Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323634393237.roa
File:                     3136382e3232382e3138342e302f32322d3232203d3e20323634393237.roa (raw, json)
Hash identifier:          cjCIJbQCtJrdoban9FMPd56WMnq6X0GgP7UZ7vYUkAc=
Subject key identifier:   53:E8:A3:6D:C3:21:96:0A:50:87:50:A3:C8:51:A0:A1:4C:6D:33:D2
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       4CB3F50EBA75F7294CD910C4B9B9CA8EE400CCE8
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:07 +0000
ROA not before:           Wed 23 Oct 2024 17:53:07 +0000
ROA not after:            Wed 22 Oct 2025 17:58:07 +0000
asID:                     264927
IP address blocks:        168.228.184.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b3:f5:0e:ba:75:f7:29:4c:d9:10:c4:b9:b9:ca:8e:e4:00:cc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:07 2024 GMT
            Not After : Oct 22 17:58:07 2025 GMT
        Subject: CN=53E8A36DC321960A508750A3C851A0A14C6D33D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:93:e0:19:9e:0e:68:8c:0f:58:d8:3e:ba:
                    cb:2b:dc:3e:0f:b6:a9:a3:af:6d:af:93:ac:36:0f:
                    89:da:63:9c:22:51:76:10:21:3a:99:6a:4d:d5:45:
                    4f:bf:e2:b1:fa:1d:ef:e8:05:e8:cd:e4:90:56:b3:
                    d3:38:04:2c:7d:a0:ab:17:43:54:44:de:fe:45:07:
                    cb:c3:f1:36:85:47:fe:2b:29:22:74:33:af:a8:c1:
                    8a:50:3e:37:2a:8c:6e:e2:2b:2e:43:93:cd:07:02:
                    17:a3:0e:aa:db:f2:ba:57:20:5a:2a:63:4f:7a:2e:
                    e3:b4:7f:f2:ec:ac:6b:f2:ab:95:0d:24:68:fe:b1:
                    24:b5:cb:ad:16:91:23:44:24:ae:0f:25:1f:b9:ff:
                    c6:ac:0e:15:2f:37:fb:fa:b3:bc:eb:8f:bf:7b:73:
                    02:4b:d6:42:7b:d6:ae:f4:2c:6a:ee:eb:24:54:21:
                    04:fb:eb:36:4b:a0:b3:9f:af:f6:a9:4f:9e:da:a7:
                    49:6d:7c:c6:37:b6:1b:aa:55:70:3b:72:cd:c5:8b:
                    a4:7f:01:eb:ed:d7:4f:91:3a:1f:b3:dd:07:d5:cf:
                    10:99:e5:65:75:57:9f:5f:ba:c5:c3:77:48:e5:a0:
                    e7:73:2b:d9:93:ea:6e:6b:f5:c1:13:53:00:9b:29:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:A3:6D:C3:21:96:0A:50:87:50:A3:C8:51:A0:A1:4C:6D:33:D2
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32322d3232203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:83:17:85:3c:30:53:8c:95:45:a3:a8:67:8c:e4:0d:52:bd:
         cf:fc:44:79:08:5d:b8:bc:44:3e:f0:b7:84:77:d5:5d:49:80:
         f1:1f:60:5e:c4:ce:79:d5:44:08:ae:70:f5:d9:63:98:3d:5e:
         ab:9e:6b:46:19:68:99:16:db:32:9b:89:53:f0:de:b8:bb:6c:
         b7:20:10:e8:55:8b:bf:da:4e:86:8b:d7:0f:97:62:c8:44:fe:
         df:07:21:ab:a9:86:ca:c6:c0:46:34:69:95:b0:94:a7:01:bc:
         c6:3d:dc:be:d5:d4:cb:a5:cc:f4:fd:6d:c8:c8:b7:47:bb:1b:
         2d:c5:36:1e:54:70:87:56:5c:55:4d:2d:93:1e:1f:77:e5:ab:
         c5:cf:ee:d9:40:cf:09:9b:c0:79:3b:a2:c6:6a:be:83:ec:70:
         8d:58:45:b1:18:c2:13:dd:db:da:3f:66:f8:0d:37:e8:5e:70:
         d0:8d:5a:ee:27:82:aa:d6:86:3a:ff:7b:d9:32:b8:5e:30:82:
         ad:f2:b1:bd:7a:8f:ec:96:dd:9c:d9:34:9f:bc:db:a9:ac:25:
         a8:b0:ad:9d:95:5d:2f:54:52:89:b6:ed:b6:72:c2:4b:fd:da:
         b8:d0:21:42:6c:9b:b5:f8:d9:09:a1:35:a3:e2:65:d5:55:65:
         3f:2a:1f:4a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTLP1Drp19ylM2RDEubnKjuQAzOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ1ODg4NjVCQTJDOTNGRjBEOEUxRDE4NzQ1MTRCMjAy
QjUwRUVCMTAeFw0yNDEwMjMxNzUzMDdaFw0yNTEwMjIxNzU4MDdaMDMxMTAvBgNV
BAMTKDUzRThBMzZEQzMyMTk2MEE1MDg3NTBBM0M4NTFBMEExNEM2RDMzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMJPgGZ4OaIwPWNg+ussr3D4P
tqmjr22vk6w2D4naY5wiUXYQITqZak3VRU+/4rH6He/oBejN5JBWs9M4BCx9oKsX
Q1RE3v5FB8vD8TaFR/4rKSJ0M6+owYpQPjcqjG7iKy5Dk80HAhejDqrb8rpXIFoq
Y096LuO0f/LsrGvyq5UNJGj+sSS1y60WkSNEJK4PJR+5/8asDhUvN/v6s7zrj797
cwJL1kJ71q70LGru6yRUIQT76zZLoLOfr/apT57ap0ltfMY3thuqVXA7cs3Fi6R/
Aevt10+ROh+z3QfVzxCZ5WV1V59fusXDd0jloOdzK9mT6m5r9cETUwCbKW7vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUU+ijbcMhlgpQh1CjyFGgoUxtM9IwHwYDVR0j
BBgwFoAUHViIZbosk/8Njh0YdFFLICtQ7rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC8xRDU4ODg2NUJBMkM5M0ZGMEQ4RTFEMTg3NDUxNEIyMDJCNTBFRUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENTg4ODY1QkEyQzkzRkYw
RDhFMUQxODc0NTE0QjIwMkI1MEVFQjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmUnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNDM5MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjkuDANBgkqhkiG9w0BAQsFAAOCAQEAN4MX
hTwwU4yVRaOoZ4zkDVK9z/xEeQhduLxEPvC3hHfVXUmA8R9gXsTOedVECK5w9dlj
mD1eq55rRhlomRbbMpuJU/DeuLtstyAQ6FWLv9pOhovXD5diyET+3wchq6mGysbA
RjRplbCUpwG8xj3cvtXUy6XM9P1tyMi3R7sbLcU2HlRwh1ZcVU0tkx4fd+Wrxc/u
2UDPCZvAeTuixmq+g+xwjVhFsRjCE93b2j9m+A036F5w0I1a7ieCqtaGOv972TK4
XjCCrfKxvXqP7JbdnNk0n7zbqawlqLCtnZVdL1RSibbttnLCS/3auNAhQmybtfjZ
CaE1o+Jl1VVlPyofSg==
-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org