Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32332d3233203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32332d3233203d3e20323730393436.roa (raw, json)
Hash identifier:          JKYPG15EgZGmEqsjHD8NDHZwGvgzW1oCLtbnrTJyVk0=
Subject key identifier:   1D:10:91:78:45:8E:A2:D8:65:6A:48:E7:5E:2B:7A:D7:B2:F5:AA:74
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       66561CC69DD1FB8B3EF8B6847A22A9A5F7BCEB51
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32332d3233203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:08 +0000
ROA not before:           Thu 04 Apr 2024 06:44:08 +0000
ROA not after:            Thu 03 Apr 2025 06:49:08 +0000
asID:                     270946
IP address blocks:        131.108.152.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:56:1c:c6:9d:d1:fb:8b:3e:f8:b6:84:7a:22:a9:a5:f7:bc:eb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:08 2024 GMT
            Not After : Apr  3 06:49:08 2025 GMT
        Subject: CN=1D109178458EA2D8656A48E75E2B7AD7B2F5AA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:35:f3:3a:e3:0f:76:80:e4:b9:db:e4:c3:
                    4f:46:cc:69:fa:46:91:f0:60:c1:a3:4e:79:fd:95:
                    10:e1:c4:89:df:37:2a:ce:22:eb:aa:41:0f:c4:c2:
                    c4:9e:08:ca:b8:2e:77:c6:7c:8c:07:8a:1d:fc:bd:
                    d1:46:99:fe:93:c1:ff:84:c2:85:76:d7:16:6e:29:
                    74:55:36:7a:67:ee:4c:c5:4c:76:da:f9:a3:9c:42:
                    1f:9a:e3:ad:32:82:71:92:34:cc:01:cc:68:3b:a5:
                    2a:e9:79:39:0d:c9:8b:2e:b5:be:9e:37:bd:59:ff:
                    c7:0c:ee:c3:d2:c3:8a:1f:98:6a:eb:cf:f2:59:65:
                    e4:97:18:1e:0e:54:c6:c8:f2:87:af:0f:37:0f:e7:
                    2b:43:32:5b:a0:99:62:95:ff:8a:1a:bc:35:54:db:
                    22:a2:d7:cd:ac:07:84:e3:4f:15:49:d7:35:0f:44:
                    08:e5:8e:68:be:4e:05:af:e9:ed:f2:09:76:ae:d2:
                    6e:bb:81:5d:af:83:13:43:15:32:7a:2b:f9:65:d8:
                    cf:c7:85:df:7a:a1:f0:64:3e:d1:dc:ca:33:98:a0:
                    dd:fe:8e:b8:55:f0:73:a4:0b:94:5d:23:d0:e3:85:
                    22:25:e5:87:9b:88:b3:c3:45:0a:35:ae:9a:d1:b6:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:91:78:45:8E:A2:D8:65:6A:48:E7:5E:2B:7A:D7:B2:F5:AA:74
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135322e302f32332d3233203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:1e:c9:37:57:07:c7:a6:6e:09:79:2a:f4:6c:6d:43:af:
         43:2e:f6:74:55:23:8f:85:7f:d7:27:10:d6:1b:51:d4:9e:2a:
         c5:1a:d6:5d:d6:11:1a:b3:aa:9e:67:b8:73:b8:9d:77:3c:b4:
         1d:ff:cb:69:8e:08:f0:00:ff:7a:93:05:97:85:84:6b:95:44:
         96:db:30:35:30:0c:1c:dc:bf:3d:c0:5a:db:fc:8b:ca:ba:86:
         e0:c9:7c:47:e1:d6:2e:c1:e1:c6:1e:13:c2:b5:e2:ad:fd:26:
         45:42:e3:b9:e3:90:52:05:88:a7:74:ed:bf:e7:48:b8:f3:04:
         1c:df:1c:b8:d6:8e:a8:c1:c7:95:91:87:0a:b1:f5:69:1b:39:
         0c:59:fa:63:cc:96:63:b7:75:e6:83:ff:61:c4:f1:e4:ab:db:
         a5:39:44:9a:98:91:d4:79:a5:ab:d7:ff:22:1f:30:de:48:5e:
         bf:42:36:ea:60:37:9a:ab:82:f2:4d:2c:7e:26:ff:5e:08:e0:
         dd:d3:ab:4b:dc:20:1c:6e:d9:62:5f:00:6f:b4:9b:55:2f:b0:
         11:ae:dd:e7:df:55:4b:9b:9c:4e:83:3f:d5:58:cf:b2:d3:c8:
         b2:c0:2f:84:a9:1c:01:0c:fc:13:61:2a:82:32:fd:21:17:7b:
         6c:e7:59:e3
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZlYcxp3R+4s++LaEeiKppfe861EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2OTk2NTg3ODBFOUY3NjM3ODA5OTE2NjhCMzM3NzRB
Q0VEQ0FFOTAeFw0yNDA0MDQwNjQ0MDhaFw0yNTA0MDMwNjQ5MDhaMDMxMTAvBgNV
BAMTKDFEMTA5MTc4NDU4RUEyRDg2NTZBNDhFNzVFMkI3QUQ3QjJGNUFBNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IzXzOuMPdoDkudvkw09GzGn6
RpHwYMGjTnn9lRDhxInfNyrOIuuqQQ/EwsSeCMq4LnfGfIwHih38vdFGmf6Twf+E
woV21xZuKXRVNnpn7kzFTHba+aOcQh+a460ygnGSNMwBzGg7pSrpeTkNyYsutb6e
N71Z/8cM7sPSw4ofmGrrz/JZZeSXGB4OVMbI8oevDzcP5ytDMlugmWKV/4oavDVU
2yKi182sB4TjTxVJ1zUPRAjljmi+TgWv6e3yCXau0m67gV2vgxNDFTJ6K/ll2M/H
hd96ofBkPtHcyjOYoN3+jrhV8HOkC5RdI9DjhSIl5YebiLPDRQo1rprRtjNTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHRCReEWOothlakjnXit617L1qnQwHwYDVR0j
BBgwFoAUUmmWWHgOn3Y3gJkWaLM3dKztyukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMS81MjY5OTY1ODc4MEU5Rjc2Mzc4MDk5MTY2OEIzMzc3NEFDRURDQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNjk5NjU4NzgwRTlGNzYz
NzgwOTkxNjY4QjMzNzc0QUNFRENBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYNsmDANBgkqhkiG9w0BAQsFAAOCAQEAdM8e
yTdXB8embgl5KvRsbUOvQy72dFUjj4V/1ycQ1htR1J4qxRrWXdYRGrOqnme4c7id
dzy0Hf/LaY4I8AD/epMFl4WEa5VEltswNTAMHNy/PcBa2/yLyrqG4Ml8R+HWLsHh
xh4TwrXirf0mRULjueOQUgWIp3Ttv+dIuPMEHN8cuNaOqMHHlZGHCrH1aRs5DFn6
Y8yWY7d15oP/YcTx5KvbpTlEmpiR1Hmlq9f/Ih8w3khev0I26mA3mquC8k0sfib/
Xgjg3dOrS9wgHG7ZYl8Ab7SbVS+wEa7d599VS5ucToM/1VjPstPIssAvhKkcAQz8
E2EqgjL9IRd7bOdZ4w==
-----END CERTIFICATE-----
Generated at Tue Nov 5 02:49:01 2024 by rpki-client on console-ams.rpki-client.org