Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa (raw, json)
Hash identifier:          n4ljtxKZKq4U2D32QbuIMnsiI/Uj3lluKSdCLhsB/VI=
Subject key identifier:   C8:36:C2:77:7A:ED:0D:89:B1:02:45:83:6E:7C:51:1B:07:97:5D:4F
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       3961FC049F11F16CC6A9F25AB69855BDD0D58337
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        131.108.152.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:61:fc:04:9f:11:f1:6c:c6:a9:f2:5a:b6:98:55:bd:d0:d5:83:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=C836C2777AED0D89B10245836E7C511B07975D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:ff:77:71:78:4c:6e:8f:8f:d2:56:bb:3a:
                    46:1e:66:10:3c:08:ab:78:2f:7f:88:d6:33:d1:81:
                    a2:2e:34:d7:ac:fc:e0:f7:1f:02:46:4a:5e:d6:f6:
                    c2:c2:54:d0:82:bf:16:bf:df:53:4c:83:6b:aa:cc:
                    fd:44:20:b1:a6:7c:ac:72:69:12:69:f9:f8:1f:8b:
                    bc:74:fd:5b:04:97:5f:b7:43:73:84:1d:40:30:8b:
                    25:bd:b6:0c:85:d3:23:3a:00:0f:d3:6a:fa:7f:ab:
                    9d:9b:53:15:70:2c:81:f2:9a:a7:a6:96:ec:9c:37:
                    5d:3a:53:c3:11:20:7c:40:77:8b:87:c6:c9:2e:bb:
                    92:61:88:35:c8:41:e3:1b:1a:54:38:d2:bd:b3:34:
                    a5:78:54:c9:23:c4:fd:45:0c:89:56:55:74:dd:ed:
                    9f:c0:a3:c2:b3:92:df:5f:c3:53:56:a2:aa:f8:6b:
                    de:60:43:5c:0f:57:c8:e4:55:ec:51:5f:17:1b:9f:
                    07:52:d1:16:73:2d:fd:ae:18:3b:dd:f9:0a:a3:a4:
                    aa:cb:aa:a2:61:83:d8:9d:21:d3:c0:0b:16:b2:d2:
                    ad:d3:17:dd:5e:16:2e:ab:81:b1:ba:69:20:b0:12:
                    aa:2e:36:ab:fc:4f:6e:bb:e6:52:56:6d:49:e8:43:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:C2:77:7A:ED:0D:89:B1:02:45:83:6E:7C:51:1B:07:97:5D:4F
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32322d3232203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:7f:ad:d9:d4:16:bc:45:88:14:93:b3:b5:48:34:a5:4d:24:
         78:df:b6:ba:eb:f1:39:bc:22:ad:c8:02:62:f1:e7:4c:47:a1:
         ee:0c:1b:dc:4d:54:93:2e:75:96:47:2c:c0:5d:d9:58:4c:b0:
         c8:ac:11:35:a3:54:8b:b8:85:7e:0e:dd:0a:c2:33:0d:c9:66:
         0d:59:c4:d1:d8:e5:2f:8b:56:24:db:db:20:fe:72:91:02:ad:
         5e:b7:fa:1a:f4:db:76:34:1b:2b:0d:4a:2c:16:dc:c2:b6:85:
         b4:02:96:d8:79:e4:f9:a5:56:38:8a:bd:6f:08:36:b2:ab:5d:
         b3:8d:19:44:a0:22:1a:5f:0e:55:af:41:28:d6:9a:d1:17:10:
         18:e0:b6:eb:d4:13:79:a8:9d:29:89:c3:d0:8d:71:93:e0:06:
         eb:3e:40:b6:33:c1:a7:a4:88:45:e9:a2:cc:22:0f:39:46:1a:
         04:11:10:3b:4f:bb:e2:5d:b0:e9:9c:7a:96:95:41:38:4b:c4:
         9f:9b:ee:7a:78:38:ff:ff:5f:31:8d:e0:65:ec:b1:db:66:5c:
         ce:39:d2:cc:5f:b1:86:11:cb:08:a9:f0:3c:94:fb:00:3d:43:
         54:ef:30:1c:13:05:6d:1c:cf:cd:69:58:5e:03:88:af:88:3e:
         d6:04:22:80
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOWH8BJ8R8WzGqfJatphVvdDVgzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2OTk2NTg3ODBFOUY3NjM3ODA5OTE2NjhCMzM3NzRB
Q0VEQ0FFOTAeFw0yNDA0MDQwNjQ0MDhaFw0yNTA0MDMwNjQ5MDhaMDMxMTAvBgNV
BAMTKEM4MzZDMjc3N0FFRDBEODlCMTAyNDU4MzZFN0M1MTFCMDc5NzVENEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwUf93cXhMbo+P0la7OkYeZhA8
CKt4L3+I1jPRgaIuNNes/OD3HwJGSl7W9sLCVNCCvxa/31NMg2uqzP1EILGmfKxy
aRJp+fgfi7x0/VsEl1+3Q3OEHUAwiyW9tgyF0yM6AA/Tavp/q52bUxVwLIHymqem
luycN106U8MRIHxAd4uHxskuu5JhiDXIQeMbGlQ40r2zNKV4VMkjxP1FDIlWVXTd
7Z/Ao8Kzkt9fw1NWoqr4a95gQ1wPV8jkVexRXxcbnwdS0RZzLf2uGDvd+QqjpKrL
qqJhg9idIdPACxay0q3TF91eFi6rgbG6aSCwEqouNqv8T2675lJWbUnoQ5vTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyDbCd3rtDYmxAkWDbnxRGweXXU8wHwYDVR0j
BBgwFoAUUmmWWHgOn3Y3gJkWaLM3dKztyukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMS81MjY5OTY1ODc4MEU5Rjc2Mzc4MDk5MTY2OEIzMzc3NEFDRURDQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNjk5NjU4NzgwRTlGNzYz
NzgwOTkxNjY4QjMzNzc0QUNFRENBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsmDANBgkqhkiG9w0BAQsFAAOCAQEAWX+t
2dQWvEWIFJOztUg0pU0keN+2uuvxObwircgCYvHnTEeh7gwb3E1Uky51lkcswF3Z
WEywyKwRNaNUi7iFfg7dCsIzDclmDVnE0djlL4tWJNvbIP5ykQKtXrf6GvTbdjQb
Kw1KLBbcwraFtAKW2Hnk+aVWOIq9bwg2sqtds40ZRKAiGl8OVa9BKNaa0RcQGOC2
69QTeaidKYnD0I1xk+AG6z5AtjPBp6SIRemizCIPOUYaBBEQO0+74l2w6Zx6lpVB
OEvEn5vueng4//9fMY3gZeyx22ZczjnSzF+xhhHLCKnwPJT7AD1DVO8wHBMFbRzP
zWlYXgOIr4g+1gQigA==
-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org