Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa
File:                     3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa (raw, json)
Hash identifier:          GTBGql+ezKyqTR44ghPTUkn9Xl1SD5U2DEJSJVCY0FY=
Subject key identifier:   94:CF:DC:6F:E0:B1:65:E1:C4:4D:42:55:F4:BB:B3:A6:5C:87:E7:7D
Certificate issuer:       /CN=07D82C7B9D20B1E242F4AD6BE876040EED7F5936
Certificate serial:       2D0441C3CF7D5EF5E1CD3D6D8B032C36C6F8E294
Authority key identifier: 07:D8:2C:7B:9D:20:B1:E2:42:F4:AD:6B:E8:76:04:0E:ED:7F:59:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa
Signing time:             Wed 03 Apr 2024 22:06:45 +0000
ROA not before:           Wed 03 Apr 2024 22:01:45 +0000
ROA not after:            Wed 02 Apr 2025 22:06:45 +0000
asID:                     266644
IP address blocks:        128.201.180.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:04:41:c3:cf:7d:5e:f5:e1:cd:3d:6d:8b:03:2c:36:c6:f8:e2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07D82C7B9D20B1E242F4AD6BE876040EED7F5936
        Validity
            Not Before: Apr  3 22:01:45 2024 GMT
            Not After : Apr  2 22:06:45 2025 GMT
        Subject: CN=94CFDC6FE0B165E1C44D4255F4BBB3A65C87E77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:ba:85:6e:94:b2:c2:a1:b9:1f:37:ad:e1:
                    c4:1c:20:86:c5:ef:93:5f:f4:41:77:43:5d:93:02:
                    7f:94:1a:1d:44:7c:13:e2:4c:a6:c1:95:8e:41:e8:
                    56:8c:fe:b2:83:80:48:e4:9f:f1:08:4f:45:9c:da:
                    93:5a:72:bb:14:28:24:1e:47:f4:31:cd:30:24:68:
                    53:69:ee:f3:9e:b0:b1:c7:86:02:b5:27:f4:05:f5:
                    ca:dd:18:06:63:84:4b:29:b2:13:21:74:14:a3:99:
                    c2:2a:24:4d:93:2c:e9:c0:b3:36:94:91:12:38:e1:
                    04:9c:b4:6a:46:7e:53:81:f1:90:75:26:c9:61:67:
                    04:24:45:ef:03:32:3e:3f:33:d1:4c:f2:74:65:fa:
                    2b:c0:59:f4:16:68:46:33:de:06:4f:df:4f:de:fb:
                    aa:da:7a:c8:5e:a1:4d:e5:96:7d:2c:3e:a9:0e:12:
                    33:4c:cb:4d:8b:12:66:46:cc:13:8e:fd:12:3e:d3:
                    24:27:38:0b:4f:27:31:e0:ea:da:0c:ee:91:4f:e2:
                    75:29:05:d9:61:5f:7b:d9:f4:07:39:e6:c7:ae:dc:
                    8f:4d:3b:34:07:85:2f:38:a5:25:ae:89:90:c0:e3:
                    91:8f:5e:06:5d:a7:74:62:05:4b:d7:d2:d4:83:8f:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:CF:DC:6F:E0:B1:65:E1:C4:4D:42:55:F4:BB:B3:A6:5C:87:E7:7D
            X509v3 Authority Key Identifier:
                keyid:07:D8:2C:7B:9D:20:B1:E2:42:F4:AD:6B:E8:76:04:0E:ED:7F:59:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07D82C7B9D20B1E242F4AD6BE876040EED7F5936.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/1/3132382e3230312e3138302e302f32322d3332203d3e20323636363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:6c:07:98:68:b5:b2:5b:16:e3:b9:7b:92:d0:ec:3a:13:37:
