Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa
File:                     3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa (raw, json)
Hash identifier:          FJIAkkvQZXFDYD1SWjlChEArunl1lGSK9IcDWBG/Q14=
Subject key identifier:   3D:EC:91:FD:D0:E2:E3:BA:E0:03:B8:8A:D4:3F:25:23:19:7F:AA:7E
Certificate issuer:       /CN=A5CAB69B324D77E7069383E1585A8C071704B85E
Certificate serial:       58C63D8C9478A03ADD275E36810EB34D24513461
Authority key identifier: A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa
Signing time:             Tue 16 Apr 2024 14:05:53 +0000
ROA not before:           Tue 16 Apr 2024 14:00:53 +0000
ROA not after:            Tue 15 Apr 2025 14:05:53 +0000
asID:                     265285
IP address blocks:        168.90.148.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:3d:8c:94:78:a0:3a:dd:27:5e:36:81:0e:b3:4d:24:51:34:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5CAB69B324D77E7069383E1585A8C071704B85E
        Validity
            Not Before: Apr 16 14:00:53 2024 GMT
            Not After : Apr 15 14:05:53 2025 GMT
        Subject: CN=3DEC91FDD0E2E3BAE003B88AD43F2523197FAA7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:8d:b3:3b:74:47:74:b3:54:40:c7:0c:2f:
                    1f:ab:4a:a8:cb:9e:9e:88:02:63:2d:44:f2:f0:8d:
                    53:41:f1:e6:d6:44:70:8b:35:69:71:90:e8:2e:36:
                    31:57:c8:aa:d5:31:7c:c2:8e:25:94:aa:88:12:bd:
                    45:d3:41:e7:44:c7:db:0d:c7:59:da:55:6e:1a:34:
                    18:5d:be:84:82:aa:91:eb:69:3c:39:f4:44:f0:41:
                    b7:6d:f9:53:98:cd:6a:bf:e6:59:a3:bf:c8:5a:57:
                    ac:61:b0:43:7a:21:bb:35:bb:aa:02:8c:b3:c4:91:
                    24:8b:6c:64:0c:91:eb:5e:0e:36:fb:9c:45:71:f0:
                    a0:0f:a4:89:a4:af:d6:54:09:1d:cf:29:77:94:2e:
                    9a:06:80:26:be:a2:5c:a0:b1:e9:2b:76:97:10:78:
                    5a:4b:c1:71:8f:03:38:d7:65:da:cd:68:69:7b:e5:
                    5f:94:9d:1e:eb:46:9b:b0:0a:d5:1a:0a:b9:ba:bf:
                    f9:b3:3e:89:88:c1:fb:5b:70:45:c7:58:b7:a6:9b:
                    49:62:08:6b:1b:06:d7:b6:ba:1f:50:08:09:55:fc:
                    c8:30:b4:be:9a:1d:6a:e5:10:07:5a:0b:6a:01:c7:
                    d0:d1:e8:ac:83:87:23:b2:f7:46:d7:1c:a6:0f:3f:
                    70:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:91:FD:D0:E2:E3:BA:E0:03:B8:8A:D4:3F:25:23:19:7F:AA:7E
            X509v3 Authority Key Identifier:
                keyid:A5:CA:B6:9B:32:4D:77:E7:06:93:83:E1:58:5A:8C:07:17:04:B8:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/A5CAB69B324D77E7069383E1585A8C071704B85E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5CAB69B324D77E7069383E1585A8C071704B85E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:13:e2:e1:87:ab:68:ce:47:af:4f:e6:37:ab:86:06:1f:9d:
