Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa
File:                     3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa (raw, json)
Hash identifier:          fQkHl4AOxU6v5TYROx1qd/U66ohj2WNW1aGn3npthFc=
Subject key identifier:   58:CA:5E:84:F5:EA:38:C8:BF:73:BF:35:1D:E3:29:9D:57:68:E1:CF
Certificate issuer:       /CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
Certificate serial:       51CF944BC613E2548215B26F021C1C1CEE7E7A39
Authority key identifier: 3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa
Signing time:             Thu 04 Jul 2024 13:20:31 +0000
ROA not before:           Thu 04 Jul 2024 13:15:31 +0000
ROA not after:            Thu 03 Jul 2025 13:20:31 +0000
asID:                     265285
IP address blocks:        168.90.148.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cf:94:4b:c6:13:e2:54:82:15:b2:6f:02:1c:1c:1c:ee:7e:7a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F318214B1BD2E89818793B6E4B9967278CA87A1
        Validity
            Not Before: Jul  4 13:15:31 2024 GMT
            Not After : Jul  3 13:20:31 2025 GMT
        Subject: CN=58CA5E84F5EA38C8BF73BF351DE3299D5768E1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:0b:43:03:6f:83:98:4c:6a:ca:4c:7f:64:
                    19:9f:34:a5:c2:69:dd:47:3e:7e:63:5c:cf:67:a1:
                    46:26:a1:25:78:48:03:d1:f2:b3:21:18:91:e6:f3:
                    31:96:16:62:cd:48:e9:ac:8f:be:6f:27:f0:53:7a:
                    40:6f:5f:3d:b5:6e:6e:b7:32:6a:08:f2:28:8d:25:
                    12:af:d4:86:21:62:25:e4:e9:5d:94:d7:73:c3:84:
                    ff:c6:ef:7b:ad:72:86:b0:98:c1:c2:9c:40:2f:bf:
                    57:ad:ea:7a:84:23:2c:3a:51:2b:b4:41:a4:1f:02:
                    2b:70:a2:3f:19:fa:e0:8f:de:46:b0:4c:b6:04:5c:
                    22:fb:6e:36:79:74:31:90:ec:0f:7a:85:1e:d2:f6:
                    fa:b2:d6:17:38:dd:4f:ab:91:2a:1a:41:dc:65:5d:
                    05:92:98:f9:58:87:6b:5c:b5:0c:17:27:26:1d:d7:
                    f8:5e:f3:2f:a5:6b:66:78:11:d8:65:8b:41:9c:2c:
                    bb:9f:12:4d:5e:2c:cf:54:37:4e:92:db:da:41:63:
                    1d:0e:90:3a:d8:3d:18:14:74:7f:d6:75:3e:21:eb:
                    8a:d0:df:23:1f:d3:5c:8b:fa:cc:12:5f:37:00:26:
                    e7:84:a2:6a:67:b2:b3:3f:b3:c8:ea:2c:39:ac:82:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CA:5E:84:F5:EA:38:C8:BF:73:BF:35:1D:E3:29:9D:57:68:E1:CF
            X509v3 Authority Key Identifier:
                keyid:3F:31:82:14:B1:BD:2E:89:81:87:93:B6:E4:B9:96:72:78:CA:87:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3F318214B1BD2E89818793B6E4B9967278CA87A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F318214B1BD2E89818793B6E4B9967278CA87A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8tZ5pzhDMYqgsvsXb8fJc5ZRfkT28fN8LS2YXremdMK5/0/3136382e39302e3134382e302f32322d3232203d3e20323635323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:3a:c1:dd:b9:64:2c:fa:a4:5e:01:f5:a9:4c:f3:ce:b0:c0:
         37:0b:51:56:3b:e2:8f:07:02:f7:39:40:90:60:6f:df:57:11:
         df:32:52:89:2b:7f:3b:bd:17:c2:f8:53:15:50:51:1a:2e:11:
         d4:cc:f6:4a:e5:57:47:39:c4:69:46:3a:81:fa:ea:20:b7:3a:
         44:97:63:bb:cb:dd:13:2b:e3:85:9e:57:61:38:1c:a1:04:28:
         66:4c:23:5c:93:60:47:ad:22:99:e4:ff:44:e2:a1:12:a0:37:
         24:0d:98:e1:2c:20:e1:93:53:99:4b:e4:98:bf:d1:7b:4c:cb:
         3f:17:ac:6f:14:9b:2e:ab:d4:b7:78:31:fb:0b:8e:68:04:69:
         41:95:3e:24:41:eb:94:e5:2c:db:47:f1:ff:1e:55:cc:2f:82:
         6a:0e:d7:2a:b6:17:16:74:73:95:78:91:55:91:76:52:fb:d4:
         cf:97:13:51:b2:84:b7:ca:be:7c:a7:9e:7a:37:d2:fd:6f:31:
         f3:0e:be:8d:76:c9:7b:af:b3:f3:bc:e8:7d:f4:a2:f1:26:3d:
         a1:be:b4:31:b5:01:db:15:35:0c:22:3c:39:4b:f0:02:6b:20:
         37:0e:b6:1f:77:86:56:de:db:47:9e:8f:40:b2:73:38:31:7d:
         c7:84:80:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUc+US8YT4lSCFbJvAhwcHO5+ejkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YzMTgyMTRCMUJEMkU4OTgxODc5M0I2RTRCOTk2NzI3
OENBODdBMTAeFw0yNDA3MDQxMzE1MzFaFw0yNTA3MDMxMzIwMzFaMDMxMTAvBgNV
BAMTKDU4Q0E1RTg0RjVFQTM4QzhCRjczQkYzNTFERTMyOTlENTc2OEUxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqQtDA2+DmExqykx/ZBmfNKXC
ad1HPn5jXM9noUYmoSV4SAPR8rMhGJHm8zGWFmLNSOmsj75vJ/BTekBvXz21bm63
MmoI8iiNJRKv1IYhYiXk6V2U13PDhP/G73utcoawmMHCnEAvv1et6nqEIyw6USu0
QaQfAitwoj8Z+uCP3kawTLYEXCL7bjZ5dDGQ7A96hR7S9vqy1hc43U+rkSoaQdxl
XQWSmPlYh2tctQwXJyYd1/he8y+la2Z4Edhli0GcLLufEk1eLM9UN06S29pBYx0O
kDrYPRgUdH/WdT4h64rQ3yMf01yL+swSXzcAJueEompnsrM/s8jqLDmsgujZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWMpehPXqOMi/c781HeMpnVdo4c8wHwYDVR0j
BBgwFoAUPzGCFLG9LomBh5O25LmWcnjKh6EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRaNXB6aERNWXFnc3ZzWGI4ZkpjNVpSZmtUMjhmTjhMUzJZWHJlbWRN
SzUvMC8zRjMxODIxNEIxQkQyRTg5ODE4NzkzQjZFNEI5OTY3Mjc4Q0E4N0ExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGMzE4MjE0QjFCRDJFODk4
MTg3OTNCNkU0Qjk5NjcyNzhDQTg3QTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0WjVwemhETVlxZ3N2c1hiOGZKYzVaUmZrVDI4Zk44TFMyWVhyZW1kTUs1LzAv
MzEzNjM4MmUzOTMwMmUzMTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzUzMjM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWpQwDQYJKoZIhvcNAQELBQADggEBAAs6wd25
ZCz6pF4B9alM886wwDcLUVY74o8HAvc5QJBgb99XEd8yUokrfzu9F8L4UxVQURou
EdTM9krlV0c5xGlGOoH66iC3OkSXY7vL3RMr44WeV2E4HKEEKGZMI1yTYEetIpnk
/0TioRKgNyQNmOEsIOGTU5lL5Ji/0XtMyz8XrG8Umy6r1Ld4MfsLjmgEaUGVPiRB
65TlLNtH8f8eVcwvgmoO1yq2FxZ0c5V4kVWRdlL71M+XE1GyhLfKvnynnno30v1v
MfMOvo12yXuvs/O86H30ovEmPaG+tDG1AdsVNQwiPDlL8AJrIDcOth93hlbe20ee
j0CyczgxfceEgAk=
-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org