Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323634393237.roa
File:                     3136382e3232382e3138342e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          QKoVeqeFah/Lo/Eva4KrRA5Hu0yRWAjBXSvVkIne134=
Subject key identifier:   A5:21:FD:D7:C1:9D:D5:FB:FB:69:5C:99:94:9C:AE:B5:67:F1:97:CD
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       7C7166ED429ABEC948065E60B8C1EBB99CF477B7
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:08 +0000
ROA not before:           Wed 23 Oct 2024 17:53:08 +0000
ROA not after:            Wed 22 Oct 2025 17:58:08 +0000
asID:                     264927
IP address blocks:        168.228.184.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:66:ed:42:9a:be:c9:48:06:5e:60:b8:c1:eb:b9:9c:f4:77:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:08 2024 GMT
            Not After : Oct 22 17:58:08 2025 GMT
        Subject: CN=A521FDD7C19DD5FBFB695C99949CAEB567F197CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:8f:74:7d:87:3f:02:f8:d4:72:8d:c9:85:
                    cd:ec:2b:0e:22:b7:01:51:54:ed:38:f9:d3:30:78:
                    56:d3:52:ce:33:e4:ef:4b:ac:55:a3:37:20:d0:5e:
                    72:41:89:0b:5b:7b:12:36:d4:63:9f:c0:f8:3a:19:
                    28:b2:12:26:7a:0b:d2:ed:42:3d:dd:6a:ee:57:18:
                    a1:db:37:e7:cd:1e:e3:a7:36:ea:fe:a9:64:44:99:
                    38:1f:4e:94:5a:ce:9d:6e:7e:b4:db:d4:82:7b:5a:
                    3c:96:96:df:15:e4:01:3b:44:a8:ee:2a:55:f1:a5:
                    86:5d:4e:62:67:c5:41:d0:63:41:fa:53:6f:f0:1b:
                    34:d0:31:b4:31:6c:ec:ce:00:0c:29:4c:30:e4:9e:
                    7f:45:16:fc:bd:e8:cc:55:ee:36:f3:76:61:89:f5:
                    d5:6d:80:bc:39:d0:72:81:39:e3:e6:ea:51:b6:20:
                    bc:77:96:e0:52:37:5e:21:e1:6a:23:c8:69:e1:70:
                    bf:c8:de:22:4c:af:e4:63:b0:23:ba:68:f3:af:63:
                    37:56:ae:24:2d:7a:ea:5b:6e:3b:46:5c:d4:53:26:
                    27:8b:8d:bd:00:cc:66:99:d7:4a:e6:aa:38:03:b7:
                    06:3a:03:cd:9b:c3:17:4f:db:e2:c0:90:25:fa:fe:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:21:FD:D7:C1:9D:D5:FB:FB:69:5C:99:94:9C:AE:B5:67:F1:97:CD
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138342e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:68:e9:3f:5a:92:c4:02:9b:86:e3:66:23:f1:6b:6d:d7:
         a9:a6:23:95:ad:13:0c:b9:25:39:d8:ed:42:22:21:8d:b0:eb:
         b0:fd:f2:7f:1d:c2:72:ba:db:06:41:bd:06:cf:22:fc:d5:04:
         a4:ce:13:dc:e1:0c:a8:70:0f:30:83:da:9f:2f:e3:f6:fc:cf:
         94:a7:1b:88:c0:cc:88:99:9e:ed:6d:ab:46:75:21:f1:51:8c:
         60:c0:8d:9e:a8:83:9c:2d:47:3e:b9:c3:8b:89:f5:0f:43:a8:
         b3:7c:66:5e:5d:74:78:a1:9f:1b:00:16:8e:94:53:53:21:20:
         04:6d:fb:21:c8:ed:8b:5b:6c:94:a8:5d:bc:e3:24:8e:22:a7:
         95:18:a6:ff:d5:80:96:90:bd:67:53:03:46:c5:eb:a9:7e:e4:
         98:d5:7f:75:02:09:55:30:2d:f7:76:72:4e:3f:76:f7:a0:f9:
         98:a3:b4:e6:c7:71:2c:70:67:bf:ac:a7:64:45:f7:8d:59:f6:
         f9:44:75:5d:35:17:be:f4:64:94:78:a8:6f:38:88:f4:56:f2:
         d3:4d:1a:bd:7b:89:12:a9:fc:54:78:34:fe:9b:40:1c:2f:7b:
         ff:bd:0c:f0:5f:72:ee:88:9e:95:31:d3:ee:27:4b:e3:dd:98:
         4d:e6:10:d3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfHFm7UKavslIBl5guMHruZz0d7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ1ODg4NjVCQTJDOTNGRjBEOEUxRDE4NzQ1MTRCMjAy
QjUwRUVCMTAeFw0yNDEwMjMxNzUzMDhaFw0yNTEwMjIxNzU4MDhaMDMxMTAvBgNV
BAMTKEE1MjFGREQ3QzE5REQ1RkJGQjY5NUM5OTk0OUNBRUI1NjdGMTk3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TY90fYc/AvjUco3Jhc3sKw4i
twFRVO04+dMweFbTUs4z5O9LrFWjNyDQXnJBiQtbexI21GOfwPg6GSiyEiZ6C9Lt
Qj3dau5XGKHbN+fNHuOnNur+qWREmTgfTpRazp1ufrTb1IJ7WjyWlt8V5AE7RKju
KlXxpYZdTmJnxUHQY0H6U2/wGzTQMbQxbOzOAAwpTDDknn9FFvy96MxV7jbzdmGJ
9dVtgLw50HKBOePm6lG2ILx3luBSN14h4WojyGnhcL/I3iJMr+RjsCO6aPOvYzdW
riQteupbbjtGXNRTJieLjb0AzGaZ10rmqjgDtwY6A82bwxdP2+LAkCX6/tnRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpSH918Gd1fv7aVyZlJyutWfxl80wHwYDVR0j
BBgwFoAUHViIZbosk/8Njh0YdFFLICtQ7rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC8xRDU4ODg2NUJBMkM5M0ZGMEQ4RTFEMTg3NDUxNEIyMDJCNTBFRUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENTg4ODY1QkEyQzkzRkYw
RDhFMUQxODc0NTE0QjIwMkI1MEVFQjEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmUnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAv
MzEzNjM4MmUzMjMyMzgyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjkuDANBgkqhkiG9w0BAQsFAAOCAQEAik5o
6T9aksQCm4bjZiPxa23XqaYjla0TDLklOdjtQiIhjbDrsP3yfx3CcrrbBkG9Bs8i
/NUEpM4T3OEMqHAPMIPany/j9vzPlKcbiMDMiJme7W2rRnUh8VGMYMCNnqiDnC1H
PrnDi4n1D0Oos3xmXl10eKGfGwAWjpRTUyEgBG37Icjti1tslKhdvOMkjiKnlRim
/9WAlpC9Z1MDRsXrqX7kmNV/dQIJVTAt93ZyTj9296D5mKO05sdxLHBnv6ynZEX3
jVn2+UR1XTUXvvRklHiobziI9Fby000avXuJEqn8VHg0/ptAHC97/70M8F9y7oie
lTHT7idL492YTeYQ0w==
-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org