Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa
File:                     3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier:          pJQbcyEVYXzjIWgz9VdOCOQaXee1YDYWscKLG1ReVp0=
Subject key identifier:   C3:E0:06:70:F6:38:31:E5:7E:71:6A:00:8D:6C:AE:AA:4B:F8:72:26
Certificate issuer:       /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial:       1926CCFD37C0B0FC80485FA4A70CFE7205045C0D
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa
Signing time:             Wed 23 Oct 2024 17:58:09 +0000
ROA not before:           Wed 23 Oct 2024 17:53:09 +0000
ROA not after:            Wed 22 Oct 2025 17:58:09 +0000
asID:                     264927
IP address blocks:        201.159.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:cc:fd:37:c0:b0:fc:80:48:5f:a4:a7:0c:fe:72:05:04:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
        Validity
            Not Before: Oct 23 17:53:09 2024 GMT
            Not After : Oct 22 17:58:09 2025 GMT
        Subject: CN=C3E00670F63831E57E716A008D6CAEAA4BF87226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:5f:b4:37:ce:b0:5c:80:2e:54:64:cf:7b:
                    bb:73:7c:b4:c2:2b:3f:53:79:ce:36:2a:b3:97:5e:
                    1b:fb:1e:a3:96:4e:f0:f1:66:16:8d:d4:a9:d8:65:
                    fe:1e:f8:a4:aa:fe:cb:54:8b:8a:f9:ea:d1:d8:c5:
                    8d:84:fe:91:43:1f:4f:b5:55:f2:8b:d9:42:4c:25:
                    13:0d:0f:7a:15:0b:3b:24:29:6e:0b:cc:88:ff:75:
                    ad:b7:b0:f9:2a:94:44:63:3f:6c:4d:b9:a7:19:40:
                    6a:c1:3d:55:51:c3:ba:ed:78:9c:4c:1b:7f:5c:19:
                    ff:ca:02:81:41:9d:26:36:61:f2:7f:1b:70:ff:6d:
                    65:60:05:69:6f:91:6b:46:66:42:eb:1a:2d:e2:f5:
                    7d:3c:0c:d3:0c:7e:a4:bb:ab:f3:87:e7:2a:46:7f:
                    ed:b5:c4:f2:1a:69:4b:69:0b:b9:4b:e7:e6:d1:4d:
                    4e:64:96:54:f3:3a:86:e2:c0:3f:7f:1a:6a:f8:6d:
                    6a:e4:85:c7:29:3f:49:c3:4c:79:cd:55:fb:6a:2d:
                    84:d8:14:a7:45:08:e4:68:e0:60:8e:27:b3:ee:71:
                    85:5c:81:ce:6e:b1:1e:e2:9c:9d:35:d8:21:7e:6c:
                    84:83:66:e3:13:89:94:27:b0:d7:51:59:93:98:cd:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E0:06:70:F6:38:31:E5:7E:71:6A:00:8D:6C:AE:AA:4B:F8:72:26
            X509v3 Authority Key Identifier:
                keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3230312e3135392e39302e302f32342d3234203d3e20323634393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:61:ba:78:2d:bf:49:a2:ad:51:83:87:6d:fe:6f:61:1a:
         1d:4e:db:41:92:10:24:39:05:58:de:b4:65:61:66:c3:12:a8:
