Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3234203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32322d3234203d3e20323635333238.roa (raw, json)
Hash identifier:          J6tAoiuQ17iFRL5LWGtkVPegFpqiVxFCmMIAKkTSHt0=
Subject key identifier:   90:34:D5:13:48:D2:EB:78:B7:40:53:C4:BB:3D:20:C3:FB:5D:F8:72
Certificate issuer:       /CN=9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3
Certificate serial:       2DF92F1B878BE5C4D31D52A121FD8DBBD93817CA
Authority key identifier: 9D:E5:BD:9F:77:5A:7B:F3:95:FD:CC:8E:A8:1D:68:9E:5F:04:EC:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3234203d3e20323635333238.roa
Signing time:             Mon 06 May 2024 20:27:28 +0000
ROA not before:           Mon 06 May 2024 20:22:28 +0000
ROA not after:            Mon 05 May 2025 20:27:28 +0000
asID:                     265328
IP address blocks:        168.181.64.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f9:2f:1b:87:8b:e5:c4:d3:1d:52:a1:21:fd:8d:bb:d9:38:17:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3
        Validity
            Not Before: May  6 20:22:28 2024 GMT
            Not After : May  5 20:27:28 2025 GMT
        Subject: CN=9034D51348D2EB78B74053C4BB3D20C3FB5DF872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:b2:1b:52:bc:b5:57:ea:e2:5b:07:02:81:
                    07:a6:62:de:a7:bd:12:b7:cb:d0:67:91:51:ab:5e:
                    13:ae:23:c2:8d:e4:7f:1b:77:28:53:bb:5c:6b:8e:
                    d5:5c:b0:c8:b1:09:bc:d9:29:bd:91:22:04:3b:58:
                    0f:5f:96:37:54:ff:a6:16:f7:bd:da:16:1c:84:22:
                    14:31:74:1d:aa:20:df:fe:9b:86:55:c3:48:43:10:
                    47:45:a8:dd:85:76:30:f3:5c:7b:aa:4a:74:a7:83:
                    20:51:84:86:ab:fd:4f:fc:ea:81:5a:32:0d:e5:3a:
                    fa:fe:67:33:a5:80:e9:e5:31:26:27:53:aa:1a:59:
                    79:5b:44:db:cd:f4:74:5a:eb:f6:03:b9:7a:32:2d:
                    35:be:21:0c:af:f7:1d:85:b0:fc:81:0c:23:86:4a:
                    03:5c:14:6f:95:9e:80:9a:92:c1:e0:6f:a1:63:02:
                    3c:16:39:88:fb:cc:9e:f5:ec:a5:05:7b:b1:47:21:
                    00:3f:01:7c:3c:1c:4f:1b:24:70:b8:00:c1:5a:af:
                    b3:cb:4c:0c:b6:24:e7:4b:19:a5:8a:77:7a:7d:bb:
                    11:9c:15:18:f5:42:71:e9:cc:73:fc:b1:a4:aa:2d:
                    a7:8f:93:d9:4f:2f:8b:cf:f4:f6:03:77:a4:1a:2a:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:34:D5:13:48:D2:EB:78:B7:40:53:C4:BB:3D:20:C3:FB:5D:F8:72
            X509v3 Authority Key Identifier:
                keyid:9D:E5:BD:9F:77:5A:7B:F3:95:FD:CC:8E:A8:1D:68:9E:5F:04:EC:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE5BD9F775A7BF395FDCC8EA81D689E5F04ECD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32322d3234203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:9e:aa:2b:25:b5:b4:c0:1d:08:da:50:8f:e7:76:6b:58:fa:
