Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa
File:                     3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa (raw, json)
Hash identifier:          OKIYqD4mAIlkRAHGK4FbTLbcCGOTcpC2FE+rVIGY0HA=
Subject key identifier:   C3:A3:C7:A6:6E:AA:B5:D3:E3:A8:FC:1E:E8:B2:96:17:61:E6:C1:76
Certificate issuer:       /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial:       5AA3EF3AADC51B0290CCAE8DDD49B6320313A924
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa
Signing time:             Wed 24 Apr 2024 16:08:33 +0000
ROA not before:           Wed 24 Apr 2024 16:03:33 +0000
ROA not after:            Wed 23 Apr 2025 16:08:33 +0000
asID:                     266021
IP address blocks:        170.245.39.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a3:ef:3a:ad:c5:1b:02:90:cc:ae:8d:dd:49:b6:32:03:13:a9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
        Validity
            Not Before: Apr 24 16:03:33 2024 GMT
            Not After : Apr 23 16:08:33 2025 GMT
        Subject: CN=C3A3C7A66EAAB5D3E3A8FC1EE8B2961761E6C176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:50:3d:f7:12:cc:40:73:5b:3f:d0:b9:d9:
                    eb:3a:d6:ba:fd:45:b4:2e:18:de:80:a4:aa:cb:60:
                    0b:22:9d:d6:b6:58:d3:7b:d5:9a:95:bc:12:17:a2:
                    38:9d:34:a4:94:fa:01:0e:c7:81:50:7e:44:d4:5f:
                    00:98:d3:6c:47:98:f3:4f:a2:a9:58:1e:c3:94:f8:
                    30:f8:71:b4:11:6c:58:5d:5e:3a:0c:ab:83:ba:46:
                    21:74:24:05:af:5b:0d:cf:19:73:fe:0b:96:c8:b8:
                    3d:1a:a8:95:bc:19:c2:df:45:ce:c8:51:51:bf:54:
                    29:1d:4b:bd:db:61:ff:dc:d7:bf:6e:41:04:8a:78:
                    28:d8:9d:97:6e:6c:8a:b5:33:0c:98:fa:08:98:69:
                    c6:57:12:f4:20:83:5d:21:34:b7:2f:b4:e5:af:8a:
                    59:0a:65:da:0e:45:87:eb:0c:55:e6:e1:20:31:89:
                    c6:47:97:0c:31:63:cd:35:50:b0:43:b2:4c:b1:a2:
                    a4:f2:80:ce:aa:e3:f4:24:bc:bd:e7:1e:91:a9:e4:
                    ae:fa:4f:f2:60:82:aa:e9:8e:0c:fb:18:09:ba:32:
                    4b:df:34:ff:4a:55:72:b9:32:a5:c5:44:e6:f1:79:
                    59:ae:c5:d2:57:f6:bf:ea:f7:31:64:e0:01:96:07:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A3:C7:A6:6E:AA:B5:D3:E3:A8:FC:1E:E8:B2:96:17:61:E6:C1:76
            X509v3 Authority Key Identifier:
                keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33392e302f32342d3234203d3e20323636303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:9a:34:1d:9e:60:ca:c6:2f:0c:f3:bb:ee:ec:f8:0e:f2:c7:
         6a:15:f2:02:8e:6d:f0:3f:d6:da:2f:45:c4:27:65:f8:c6:a2:
         71:d1:22:42:79:d0:d5:7f:91:f2:8d:4a:25:fb:6f:24:a5:50:
         70:ec:4d:b2:b7:7c:a0:6a:64:5c:f6:e5:79:6d:a5:fc:a3:8b:
         80:80:19:ca:43:0b:ba:94:9f:23:ea:78:25:d8:4b:cf:6e:e0:
         a7:63:a1:5c:90:9e:4c:27:6c:9d:f0:40:e1:c2:eb:01:12:dc:
         01:d5:e7:0f:ff:16:a0:34:d6:b8:9a:0d:75:f6:7f:64:f1:33:
         b9:eb:b5:33:1d:8c:4e:1b:ef:19:e8:c4:64:0e:31:61:8c:79:
         fd:a6:d1:30:c3:9b:bd:10:51:d8:6f:51:07:fe:3c:53:05:9b:
         f4:bd:81:05:b7:59:cf:61:25:4c:c9:d3:af:0d:06:8b:48:70:
         41:e4:cc:7e:38:28:3e:e1:a2:8d:a2:6c:08:19:7c:1a:7b:31:
         a6:23:fc:77:80:a1:00:14:6a:0d:c0:e8:4b:c3:9d:1d:0d:1c:
         eb:90:32:e8:06:23:b6:a0:7a:3d:9b:00:df:a7:33:c0:8f:6a:
         51:98:3b:a4:0d:6d:82:c2:7a:85:cb:91:f5:04:5c:8c:0d:d0:
         c6:25:ad:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWqPvOq3FGwKQzK6N3Um2MgMTqSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVDQTk3NEU5MTk0MjU1NEY4RjdGMjVDOTc5MkExQkNE
RUIzNzU4QzAeFw0yNDA0MjQxNjAzMzNaFw0yNTA0MjMxNjA4MzNaMDMxMTAvBgNV
BAMTKEMzQTNDN0E2NkVBQUI1RDNFM0E4RkMxRUU4QjI5NjE3NjFFNkMxNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sFA99xLMQHNbP9C52es61rr9
RbQuGN6ApKrLYAsinda2WNN71ZqVvBIXojidNKSU+gEOx4FQfkTUXwCY02xHmPNP
oqlYHsOU+DD4cbQRbFhdXjoMq4O6RiF0JAWvWw3PGXP+C5bIuD0aqJW8GcLfRc7I
UVG/VCkdS73bYf/c179uQQSKeCjYnZdubIq1MwyY+giYacZXEvQgg10hNLcvtOWv
ilkKZdoORYfrDFXm4SAxicZHlwwxY801ULBDskyxoqTygM6q4/QkvL3nHpGp5K76
T/Jggqrpjgz7GAm6MkvfNP9KVXK5MqXFRObxeVmuxdJX9r/q9zFk4AGWBzzXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw6PHpm6qtdPjqPwe6LKWF2HmwXYwHwYDVR0j
BBgwFoAU1cqXTpGUJVT49/Jcl5KhvN6zdYwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFDWTYyWHFqNEhuTlh0dkcyd2ZXNHFaTTNBTnNvN1NWajlNUkxZNXla
NWEvMC9ENUNBOTc0RTkxOTQyNTU0RjhGN0YyNUM5NzkyQTFCQ0RFQjM3NThDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1Q0E5NzRFOTE5NDI1NTRG
OEY3RjI1Qzk3OTJBMUJDREVCMzc1OEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBQ1k2MlhxajRIbk5YdHZHMndmVzRxWk0zQU5zbzdTVmo5TVJMWTV5WjVhLzAv
MzEzNzMwMmUzMjM0MzUyZTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq9ScwDQYJKoZIhvcNAQELBQADggEBACKaNB2e
YMrGLwzzu+7s+A7yx2oV8gKObfA/1tovRcQnZfjGonHRIkJ50NV/kfKNSiX7bySl
UHDsTbK3fKBqZFz25Xltpfyji4CAGcpDC7qUnyPqeCXYS89u4KdjoVyQnkwnbJ3w
QOHC6wES3AHV5w//FqA01riaDXX2f2TxM7nrtTMdjE4b7xnoxGQOMWGMef2m0TDD
m70QUdhvUQf+PFMFm/S9gQW3Wc9hJUzJ068NBotIcEHkzH44KD7hoo2ibAgZfBp7
MaYj/HeAoQAUag3A6EvDnR0NHOuQMugGI7agej2bAN+nM8CPalGYO6QNbYLCeoXL
kfUEXIwN0MYlrTs=
-----END CERTIFICATE-----
Generated at Fri Jun 7 10:21:45 2024 by rpki-client on console-fra.rpki-client.org