Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
File:                     3230302e37312e36382e302f32322d3234203d3e20323636323036.roa (raw, json)
Hash identifier:          Z+ogID6NoA6C6hWBiaHED2gqFIKCd2uxwU3DL4hwQ5s=
Subject key identifier:   70:86:F0:22:B3:9C:1B:95:93:D8:A6:33:3F:3D:1B:B4:D4:0F:14:B8
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       05CF98AF26DDE9A98DA0FE13DB46414BF6B6CD57
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa
Signing time:             Thu 04 Apr 2024 19:59:31 +0000
ROA not before:           Thu 04 Apr 2024 19:54:31 +0000
ROA not after:            Thu 03 Apr 2025 19:59:31 +0000
asID:                     266206
IP address blocks:        200.71.68.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cf:98:af:26:dd:e9:a9:8d:a0:fe:13:db:46:41:4b:f6:b6:cd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:31 2024 GMT
            Not After : Apr  3 19:59:31 2025 GMT
        Subject: CN=7086F022B39C1B9593D8A6333F3D1BB4D40F14B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4c:2c:29:bb:66:6a:52:95:fe:14:22:f0:88:
                    64:cd:89:e1:d5:c8:88:a4:c7:06:8e:11:95:8b:68:
                    28:2d:a7:a0:5a:49:c9:11:dc:e1:29:09:6f:92:b2:
                    78:59:e6:18:ed:25:3f:67:65:17:01:32:f2:fa:c0:
                    41:5f:18:b0:4c:38:b2:19:75:47:d7:9f:ab:cf:05:
                    ba:ee:d4:ac:42:89:69:86:58:31:03:3f:84:1a:20:
                    7c:a7:8a:c5:32:2b:db:2c:b3:66:4f:44:3e:ad:2f:
                    a0:8e:f0:92:ac:de:2d:ae:4c:1a:f6:aa:12:ca:37:
                    d1:96:d5:19:54:89:bf:c7:1c:0f:9d:c1:87:97:01:
                    20:f1:64:b2:2c:3e:19:71:69:87:57:a1:9d:20:2b:
                    02:af:73:c3:db:1a:c9:96:aa:c5:11:3b:1f:12:cc:
                    db:d0:06:e2:06:7e:fb:27:33:d3:1a:75:71:06:f8:
                    d6:f3:12:69:8d:e5:08:d7:7a:27:4f:79:c3:95:46:
                    b3:1d:56:93:90:ee:e5:96:8e:03:46:6b:a7:bc:05:
                    6e:ea:89:92:1d:46:84:08:f3:00:9d:46:53:36:86:
                    d5:ef:f1:24:f7:4f:d9:36:1f:46:45:89:59:6d:7f:
                    29:50:91:ce:b1:65:8e:62:c4:c6:7a:85:12:31:38:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:F0:22:B3:9C:1B:95:93:D8:A6:33:3F:3D:1B:B4:D4:0F:14:B8
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/3230302e37312e36382e302f32322d3234203d3e20323636323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c4:75:fc:a7:03:00:06:94:5a:c4:93:f6:46:9a:1a:d0:5b:
         16:65:0e:55:e2:ac:2d:f3:c4:45:b9:3c:99:60:19:a4:ca:96:
         e7:44:82:88:fe:fa:26:5e:b7:85:89:9f:27:9c:ea:e0:f9:ef:
         c8:86:a4:c1:5c:70:ab:5a:ce:a8:1b:ed:97:ba:8f:8c:4a:10:
         1a:c9:ec:d9:c4:16:24:99:a3:79:8c:1a:a2:0e:d5:e8:54:4e:
         ea:98:35:77:52:f1:50:c0:fc:25:91:21:62:eb:61:39:ed:16:
         c6:99:b8:f6:11:38:cd:c1:63:1f:c9:53:92:a8:94:70:3d:ca:
         a7:b7:39:f9:80:aa:95:2f:fc:0f:fb:e1:d1:ca:6f:78:be:25:
         e2:f5:52:08:1e:fe:ff:0e:55:a9:68:06:22:e1:a6:fa:d8:3e:
         35:dc:56:39:32:65:6f:21:37:47:ec:33:90:c6:20:4b:7b:64:
         c0:d5:74:8b:fe:e6:c2:3d:28:59:90:66:a1:01:6d:99:22:da:
         99:b2:59:a8:8e:ec:23:e2:e9:64:0e:40:21:7e:13:ce:db:75:
         57:dd:91:5c:3e:aa:34:1c:b8:ed:09:02:e4:c1:91:40:5b:23:
         6d:dc:6e:9e:76:20:08:7f:af:35:94:86:61:2c:83:99:d8:b7:
         b3:cf:81:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBc+Yrybd6amNoP4T20ZBS/a2zVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MzFaFw0yNTA0MDMxOTU5MzFaMDMxMTAvBgNV
BAMTKDcwODZGMDIyQjM5QzFCOTU5M0Q4QTYzMzNGM0QxQkI0RDQwRjE0QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9TCwpu2ZqUpX+FCLwiGTNieHV
yIikxwaOEZWLaCgtp6BaSckR3OEpCW+SsnhZ5hjtJT9nZRcBMvL6wEFfGLBMOLIZ
dUfXn6vPBbru1KxCiWmGWDEDP4QaIHynisUyK9sss2ZPRD6tL6CO8JKs3i2uTBr2
qhLKN9GW1RlUib/HHA+dwYeXASDxZLIsPhlxaYdXoZ0gKwKvc8PbGsmWqsUROx8S
zNvQBuIGfvsnM9MadXEG+NbzEmmN5QjXeidPecOVRrMdVpOQ7uWWjgNGa6e8BW7q
iZIdRoQI8wCdRlM2htXv8ST3T9k2H0ZFiVltfylQkc6xZY5ixMZ6hRIxOL6/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcIbwIrOcG5WT2KYzPz0btNQPFLgwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzIzMDMwMmUzNzMxMmUzNjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzIzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyEdEMA0GCSqGSIb3DQEBCwUAA4IBAQCXxHX8pwMA
BpRaxJP2Rpoa0FsWZQ5V4qwt88RFuTyZYBmkypbnRIKI/vomXreFiZ8nnOrg+e/I
hqTBXHCrWs6oG+2Xuo+MShAayezZxBYkmaN5jBqiDtXoVE7qmDV3UvFQwPwlkSFi
62E57RbGmbj2ETjNwWMfyVOSqJRwPcqntzn5gKqVL/wP++HRym94viXi9VIIHv7/
DlWpaAYi4ab62D413FY5MmVvITdH7DOQxiBLe2TA1XSL/ubCPShZkGahAW2ZItqZ
slmojuwj4ulkDkAhfhPO23VX3ZFcPqo0HLjtCQLkwZFAWyNt3G6ediAIf681lIZh
LIOZ2Lezz4Hr
-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org