Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33372e302f32342d3234203d3e20323636303231.roa
File:                     3137302e3234352e33372e302f32342d3234203d3e20323636303231.roa (raw, json)
Hash identifier:          wIkijtGy7nCwYS0X1WQ3zDM6u7xGip1Yr27i5DxoqcY=
Subject key identifier:   AE:8E:A7:2E:B1:06:E1:90:3A:81:80:F3:37:A0:95:9F:9D:14:A3:B2
Certificate issuer:       /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial:       59F6198BF89CD1349F9587B0B4B0DE705B87F394
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33372e302f32342d3234203d3e20323636303231.roa
Signing time:             Wed 24 Apr 2024 16:08:34 +0000
ROA not before:           Wed 24 Apr 2024 16:03:34 +0000
ROA not after:            Wed 23 Apr 2025 16:08:34 +0000
asID:                     266021
IP address blocks:        170.245.37.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:19:8b:f8:9c:d1:34:9f:95:87:b0:b4:b0:de:70:5b:87:f3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Validity
            Not Before: Apr 24 16:03:34 2024 GMT
            Not After : Apr 23 16:08:34 2025 GMT
        Subject: CN=AE8EA72EB106E1903A8180F337A0959F9D14A3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c8:07:73:4a:c8:c8:57:d8:56:27:19:db:11:
                    b5:5e:85:83:49:7a:70:a1:d1:2b:ed:b3:60:c6:81:
                    76:b9:f3:58:24:1e:06:0b:4a:2c:ee:05:9e:0e:ae:
                    19:bb:da:ae:ee:5d:b8:2d:3b:67:b2:af:80:39:9a:
                    56:a8:f1:02:60:45:a7:9a:ea:60:4a:7d:bb:1d:7c:
                    fb:d4:cd:06:98:f2:df:da:9e:46:e4:78:84:29:a7:
                    70:77:d9:6b:6a:ef:ee:fe:e9:50:07:e5:61:33:37:
                    68:bf:ec:5b:29:79:8b:5f:f6:e2:a4:4d:d4:78:c1:
                    99:2c:2e:11:0d:1a:35:ff:3c:7a:84:c2:eb:8a:88:
                    46:47:d5:3d:9d:36:5f:d9:95:34:b5:fc:53:c7:6b:
                    f5:80:bf:d0:fb:21:e7:9f:ef:e9:f0:ee:8f:86:b4:
                    8a:18:6b:c6:1b:30:09:c7:97:ab:4f:96:c4:79:a8:
                    d8:42:b2:55:b8:f4:86:22:d1:ae:43:52:8f:c6:1c:
                    2d:80:32:19:aa:1e:fd:b4:fe:7a:f5:c2:d4:47:64:
                    c7:62:8e:39:27:de:64:45:51:6a:77:f8:6a:9a:bf:
                    15:ba:0d:ba:d7:50:b3:73:fe:16:8c:fa:a2:1b:c2:
                    40:63:70:00:7e:9f:40:20:fe:1f:72:f3:a5:b3:7d:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:A7:2E:B1:06:E1:90:3A:81:80:F3:37:A0:95:9F:9D:14:A3:B2
            X509v3 Authority Key Identifier:
                keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33372e302f32342d3234203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:88:4b:2b:94:5c:ae:d3:1e:ac:f6:e5:26:f2:ed:5e:76:
         0b:98:15:38:b4:ae:e4:09:91:1d:42:69:ed:0f:9e:11:0b:bb:
         e2:de:8f:65:0d:02:95:9b:a2:af:45:1f:58:d2:3b:73:49:bd:
         f1:98:8a:6c:2b:b7:6d:9e:2e:5d:f2:ff:99:96:22:77:4e:e6:
         94:08:af:e5:f4:db:e1:4e:a7:bd:0d:d2:9d:af:85:c0:34:03:
         97:ba:80:0f:44:ab:b7:53:8d:1d:4e:e7:eb:ff:8a:d5:4c:89:
         3e:f1:f8:b2:6a:3b:ed:4b:05:e7:a1:cd:9e:11:48:92:ea:ab:
         f2:ec:2a:bd:49:7f:e7:c5:df:b4:fd:5c:ff:a2:52:a2:e2:44:
         6e:48:8c:c7:6e:a8:c4:36:3a:cd:38:b3:79:0f:24:d9:60:67:
         29:96:4e:cf:86:20:da:36:2a:15:44:42:24:ba:9e:2f:a4:70:
         b5:2c:69:df:8e:67:f5:98:1a:46:e5:35:ad:e3:bf:0b:b0:7c:
         c0:8a:45:71:51:a6:18:ec:b0:9b:a7:94:51:59:3a:3f:12:2d:
         fe:82:77:d1:e7:51:c1:2f:dc:0a:bb:69:d1:f2:b8:20:a4:15:
         89:14:0c:c5:f8:77:2c:c4:55:7b:3c:8d:6b:ae:c9:9b:8c:01:
         eb:b6:ef:b6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWfYZi/ic0TSflYewtLDecFuH85QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDQTk3NEU5MTk0MjU1NEY4RjdGMjVDOTc5MkExQkNE
RUIzNzU4QzAeFw0yNDA0MjQxNjAzMzRaFw0yNTA0MjMxNjA4MzRaMDMxMTAvBgNV
BAMTKEFFOEVBNzJFQjEwNkUxOTAzQTgxODBGMzM3QTA5NTlGOUQxNEEzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxyAdzSsjIV9hWJxnbEbVehYNJ
enCh0Svts2DGgXa581gkHgYLSizuBZ4Orhm72q7uXbgtO2eyr4A5mlao8QJgRaea
6mBKfbsdfPvUzQaY8t/ankbkeIQpp3B32Wtq7+7+6VAH5WEzN2i/7FspeYtf9uKk
TdR4wZksLhENGjX/PHqEwuuKiEZH1T2dNl/ZlTS1/FPHa/WAv9D7Ieef7+nw7o+G
tIoYa8YbMAnHl6tPlsR5qNhCslW49IYi0a5DUo/GHC2AMhmqHv20/nr1wtRHZMdi
jjkn3mRFUWp3+GqavxW6DbrXULNz/haM+qIbwkBjcAB+n0Ag/h9y86WzfXBXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUro6nLrEG4ZA6gYDzN6CVn50Uo7IwHwYDVR0j
BBgwFoAU1cqXTpGUJVT49/Jcl5KhvN6zdYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC9ENUNBOTc0RTkxOTQyNTU0RjhGN0YyNUM5NzkyQTFCQ0RFQjM3NThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1Q0E5NzRFOTE5NDI1NTRG
OEY3RjI1Qzk3OTJBMUJDREVCMzc1OEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzEzNzMwMmUzMjM0MzUyZTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9SUwDQYJKoZIhvcNAQELBQADggEBAKQziEsr
lFyu0x6s9uUm8u1edguYFTi0ruQJkR1Cae0PnhELu+Lej2UNApWboq9FH1jSO3NJ
vfGYimwrt22eLl3y/5mWIndO5pQIr+X02+FOp70N0p2vhcA0A5e6gA9Eq7dTjR1O
5+v/itVMiT7x+LJqO+1LBeehzZ4RSJLqq/LsKr1Jf+fF37T9XP+iUqLiRG5IjMdu
qMQ2Os04s3kPJNlgZymWTs+GINo2KhVEQiS6ni+kcLUsad+OZ/WYGkblNa3jvwuw
fMCKRXFRphjssJunlFFZOj8SLf6Cd9HnUcEv3Aq7adHyuCCkFYkUDMX4dyzEVXs8
jWuuyZuMAeu277Y=
-----END CERTIFICATE-----
Generated at Fri Jun 7 10:21:45 2024 by rpki-client on console-fra.rpki-client.org