         ce:3f:2d:5f:53:95:c2:12:7e:89:c3:57:9b:94:56:7f:14:73:
         6c:03:a9:69:d7:db:13:6c:dc:fe:20:b4:eb:cb:0f:51:87:4e:
         d1:3a:46:1f:5e:de:08:aa:4d:48:9b:d4:d0:37:25:e1:10:35:
         5a:56:a3:72:82:5d:98:69:f8:35:97:d9:50:21:75:c3:ac:0d:
         1d:43:0d:f3:2e:12:4d:74:0c:8e:5e:fc:96:ad:56:2f:10:fd:
         5d:20:32:ab:48:64:e7:8e:05:e3:6c:4f:b7:c5:c1:a8:f4:95:
         a2:4c:89:52:3a:76:af:76:85:6f:98:22:e8:74:99:e6:75:5e:
         d1:15:a8:a6:5c:e1:f3:f0:d3:d7:13:fa:31:a2:9e:50:fc:a5:
         1c:da:94:a7:df:fb:7a:5e:ea:0b:3a:69:76:ff:a6:5c:92:47:
         d0:39:41:a4:98:cf:48:d9:ba:56:0b:69:eb:01:9f:05:c5:5d:
         26:56:12:5e:4d:be:c1:61:3f:86:a9:8e:eb:da:24:8f:da:1a:
         41:f7:ae:62:1d:6d:21:a6:95:27:92:da:c3:41:86:0d:aa:9f:
         77:55:d7:bf:e3:ae:70:59:ca:e5:29:58:4c:d6:c3:2b:22:7e:
         d8:86:ca:22
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWMY9jJR4oDrdJ142gQ6zTSRRNGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDQUI2OUIzMjRENzdFNzA2OTM4M0UxNTg1QThDMDcx
NzA0Qjg1RTAeFw0yNDA0MTYxNDAwNTNaFw0yNTA0MTUxNDA1NTNaMDMxMTAvBgNV
BAMTKDNERUM5MUZERDBFMkUzQkFFMDAzQjg4QUQ0M0YyNTIzMTk3RkFBN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDifI2zO3RHdLNUQMcMLx+rSqjL
np6IAmMtRPLwjVNB8ebWRHCLNWlxkOguNjFXyKrVMXzCjiWUqogSvUXTQedEx9sN
x1naVW4aNBhdvoSCqpHraTw59ETwQbdt+VOYzWq/5lmjv8haV6xhsEN6Ibs1u6oC
jLPEkSSLbGQMketeDjb7nEVx8KAPpImkr9ZUCR3PKXeULpoGgCa+olygsekrdpcQ
eFpLwXGPAzjXZdrNaGl75V+UnR7rRpuwCtUaCrm6v/mzPomIwftbcEXHWLemm0li
CGsbBte2uh9QCAlV/MgwtL6aHWrlEAdaC2oBx9DR6KyDhyOy90bXHKYPP3DFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPeyR/dDi47rgA7iK1D8lIxl/qn4wHwYDVR0j
BBgwFoAUpcq2mzJNd+cGk4PhWFqMBxcEuF4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC9BNUNBQjY5QjMyNEQ3N0U3MDY5MzgzRTE1ODVBOEMwNzE3MDRCODVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1Q0FCNjlCMzI0RDc3RTcw
NjkzODNFMTU4NUE4QzA3MTcwNEI4NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzEzNjM4MmUzOTMwMmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWpQwDQYJKoZIhvcNAQELBQADggEBAJ4T4uGH
q2jOR69P5jerhgYfnc4/LV9TlcISfonDV5uUVn8Uc2wDqWnX2xNs3P4gtOvLD1GH
TtE6Rh9e3giqTUib1NA3JeEQNVpWo3KCXZhp+DWX2VAhdcOsDR1DDfMuEk10DI5e
/JatVi8Q/V0gMqtIZOeOBeNsT7fFwaj0laJMiVI6dq92hW+YIuh0meZ1XtEVqKZc
4fPw09cT+jGinlD8pRzalKff+3pe6gs6aXb/plySR9A5QaSYz0jZulYLaesBnwXF
XSZWEl5NvsFhP4apjuvaJI/aGkH3rmIdbSGmlSeS2sNBhg2qn3dV17/jrnBZyuUp
WEzWwysiftiGyiI=
-----END CERTIFICATE-----
Generated at Fri Jun 14 21:10:43 2024 by rpki-client on console-ams.rpki-client.org