         52:e7:3f:02:d8:b5:01:8d:18:91:91:77:fa:d8:b2:f7:67:b4:
         12:d4:6d:fe:67:4f:25:a7:23:b2:87:63:16:78:84:44:ab:e5:
         f8:86:53:c4:90:98:40:31:88:bd:7b:f0:ed:06:6d:70:aa:99:
         6f:0e:dd:fe:21:28:55:ba:8e:51:99:87:33:63:26:6f:0d:9d:
         6a:05:96:75:71:8e:ca:02:81:fe:fd:f6:83:b3:c6:dc:e8:97:
         bb:ac:b2:00:59:cc:46:23:92:42:a8:02:f1:55:b5:58:bd:87:
         1f:66:49:e5:f1:d5:01:be:d5:f1:f4:a6:1b:22:b2:c6:1a:51:
         a3:d1:b8:e6:6b:f5:8c:a9:20:44:d3:dc:77:73:a6:69:92:25:
         57:d7:0c:00:50:21:b2:e8:45:73:87:6f:22:b2:87:ce:2e:16:
         f2:59:c9:8b:82:7b:a1:95:62:3c:b8:4d:a2:df:a2:a7:3c:46:
         c1:f7:e6:3e:30:69:21:de:bf:62:4d:bb:3c:ce:bc:ec:1c:a1:
         40:3b:45:73:02:d8:ef:f2:ea:a1:c8:89:94:4b:64:2a:4f:e0:
         0f:cf:9e:90:50:f4:31:b0:2f:28:9d:40:0c:56:60:9f:29:5b:
         f5:eb:ff:98
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULfkvG4eL5cTTHVKhIf2Nu9k4F8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURFNUJEOUY3NzVBN0JGMzk1RkRDQzhFQTgxRDY4OUU1
RjA0RUNEMzAeFw0yNDA1MDYyMDIyMjhaFw0yNTA1MDUyMDI3MjhaMDMxMTAvBgNV
BAMTKDkwMzRENTEzNDhEMkVCNzhCNzQwNTNDNEJCM0QyMEMzRkI1REY4NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCop7IbUry1V+riWwcCgQemYt6n
vRK3y9BnkVGrXhOuI8KN5H8bdyhTu1xrjtVcsMixCbzZKb2RIgQ7WA9fljdU/6YW
973aFhyEIhQxdB2qIN/+m4ZVw0hDEEdFqN2FdjDzXHuqSnSngyBRhIar/U/86oFa
Mg3lOvr+ZzOlgOnlMSYnU6oaWXlbRNvN9HRa6/YDuXoyLTW+IQyv9x2FsPyBDCOG
SgNcFG+VnoCaksHgb6FjAjwWOYj7zJ717KUFe7FHIQA/AXw8HE8bJHC4AMFar7PL
TAy2JOdLGaWKd3p9uxGcFRj1QnHpzHP8saSqLaePk9lPL4vP9PYDd6QaKi+hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkDTVE0jS63i3QFPEuz0gw/td+HIwHwYDVR0j
BBgwFoAUneW9n3dae/OV/cyOqB1onl8E7NMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVRZNkc5a0tTWVZicVBzUmtrYnhuZEdldjVDbUFvZXRIZThoODNLVFFF
elUvMC85REU1QkQ5Rjc3NUE3QkYzOTVGRENDOEVBODFENjg5RTVGMDRFQ0QzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERTVCRDlGNzc1QTdCRjM5
NUZEQ0M4RUE4MUQ2ODlFNUYwNEVDRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlUWTZHOWtLU1lWYnFQc1Jra2J4bmRHZXY1Q21Bb2V0SGU4aDgzS1RRRXpVLzAv
MzEzNjM4MmUzMTM4MzEyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKotUAwDQYJKoZIhvcNAQELBQADggEBACeeqisl
tbTAHQjaUI/ndmtY+lLnPwLYtQGNGJGRd/rYsvdntBLUbf5nTyWnI7KHYxZ4hESr
5fiGU8SQmEAxiL178O0GbXCqmW8O3f4hKFW6jlGZhzNjJm8NnWoFlnVxjsoCgf79
9oOzxtzol7ussgBZzEYjkkKoAvFVtVi9hx9mSeXx1QG+1fH0phsissYaUaPRuOZr
9YypIETT3HdzpmmSJVfXDABQIbLoRXOHbyKyh84uFvJZyYuCe6GVYjy4TaLfoqc8
RsH35j4waSHev2JNuzzOvOwcoUA7RXMC2O/y6qHIiZRLZCpP4A/PnpBQ9DGwLyid
QAxWYJ8pW/Xr/5g=
-----END CERTIFICATE-----
Generated at Sat Nov 16 13:54:37 2024 by rpki-client on console-fra.rpki-client.org