Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/3138372e3131312e38302e302f32302d3332203d3e203533313437.roa
File:                     3138372e3131312e38302e302f32302d3332203d3e203533313437.roa (raw, json)
Hash identifier:          rSx20CROLWZWT/cuKQOuNRWoIc1RI2SVS22KfzsvW58=
Subject key identifier:   DB:D8:55:9A:0A:04:E2:3C:40:C6:2F:1F:A1:B5:86:B4:1B:97:0A:7D
Certificate issuer:       /CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
Certificate serial:       655F34DCB104CB0FE014C6DAA3FD0A2E9D2D6C55
Authority key identifier: 9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/3138372e3131312e38302e302f32302d3332203d3e203533313437.roa
Signing time:             Sun 30 Jun 2024 02:04:36 +0000
ROA not before:           Sun 30 Jun 2024 01:59:36 +0000
ROA not after:            Sun 29 Jun 2025 02:04:36 +0000
asID:                     53147
IP address blocks:        187.111.80.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:5f:34:dc:b1:04:cb:0f:e0:14:c6:da:a3:fd:0a:2e:9d:2d:6c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4
        Validity
            Not Before: Jun 30 01:59:36 2024 GMT
            Not After : Jun 29 02:04:36 2025 GMT
        Subject: CN=DBD8559A0A04E23C40C62F1FA1B586B41B970A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:3b:99:26:50:77:50:bf:3a:8e:f9:0a:22:
                    96:5d:d5:24:13:07:0a:db:ad:9f:04:37:8d:c5:9a:
                    6a:3a:a5:fc:ac:38:c3:2e:62:45:59:f6:c0:2b:d4:
                    9b:c0:e9:92:f1:9f:96:cd:66:01:f1:c2:04:b8:4d:
                    56:b7:28:aa:79:2e:0e:36:e6:24:a1:ca:92:3e:89:
                    a7:e6:ec:24:dc:af:61:b1:6e:b9:ae:31:2b:81:e6:
                    7d:97:d3:c3:f9:cf:0f:dd:5a:07:0a:c9:dc:58:61:
                    a1:03:4c:ec:d9:16:ea:1a:02:4c:89:52:49:34:89:
                    00:88:2a:45:4b:4c:fc:b3:4d:6e:e4:5b:63:c2:b9:
                    61:d4:14:3b:26:6b:de:df:10:29:80:f0:70:69:0e:
                    94:e0:3a:37:23:e0:6d:95:55:1d:d3:95:94:26:bf:
                    f9:2d:3d:97:91:9d:5a:07:11:98:47:ba:2c:ac:4a:
                    57:7b:06:eb:e0:a4:48:d9:9e:2e:18:96:36:14:54:
                    46:16:2b:bb:3a:10:69:5a:83:1d:6b:3a:01:32:6f:
                    71:9e:58:33:58:c0:cf:bc:e0:ef:44:55:72:50:35:
                    13:1b:db:ed:60:de:29:7f:06:7a:3e:40:f9:9e:fa:
                    7c:f5:a9:78:a3:c6:27:18:e1:c1:35:13:ae:34:5c:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:55:9A:0A:04:E2:3C:40:C6:2F:1F:A1:B5:86:B4:1B:97:0A:7D
            X509v3 Authority Key Identifier:
                keyid:9F:BC:DC:60:05:4A:9B:0B:53:B6:E9:F7:4B:B1:2B:10:94:39:7B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FBCDC60054A9B0B53B6E9F74BB12B1094397BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vd8pbfNvUyY1m55cokpkUmr1dAdn6EGMYWBcCEbCNrV/0/3138372e3131312e38302e302f32302d3332203d3e203533313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         da:b1:87:ed:c6:87:1b:38:29:4f:76:72:c9:30:8f:fe:b8:14:
