEBnhdZ
bdaA4G8PkX8mnkqYPTzabfSkDjbqv4TFKimBD8keGqqCsybn+BsngnriJ74jB88V
Cb87zt4fsIZF/1GVRcdGngrl3cIKEDkW5goMYVQPIKWhHgF7EyXheRDzRxvNd8Fu
bTlPXLdpL89N1NGo9IADlOnfs+wxf9cCcZ0+i1xCSGHbwAqaNGPdYh6FaM9sgrxQ
RS2PJmiufVVF4/kaEkM1zHTkxCQcx2HU8fGaGTEDIT33dMWN1QhLgyFQdkQZkpJF
wL+N3AvPNk38AmqsK0WvnlJetFKkYayfd+CVn9IcxByRbl9tZHKEs3UZ0z8vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfbpS/0qYHkW/fsH6TVxms3m0GswwHwYDVR0j
BBgwFoAUsSFMux04cuXaL4Jh90J3K4jMO50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOG0zTGNMNmI0WVZyRUZIc0ZOd0RrWnRNUzJwY2piaFEzNWZGYkRWRUNF
ZkEvMC9CMTIxNENCQjFEMzg3MkU1REEyRjgyNjFGNzQyNzcyQjg4Q0MzQjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMjE0Q0JCMUQzODcyRTVE
QTJGODI2MUY3NDI3NzJCODhDQzNCOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhtM0xjTDZiNFlWckVGSHNGTndEa1p0TVMycGNqYmhRMzVmRmJEVkVDRWZBLzAv
MzEzNzM5MmUzMTMwMzYyZTMxMzkzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzar4wDQYJKoZIhvcNAQELBQADggEBAH/AxxDc
cNHwn1G3G8lrrXjKsx38h57DOxI91gt9Jjbuunc+13iU5pBnTKFcdmQBOX7ErPzy
NzXA1SyrTrrM3BmpVns1PAsxUS793KLpvKMWVPFgsgQ7M2Unii1qu/fSBy56fGQz
h5WXiuPNHojdJRGqLKk7p2Pzk004aa6FF8gfr9aNoNXvVP5k5k7iG09XZ7QE2X89
quITjRwn99as9ruoIM76updTnEVA4DyqpENiCyohCQ5nzWZ3wpR7vGcaJsLXsPAW
8qJeB6pzBniWFTGcuNbOHXCY2L4P+q4Nn2QCmggpZSpEBwHz3Gri7VZ7NPOHkVkZ
ggEkXyz1eI5LWRQ=
-----END CERTIFICATE-----
Generated at Thu Aug 22 16:53:01 2024 by rpki-client on console-ams.rpki-client.org