         0a:4b:1f:23:fa:21:d0:3a:b7:ae:04:10:42:66:d6:65:1f:b5:
         b0:9e:7a:e4:3a:2c:43:14:4a:0c:23:48:73:fa:6a:5c:12:35:
         86:7e:86:5c:4e:86:65:f2:cf:04:73:6b:f6:05:cc:f9:99:d7:
         c0:8b:93:e8:52:27:85:cd:df:68:d4:7c:7c:f5:44:09:5d:15:
         32:bd:9e:31:a4:09:98:55:af:fb:d9:c9:fd:65:c3:f1:3e:1d:
         6d:a1:71:4d:6e:c0:29:fe:2e:65:3f:b5:2c:05:e9:a0:92:22:
         bf:d2:c7:c6:a2:79:2c:e8:3b:95:19:ff:f1:c1:76:de:5c:bf:
         68:1d:2f:74:37:c5:4c:5d:30:e6:8f:44:45:1b:50:ec:d1:07:
         19:d6:95:8e:34:39:1c:64:05:f8:9b:56:93:88:27:89:8c:e8:
         b4:2c:11:de:c7:a3:74:ad:60:8f:80:67:2f:93:01:35:f1:69:
         c2:66:96:84:75:f1:61:0a:6d:a0:eb:4f:19:90:4a:74:ca:c7:
         74:4b:5b:4b:7b:6d:11:f1:cd:de:b9:a1:d1:88:a5:d5:57:78:
         3d:ab:cb:f0:bc:c5:8d:e2:cd:a5:7f:e3:98:4a:fa:0c:6d:9c:
         93:13:c5:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULQRBw899XvXhzT1tiwMsNsb44pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdEODJDN0I5RDIwQjFFMjQyRjRBRDZCRTg3NjA0MEVF
RDdGNTkzNjAeFw0yNDA0MDMyMjAxNDVaFw0yNTA0MDIyMjA2NDVaMDMxMTAvBgNV
BAMTKDk0Q0ZEQzZGRTBCMTY1RTFDNDRENDI1NUY0QkJCM0E2NUM4N0U3N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyF7qFbpSywqG5Hzet4cQcIIbF
75Nf9EF3Q12TAn+UGh1EfBPiTKbBlY5B6FaM/rKDgEjkn/EIT0Wc2pNacrsUKCQe
R/QxzTAkaFNp7vOesLHHhgK1J/QF9crdGAZjhEspshMhdBSjmcIqJE2TLOnAszaU
kRI44QSctGpGflOB8ZB1JslhZwQkRe8DMj4/M9FM8nRl+ivAWfQWaEYz3gZP30/e
+6raesheoU3lln0sPqkOEjNMy02LEmZGzBOO/RI+0yQnOAtPJzHg6toM7pFP4nUp
BdlhX3vZ9Ac55seu3I9NOzQHhS84pSWuiZDA45GPXgZdp3RiBUvX0tSDj9P3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUlM/cb+CxZeHETUJV9LuzplyH530wHwYDVR0j
BBgwFoAUB9gse50gseJC9K1r6HYEDu1/WTYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWoyWDJDYXJGcGU5eUtkSm53TjU5cHhkZE5hWnBkelI5NmJ0MUw3WmdT
dEcvMS8wN0Q4MkM3QjlEMjBCMUUyNDJGNEFENkJFODc2MDQwRUVEN0Y1OTM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA3RDgyQzdCOUQyMEIxRTI0
MkY0QUQ2QkU4NzYwNDBFRUQ3RjU5MzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FqMlgyQ2FyRnBlOXlLZEpud041OXB4ZGROYVpwZHpSOTZidDFMN1pnU3RHLzEv
MzEzMjM4MmUzMjMwMzEyZTMxMzgzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNjM2MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJtDANBgkqhkiG9w0BAQsFAAOCAQEAh2wH
mGi1slsW47l7ktDsOhM3CksfI/oh0Dq3rgQQQmbWZR+1sJ565DosQxRKDCNIc/pq
XBI1hn6GXE6GZfLPBHNr9gXM+ZnXwIuT6FInhc3faNR8fPVECV0VMr2eMaQJmFWv
+9nJ/WXD8T4dbaFxTW7AKf4uZT+1LAXpoJIiv9LHxqJ5LOg7lRn/8cF23ly/aB0v
dDfFTF0w5o9ERRtQ7NEHGdaVjjQ5HGQF+JtWk4gniYzotCwR3sejdK1gj4BnL5MB
NfFpwmaWhHXxYQptoOtPGZBKdMrHdEtbS3ttEfHN3rmh0Yil1Vd4PavL8LzFjeLN
pX/jmEr6DG2ckxPF/Q==
-----END CERTIFICATE-----
Generated at Fri Jun 14 18:12:49 2024 by rpki-client on console-fra.rpki-client.org