         58:83:cb:f3:9d:a1:c7:5d:b1:28:7d:17:9c:6d:0a:63:5e:dd:
         39:45:ce:01:bf:49:11:90:32:4f:63:6d:1c:88:ab:c7:38:a9:
         73:46:f0:fe:e7:73:fc:3c:47:97:ff:e4:46:67:76:c6:05:1b:
         48:ca:b6:47:06:92:64:ec:74:df:f1:24:90:7f:fc:28:67:fd:
         b0:cb:b3:8f:fb:be:da:0d:cd:a8:a8:2e:5f:ae:4b:2f:53:20:
         d9:19:2f:07:36:4b:5b:f8:fd:e3:bd:8a:93:b9:0d:02:7c:53:
         fe:20:d5:87:cb:7d:a2:cc:a3:4d:10:08:3e:f3:77:56:c0:68:
         3d:65:1b:f4:da:9a:25:76:90:2b:46:01:14:16:07:2c:1b:0f:
         67:33:14:b7:85:17:73:61:4c:e6:eb:69:5c:ba:85:68:08:88:
         44:9a:8f:d1:d7:07:4a:6a:47:78:ac:a4:cf:94:d0:60:f3:c9:
         51:54:bd:5e:10:69:5d:25:66:06:ef:0a:aa:6c:fe:ec:e2:16:
         2c:32:3b:f6:8b:e1:25:19:d0:39:dc:56:7a:48:00:27:95:87:
         f6:39:80:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGSbM/TfAsPyASF+kpwz+cgUEXA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ1ODg4NjVCQTJDOTNGRjBEOEUxRDE4NzQ1MTRCMjAy
QjUwRUVCMTAeFw0yNDEwMjMxNzUzMDlaFw0yNTEwMjIxNzU4MDlaMDMxMTAvBgNV
BAMTKEMzRTAwNjcwRjYzODMxRTU3RTcxNkEwMDhENkNBRUFBNEJGODcyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5V+0N86wXIAuVGTPe7tzfLTC
Kz9Tec42KrOXXhv7HqOWTvDxZhaN1KnYZf4e+KSq/stUi4r56tHYxY2E/pFDH0+1
VfKL2UJMJRMND3oVCzskKW4LzIj/da23sPkqlERjP2xNuacZQGrBPVVRw7rteJxM
G39cGf/KAoFBnSY2YfJ/G3D/bWVgBWlvkWtGZkLrGi3i9X08DNMMfqS7q/OH5ypG
f+21xPIaaUtpC7lL5+bRTU5kllTzOobiwD9/Gmr4bWrkhccpP0nDTHnNVftqLYTY
FKdFCORo4GCOJ7PucYVcgc5usR7inJ012CF+bISDZuMTiZQnsNdRWZOYzX43AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw+AGcPY4MeV+cWoAjWyuqkv4ciYwHwYDVR0j
BBgwFoAUHViIZbosk/8Njh0YdFFLICtQ7rEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZScmF6aG9UclZMSFpFQUJjRXBOTHh6eEI0bVhhWnJwaDRlMnkycFRG
WUsvMC8xRDU4ODg2NUJBMkM5M0ZGMEQ4RTFEMTg3NDUxNEIyMDJCNTBFRUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFENTg4ODY1QkEyQzkzRkYw
RDhFMUQxODc0NTE0QjIwMkI1MEVFQjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmUnJhemhvVHJWTEhaRUFCY0VwTkx4enhCNG1YYVpycGg0ZTJ5MnBURllLLzAv
MzIzMDMxMmUzMTM1MzkyZTM5MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzOTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADJn1owDQYJKoZIhvcNAQELBQADggEBAIbpYbp4
Lb9Joq1Rg4dt/m9hGh1O20GSECQ5BVjetGVhZsMSqFiDy/OdocddsSh9F5xtCmNe
3TlFzgG/SRGQMk9jbRyIq8c4qXNG8P7nc/w8R5f/5EZndsYFG0jKtkcGkmTsdN/x
JJB//Chn/bDLs4/7vtoNzaioLl+uSy9TINkZLwc2S1v4/eO9ipO5DQJ8U/4g1YfL
faLMo00QCD7zd1bAaD1lG/TamiV2kCtGARQWBywbD2czFLeFF3NhTObraVy6hWgI
iESaj9HXB0pqR3ispM+U0GDzyVFUvV4QaV0lZgbvCqps/uziFiwyO/aL4SUZ0Dnc
VnpIACeVh/Y5gIw=
-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org