Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3138362e3233332e3132382e302f32322d3234203d3e20323632373839.roa
File:                     3138362e3233332e3132382e302f32322d3234203d3e20323632373839.roa (raw, json)
Hash identifier:          ukUE1svBsJMnqcW2brJL2fOn/6O7fLCxZ3QoObPdVd0=
Subject key identifier:   B9:BA:3A:26:88:E6:20:5B:C8:42:83:05:2E:36:D5:40:83:36:96:34
Certificate issuer:       /CN=27A8015BFEC5EBA7025A454640167B4EED01A511
Certificate serial:       19FD9A214515888E08760D87136F8000B26F5FB0
Authority key identifier: 27:A8:01:5B:FE:C5:EB:A7:02:5A:45:46:40:16:7B:4E:ED:01:A5:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27A8015BFEC5EBA7025A454640167B4EED01A511.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3138362e3233332e3132382e302f32322d3234203d3e20323632373839.roa
Signing time:             Fri 23 Jun 2023 17:12:51 +0000
ROA not before:           Fri 23 Jun 2023 17:07:51 +0000
ROA not after:            Fri 21 Jun 2024 17:12:51 +0000
asID:                     262789
IP address blocks:        186.233.128.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fd:9a:21:45:15:88:8e:08:76:0d:87:13:6f:80:00:b2:6f:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A8015BFEC5EBA7025A454640167B4EED01A511
        Validity
            Not Before: Jun 23 17:07:51 2023 GMT
            Not After : Jun 21 17:12:51 2024 GMT
        Subject: CN=B9BA3A2688E6205BC84283052E36D54083369634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:7f:ec:09:d7:1a:ff:15:f0:42:ef:23:78:
                    3a:83:a2:02:29:45:99:19:ca:ab:42:de:73:2b:52:
                    27:2c:3b:df:05:5f:97:c8:b5:5a:85:df:96:26:5d:
                    88:db:06:af:b9:74:78:02:89:84:1e:fe:44:2b:b3:
                    a2:8e:b8:2d:54:fa:d1:e9:f9:f4:3b:a1:98:61:a0:
                    bd:ca:6b:af:89:17:d4:cc:37:c5:b5:2d:1a:52:0b:
                    a8:ea:92:45:77:af:f4:72:c8:bf:d4:22:e2:d2:e6:
                    20:5d:e4:92:e1:56:4a:4f:c2:6c:c2:10:3a:f6:ff:
                    86:45:a5:c7:89:ef:b5:0a:e4:44:d0:dc:ce:8a:0b:
                    f0:29:65:8e:3f:0d:4e:6b:57:a8:9d:38:ae:61:a4:
                    1b:7f:90:7a:0c:02:8c:43:16:43:ad:92:2b:c3:88:
                    83:dd:28:dc:d4:7a:ec:6e:d9:9a:bd:99:18:1b:c0:
                    95:ae:f0:8c:d0:d9:08:00:04:ec:79:47:ea:9f:5d:
                    f4:bb:7b:cb:48:06:61:69:c7:e7:83:38:71:cc:8e:
                    21:30:59:3c:2c:09:0b:3a:f4:d2:9c:b5:87:51:b7:
                    85:13:16:04:00:1b:3f:53:47:80:5b:8a:42:6b:9e:
                    4c:bf:2d:4f:69:94:7c:74:12:52:8a:f3:02:64:7d:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BA:3A:26:88:E6:20:5B:C8:42:83:05:2E:36:D5:40:83:36:96:34
            X509v3 Authority Key Identifier:
