Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa
File:                     3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa (raw, json)
Hash identifier:          MtFyem7gOUGPRbL0a8g7Z3kTKfByocPb3fx1XvljB0Q=
Subject key identifier:   C1:68:03:A5:CC:AE:82:77:8C:19:6F:64:E0:BC:BB:A8:E0:BD:3F:DF
Certificate issuer:       /CN=52699658780E9F763780991668B33774ACEDCAE9
Certificate serial:       01098CD13F53F9A721CFC2275BF5F9509380D1C9
Authority key identifier: 52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa
Signing time:             Thu 04 Apr 2024 06:49:09 +0000
ROA not before:           Thu 04 Apr 2024 06:44:09 +0000
ROA not after:            Thu 03 Apr 2025 06:49:09 +0000
asID:                     270946
IP address blocks:        131.108.153.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:8c:d1:3f:53:f9:a7:21:cf:c2:27:5b:f5:f9:50:93:80:d1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52699658780E9F763780991668B33774ACEDCAE9
        Validity
            Not Before: Apr  4 06:44:09 2024 GMT
            Not After : Apr  3 06:49:09 2025 GMT
        Subject: CN=C16803A5CCAE82778C196F64E0BCBBA8E0BD3FDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:26:b6:d8:7d:2b:a4:6d:87:88:b7:66:ba:
                    5c:d3:aa:87:e1:6c:c7:6a:2f:a9:a0:34:53:b4:81:
                    5d:de:95:bb:29:19:39:6d:24:2f:da:92:83:97:8d:
                    1c:82:99:47:52:c2:b1:84:48:02:0f:fd:d3:c7:ae:
                    7b:9f:f8:0b:84:d1:c8:28:94:27:90:73:c1:b4:f3:
                    a7:5e:c5:0b:d1:9f:09:4c:89:71:dd:80:be:a9:48:
                    52:0c:59:1e:aa:eb:ee:e1:65:68:aa:7e:a0:51:e2:
                    e7:06:41:07:5f:98:4b:16:53:f7:51:d1:82:34:31:
                    23:ae:1e:c8:d0:f7:6c:03:d6:17:2b:34:76:93:f7:
                    9b:8d:3d:fd:bc:94:35:e7:ec:ec:88:07:b2:79:fa:
                    6d:5d:13:e8:30:34:c5:37:23:86:f3:3b:f9:79:8c:
                    68:f9:e0:6a:74:be:7e:4d:b2:c0:e5:09:22:db:ef:
                    d9:e3:2e:ad:0d:fd:01:42:81:30:b2:d6:81:53:a6:
                    6a:e7:c0:05:d8:ad:73:1f:b1:5f:e4:a2:59:30:7f:
                    4a:93:4c:d7:98:8b:d4:5b:de:5f:24:80:fe:96:30:
                    6b:c5:b3:56:b7:5f:9c:65:4d:60:3d:b5:4b:36:a6:
                    1f:49:b9:c1:f7:7d:53:2b:29:f2:ce:29:5f:98:6b:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:68:03:A5:CC:AE:82:77:8C:19:6F:64:E0:BC:BB:A8:E0:BD:3F:DF
            X509v3 Authority Key Identifier:
                keyid:52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/3133312e3130382e3135332e302f32342d3234203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:15:33:e5:35:e5:cd:40:9e:31:9f:3e:7f:29:8b:69:63:82:
