Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
File:                     3138372e31392e38302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          jYO4VC26l4A+gfgINUx+uMdwnqSl0cAJ//L803LCIiA=
Subject key identifier:   E1:33:D9:00:CC:91:55:BC:F6:24:C9:71:88:4E:F1:8D:3A:30:CA:35
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       4CAD08A22F759AA29C9960FB6A4388476FCDC764
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 31 Oct 2024 17:26:18 +0000
ROA not before:           Thu 31 Oct 2024 17:21:18 +0000
ROA not after:            Thu 30 Oct 2025 17:26:18 +0000
asID:                     28667
IP address blocks:        187.19.80.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ad:08:a2:2f:75:9a:a2:9c:99:60:fb:6a:43:88:47:6f:cd:c7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:21:18 2024 GMT
            Not After : Oct 30 17:26:18 2025 GMT
        Subject: CN=E133D900CC9155BCF624C971884EF18D3A30CA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:05:91:89:aa:77:db:4d:03:7e:e6:3b:90:cb:
                    a5:20:d8:92:c6:a0:6c:60:d0:33:ab:cf:bf:6a:88:
                    bf:c3:4f:dd:6a:df:a2:d1:a7:2e:00:b7:08:c3:e6:
                    a9:de:51:ce:d5:e0:4f:fa:b9:c6:52:4d:8e:8e:c9:
                    b7:61:18:40:87:5f:c5:3a:12:73:58:64:99:2b:e6:
                    02:32:bb:4b:5e:8f:44:0b:2a:57:99:8c:19:a8:d2:
                    30:a6:02:52:42:c4:13:c6:09:19:e1:1a:29:b7:1a:
                    ba:5f:42:ee:be:27:b8:7b:27:2b:51:cb:23:c8:29:
                    fe:f0:94:c1:43:b2:9b:e1:70:8f:b0:11:5d:b1:f1:
                    cd:21:60:0c:af:76:c5:62:62:98:37:b6:80:23:a6:
                    3a:ee:54:38:80:c6:71:54:c5:0d:cf:43:d8:0c:2a:
                    f6:07:dd:f6:13:aa:94:e3:fc:3a:a0:e6:10:e2:10:
                    a4:78:60:3f:98:ca:5a:94:fa:e9:64:f5:75:2c:20:
                    c6:2d:f4:2b:1c:6b:47:0a:8b:e4:fa:8f:4c:71:32:
                    77:9d:cd:50:5b:2a:2b:26:e2:8f:03:bd:aa:23:74:
                    13:20:c2:5d:bb:14:12:4e:ed:ee:e5:da:09:9c:84:
                    5d:7d:3e:69:7c:b2:e4:18:78:0f:b2:33:ab:e2:32:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:33:D9:00:CC:91:55:BC:F6:24:C9:71:88:4E:F1:8D:3A:30:CA:35
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e31392e38302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:87:ae:49:c5:b0:69:ec:52:15:17:21:93:d4:48:6e:1a:87:
         2b:2f:9e:f6:72:ce:b6:56:50:25:43:5c:67:c4:b5:42:4a:1f:
         e5:e2:ca:13:73:29:b9:34:69:c0:a2:eb:30:7b:d0:2c:85:af:
         a4:f4:fc:f0:30:dc:b9:0d:23:ea:fc:a7:8b:00:12:d8:4d:65:
         d8:e3:eb:9f:50:8b:a6:1f:30:67:6d:b4:43:85:cf:b4:78:7f:
         1d:30:db:0f:c2:fc:98:71:0e:ee:bf:d1:2c:fa:e9:42:07:7e:
         75:33:bf:43:a6:07:23:15:8e:5b:3d:25:8d:28:ae:dd:c6:2e:
         d6:9b:c5:11:29:74:e7:53:fe:a1:73:69:49:20:8d:fc:6b:e7:
         35:f4:c4:52:a4:c5:37:88:f3:49:e4:06:01:cb:20:84:f6:06:
         db:0e:78:11:96:51:58:89:d4:11:3a:51:05:2f:85:fa:9c:5c:
         92:79:0e:76:f1:6c:95:c2:f8:90:8a:5e:6e:21:62:9f:7a:bc:
         21:ef:c5:8b:76:f6:5c:f3:5d:78:81:23:29:75:18:f5:4a:f6:
         ed:d3:ac:a6:ef:0f:fe:49:df:eb:5b:73:95:c1:8c:d1:f4:29:
         e4:53:e2:b6:e4:f8:c5:56:c2:e0:50:14:2e:7b:a9:ec:5c:ac:
         97:8a:cf:d1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTK0Ioi91mqKcmWD7akOIR2/Nx2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzIxMThaFw0yNTEwMzAxNzI2MThaMDMxMTAvBgNV
BAMTKEUxMzNEOTAwQ0M5MTU1QkNGNjI0Qzk3MTg4NEVGMThEM0EzMENBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBZGJqnfbTQN+5juQy6Ug2JLG
oGxg0DOrz79qiL/DT91q36LRpy4AtwjD5qneUc7V4E/6ucZSTY6OybdhGECHX8U6
EnNYZJkr5gIyu0tej0QLKleZjBmo0jCmAlJCxBPGCRnhGim3GrpfQu6+J7h7JytR
yyPIKf7wlMFDspvhcI+wEV2x8c0hYAyvdsViYpg3toAjpjruVDiAxnFUxQ3PQ9gM
KvYH3fYTqpTj/Dqg5hDiEKR4YD+YylqU+ulk9XUsIMYt9Csca0cKi+T6j0xxMned
zVBbKism4o8DvaojdBMgwl27FBJO7e7l2gmchF19Pml8suQYeA+yM6viMgSnAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4TPZAMyRVbz2JMlxiE7xjTowyjUwHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzODM3MmUzMTM5MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLsTUDANBgkqhkiG9w0BAQsFAAOCAQEARoeuScWwaexS
FRchk9RIbhqHKy+e9nLOtlZQJUNcZ8S1Qkof5eLKE3MpuTRpwKLrMHvQLIWvpPT8
8DDcuQ0j6vyniwAS2E1l2OPrn1CLph8wZ220Q4XPtHh/HTDbD8L8mHEO7r/RLPrp
Qgd+dTO/Q6YHIxWOWz0ljSiu3cYu1pvFESl051P+oXNpSSCN/GvnNfTEUqTFN4jz
SeQGAcsghPYG2w54EZZRWInUETpRBS+F+pxcknkOdvFslcL4kIpebiFin3q8Ie/F
i3b2XPNdeIEjKXUY9Ur27dOspu8P/knf61tzlcGM0fQp5FPituT4xVbC4FAULnup
7Fysl4rP0Q==
-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org