                keyid:27:A8:01:5B:FE:C5:EB:A7:02:5A:45:46:40:16:7B:4E:ED:01:A5:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/27A8015BFEC5EBA7025A454640167B4EED01A511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27A8015BFEC5EBA7025A454640167B4EED01A511.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BkaYuxeEtUyVuCwae13Pa5UcY3AToAKUaMzuywVptLLc/0/3138362e3233332e3132382e302f32322d3234203d3e20323632373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:25:45:f8:6b:64:d8:c1:75:d4:20:79:2e:21:4e:7d:d2:5b:
         19:40:ea:80:c8:2e:29:70:29:01:87:e3:a9:63:47:76:10:6e:
         65:c0:4f:fd:4f:60:4d:6c:8c:0b:17:64:db:aa:b4:6b:3b:f3:
         19:86:72:9e:f5:af:25:ea:d5:07:2b:d2:d0:aa:65:02:b0:fa:
         90:8a:8c:df:ab:94:3f:8d:de:89:25:28:f6:c3:9f:27:b1:b6:
         13:33:15:a1:62:0a:26:39:ce:62:d4:ac:d6:43:bc:74:2e:3d:
         0a:20:7c:9e:62:5d:a0:61:74:3e:89:be:b2:07:4b:31:c7:67:
         0e:07:22:a9:03:c1:8d:5d:05:08:7f:9f:9c:55:10:8b:bf:09:
         2f:af:39:cc:dd:54:bc:68:b6:bc:77:52:da:a6:24:f9:c6:ac:
         1e:db:7c:57:8b:c7:91:dc:8f:5f:07:e1:34:f7:e0:9c:86:71:
         0d:77:da:f9:be:40:91:33:a5:eb:df:ea:f8:1c:9c:47:fc:b0:
         14:b9:65:5d:84:e2:cf:5d:fe:23:01:f6:23:cc:42:67:44:9f:
         46:09:9f:56:43:61:7f:f2:c6:cb:a4:b5:47:a2:08:a9:c2:81:
         52:0e:19:ec:6f:f8:5b:d1:4c:60:06:2b:8f:78:8b:be:b7:f6:
         d3:ec:b4:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGf2aIUUViI4Idg2HE2+AALJvX7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdBODAxNUJGRUM1RUJBNzAyNUE0NTQ2NDAxNjdCNEVF
RDAxQTUxMTAeFw0yMzA2MjMxNzA3NTFaFw0yNDA2MjExNzEyNTFaMDMxMTAvBgNV
BAMTKEI5QkEzQTI2ODhFNjIwNUJDODQyODMwNTJFMzZENTQwODMzNjk2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQH/sCdca/xXwQu8jeDqDogIp
RZkZyqtC3nMrUicsO98FX5fItVqF35YmXYjbBq+5dHgCiYQe/kQrs6KOuC1U+tHp
+fQ7oZhhoL3Ka6+JF9TMN8W1LRpSC6jqkkV3r/RyyL/UIuLS5iBd5JLhVkpPwmzC
EDr2/4ZFpceJ77UK5ETQ3M6KC/ApZY4/DU5rV6idOK5hpBt/kHoMAoxDFkOtkivD
iIPdKNzUeuxu2Zq9mRgbwJWu8IzQ2QgABOx5R+qfXfS7e8tIBmFpx+eDOHHMjiEw
WTwsCQs69NKctYdRt4UTFgQAGz9TR4BbikJrnky/LU9plHx0ElKK8wJkfcVrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUubo6JojmIFvIQoMFLjbVQIM2ljQwHwYDVR0j
BBgwFoAUJ6gBW/7F66cCWkVGQBZ7Tu0BpREwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmthWXV4ZUV0VXlWdUN3YWUxM1BhNVVjWTNBVG9BS1VhTXp1eXdWcHRM
TGMvMC8yN0E4MDE1QkZFQzVFQkE3MDI1QTQ1NDY0MDE2N0I0RUVEMDFBNTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI3QTgwMTVCRkVDNUVCQTcw
MjVBNDU0NjQwMTY3QjRFRUQwMUE1MTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JrYVl1eGVFdFV5VnVDd2FlMTNQYTVVY1kzQVRvQUtVYU16dXl3VnB0TExjLzAv
MzEzODM2MmUzMjMzMzMyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrpgDANBgkqhkiG9w0BAQsFAAOCAQEAMCVF
+Gtk2MF11CB5LiFOfdJbGUDqgMguKXApAYfjqWNHdhBuZcBP/U9gTWyMCxdk26q0
azvzGYZynvWvJerVByvS0KplArD6kIqM36uUP43eiSUo9sOfJ7G2EzMVoWIKJjnO
YtSs1kO8dC49CiB8nmJdoGF0Pom+sgdLMcdnDgciqQPBjV0FCH+fnFUQi78JL685
zN1UvGi2vHdS2qYk+casHtt8V4vHkdyPXwfhNPfgnIZxDXfa+b5AkTOl69/q+Byc
R/ywFLllXYTiz13+IwH2I8xCZ0SfRgmfVkNhf/LGy6S1R6IIqcKBUg4Z7G/4W9FM
YAYrj3iLvrf20+y0GA==
-----END CERTIFICATE-----
Generated at Tue Aug 15 14:24:47 2023 by rpki-client on console-ams.rpki-client.org