         2a:54:7d:ba:2c:94:a4:6c:98:f1:9c:e5:bc:42:62:a8:0d:59:
         7a:ed:c5:02:bb:d7:90:f1:b1:d0:8c:a9:65:b1:d8:32:14:44:
         70:dd:95:dc:23:5b:b2:80:b7:a0:44:5c:e1:b4:6c:e8:c0:9f:
         23:4a:56:e3:b8:34:21:2c:2d:1b:25:2f:e4:c8:58:3d:31:03:
         a0:d7:2a:b2:bb:b8:a2:76:ae:43:96:77:ca:36:cb:21:94:bb:
         60:c6:6c:88:7f:8e:10:8c:a4:2e:1d:2c:06:dd:e5:ef:2e:2f:
         99:48:f4:ec:a8:0e:64:83:7c:1d:74:4a:d7:c3:1e:fa:3a:e1:
         02:5b:a9:49:d0:fd:bc:1f:8c:a9:68:f4:2a:df:7c:4a:7a:f1:
         3f:24:77:cf:7a:04:74:e0:ee:ef:81:3b:27:bd:f4:7f:85:53:
         f4:fe:b6:76:5a:9c:ad:ec:25:4f:8f:c8:b7:d5:b3:82:a3:cc:
         75:6d:48:f5:49:71:dd:9b:19:40:3d:aa:9f:27:07:7d:06:b1:
         fc:43:8b:a9:69:3d:c0:91:e7:0e:b0:51:00:ba:68:f7:38:d4:
         22:a9:06:76:fc:7b:b9:f2:25:89:52:1f:50:2f:1f:07:79:26:
         5b:6c:64:98
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAQmM0T9T+achz8InW/X5UJOA0ckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI2OTk2NTg3ODBFOUY3NjM3ODA5OTE2NjhCMzM3NzRB
Q0VEQ0FFOTAeFw0yNDA0MDQwNjQ0MDlaFw0yNTA0MDMwNjQ5MDlaMDMxMTAvBgNV
BAMTKEMxNjgwM0E1Q0NBRTgyNzc4QzE5NkY2NEUwQkNCQkE4RTBCRDNGREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNdCa22H0rpG2HiLdmulzTqofh
bMdqL6mgNFO0gV3elbspGTltJC/akoOXjRyCmUdSwrGESAIP/dPHrnuf+AuE0cgo
lCeQc8G086dexQvRnwlMiXHdgL6pSFIMWR6q6+7hZWiqfqBR4ucGQQdfmEsWU/dR
0YI0MSOuHsjQ92wD1hcrNHaT95uNPf28lDXn7OyIB7J5+m1dE+gwNMU3I4bzO/l5
jGj54Gp0vn5NssDlCSLb79njLq0N/QFCgTCy1oFTpmrnwAXYrXMfsV/kolkwf0qT
TNeYi9Rb3l8kgP6WMGvFs1a3X5xlTWA9tUs2ph9JucH3fVMrKfLOKV+Ya2r7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwWgDpcyugneMGW9k4Ly7qOC9P98wHwYDVR0j
BBgwFoAUUmmWWHgOn3Y3gJkWaLM3dKztyukwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMS81MjY5OTY1ODc4MEU5Rjc2Mzc4MDk5MTY2OEIzMzc3NEFDRURDQUU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNjk5NjU4NzgwRTlGNzYz
NzgwOTkxNjY4QjMzNzc0QUNFRENBRTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzEv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAINsmTANBgkqhkiG9w0BAQsFAAOCAQEAUhUz
5TXlzUCeMZ8+fymLaWOCKlR9uiyUpGyY8ZzlvEJiqA1Zeu3FArvXkPGx0IypZbHY
MhREcN2V3CNbsoC3oERc4bRs6MCfI0pW47g0ISwtGyUv5MhYPTEDoNcqsru4onau
Q5Z3yjbLIZS7YMZsiH+OEIykLh0sBt3l7y4vmUj07KgOZIN8HXRK18Me+jrhAlup
SdD9vB+MqWj0Kt98SnrxPyR3z3oEdODu74E7J730f4VT9P62dlqcrewlT4/It9Wz
gqPMdW1I9Ulx3ZsZQD2qnycHfQax/EOLqWk9wJHnDrBRALpo9zjUIqkGdvx7ufIl
iVIfUC8fB3kmW2xkmA==
-----END CERTIFICATE-----
Generated at Tue Nov 5 03:32:09 2024 by rpki-client on console-fra.rpki-client.org