         0f:b4:5c:21:47:17:ce:c4:15:87:79:6d:85:1c:ce:4a:f7:70:
         2a:f8:6f:cc:b3:19:28:72:b9:9a:a5:05:5e:5f:8f:61:42:36:
         8e:52:5a:1e:2c:27:90:77:22:af:85:75:a3:ea:55:fc:b7:8b:
         ab:f0:15:c6:22:09:48:49:0b:41:fa:82:c0:72:b4:d9:6b:d2:
         2e:e3:31:01:3e:45:29:ab:08:3b:c5:4e:8f:5c:8e:aa:43:dd:
         43:5a:96:7c:e2:28:36:4e:8b:4c:51:45:ac:72:21:04:2a:7b:
         47:28:03:b8:d4:e5:54:0a:b6:26:13:8d:29:b9:c6:0d:c7:cd:
         a9:32:3b:2c:e2:2f:ba:36:a3:3d:23:4f:fb:c4:92:18:62:d0:
         ce:00:52:85:79:ee:dd:10:7e:94:64:70:6b:df:6c:8d:4b:af:
         7e:a7:c2:a6:08:0f:af:e7:52:e6:17:36:d7:8a:f6:fa:0e:6f:
         ba:26:fc:27:52:2d:e0:07:58:ff:9c:44:7d:f4:69:b7:78:12:
         47:45:e6:9c:f1:ae:d4:25:d6:0a:96:06:f8:a2:f7:9e:ea:e7:
         bd:c3:e7:61:cf:7f:b2:86:5c:e8:7a:15:91:5a:8e:27:88:72:
         a3:7e:36:46
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZV803LEEyw/gFMbao/0KLp0tbFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZCQ0RDNjAwNTRBOUIwQjUzQjZFOUY3NEJCMTJCMTA5
NDM5N0JDNDAeFw0yNDA2MzAwMTU5MzZaFw0yNTA2MjkwMjA0MzZaMDMxMTAvBgNV
BAMTKERCRDg1NTlBMEEwNEUyM0M0MEM2MkYxRkExQjU4NkI0MUI5NzBBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvzuZJlB3UL86jvkKIpZd1SQT
BwrbrZ8EN43Fmmo6pfysOMMuYkVZ9sAr1JvA6ZLxn5bNZgHxwgS4TVa3KKp5Lg42
5iShypI+iafm7CTcr2GxbrmuMSuB5n2X08P5zw/dWgcKydxYYaEDTOzZFuoaAkyJ
Ukk0iQCIKkVLTPyzTW7kW2PCuWHUFDsma97fECmA8HBpDpTgOjcj4G2VVR3TlZQm
v/ktPZeRnVoHEZhHuiysSld7BuvgpEjZni4YljYUVEYWK7s6EGlagx1rOgEyb3Ge
WDNYwM+84O9EVXJQNRMb2+1g3il/Bno+QPme+nz1qXijxicY4cE1E640XEIZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU29hVmgoE4jxAxi8fobWGtBuXCn0wHwYDVR0j
BBgwFoAUn7zcYAVKmwtTtun3S7ErEJQ5e8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZkOHBiZk52VXlZMW01NWNva3BrVW1yMWRBZG42RUdNWVdCY0NFYkNO
clYvMC85RkJDREM2MDA1NEE5QjBCNTNCNkU5Rjc0QkIxMkIxMDk0Mzk3QkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGQkNEQzYwMDU0QTlCMEI1
M0I2RTlGNzRCQjEyQjEwOTQzOTdCQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2ZDhwYmZOdlV5WTFtNTVjb2twa1VtcjFkQWRuNkVHTVlXQmNDRWJDTnJWLzAv
MzEzODM3MmUzMTMxMzEyZTM4MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMz
MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEu29QMA0GCSqGSIb3DQEBCwUAA4IBAQDasYftxocb
OClPdnLJMI/+uBQPtFwhRxfOxBWHeW2FHM5K93Aq+G/MsxkocrmapQVeX49hQjaO
UloeLCeQdyKvhXWj6lX8t4ur8BXGIglISQtB+oLAcrTZa9Iu4zEBPkUpqwg7xU6P
XI6qQ91DWpZ84ig2TotMUUWsciEEKntHKAO41OVUCrYmE40pucYNx82pMjss4i+6
NqM9I0/7xJIYYtDOAFKFee7dEH6UZHBr32yNS69+p8KmCA+v51LmFzbXivb6Dm+6
JvwnUi3gB1j/nER99Gm3eBJHReac8a7UJdYKlgb4ovee6ue9w+dhz3+yhlzoehWR
Wo4niHKjfjZG
-----END CERTIFICATE-----
Generated at Sun Aug 11 15:25:48 2024 by rpki-client on console-ams.rpki-client.org