Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/3137302e3234342e31362e302f32322d3234203d3e20323636353133.roa
File:                     3137302e3234342e31362e302f32322d3234203d3e20323636353133.roa (raw, json)
Hash identifier:          4Z5t6dcGtgUoqUqOaw4BRV+WMTkXH4aR2J2uj4G33jg=
Subject key identifier:   63:B3:28:AD:22:17:CD:EF:81:CA:AA:24:27:A8:3B:AD:85:55:26:A9
Certificate issuer:       /CN=594F466063EF34DEFA34B6EC7F295FCAA78F43B6
Certificate serial:       617D886C747C6EC41D05AF8A21D9B19269B45BAB
Authority key identifier: 59:4F:46:60:63:EF:34:DE:FA:34:B6:EC:7F:29:5F:CA:A7:8F:43:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/3137302e3234342e31362e302f32322d3234203d3e20323636353133.roa
Signing time:             Mon 04 Nov 2024 17:24:48 +0000
ROA not before:           Mon 04 Nov 2024 17:19:48 +0000
ROA not after:            Mon 03 Nov 2025 17:24:48 +0000
asID:                     266513
IP address blocks:        170.244.16.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:88:6c:74:7c:6e:c4:1d:05:af:8a:21:d9:b1:92:69:b4:5b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594F466063EF34DEFA34B6EC7F295FCAA78F43B6
        Validity
            Not Before: Nov  4 17:19:48 2024 GMT
            Not After : Nov  3 17:24:48 2025 GMT
        Subject: CN=63B328AD2217CDEF81CAAA2427A83BAD855526A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:51:e6:71:42:af:4c:04:18:d8:4c:9a:63:
                    7e:f2:fd:87:2c:81:9c:26:8c:24:1c:d1:4f:de:ba:
                    b9:42:6d:b0:56:33:88:73:7f:55:3c:1a:64:6b:85:
                    28:82:5d:c4:b1:63:71:68:02:12:7d:b3:dd:4e:34:
                    f9:f4:b0:ec:09:ea:d1:aa:47:bc:2d:01:12:b1:65:
                    f8:f6:71:bc:32:1b:f5:c7:50:8c:62:f9:6c:81:fe:
                    ea:74:02:6c:93:db:2d:fb:a9:b8:b6:4e:90:b3:e3:
                    14:78:4b:fd:af:e3:62:11:57:c1:b4:87:0d:25:b6:
                    4f:5c:17:60:17:2b:79:f2:0a:ed:d3:5a:c8:01:35:
                    33:7e:5d:87:95:33:e3:c6:a3:f3:6d:4e:c7:6f:a5:
                    3c:47:02:be:2c:b8:18:60:86:cb:b8:e8:a4:0d:03:
                    f4:6c:b9:9e:bd:94:08:52:c3:c6:ff:1d:62:e4:71:
                    91:cd:0b:55:1d:a3:29:0d:14:11:6c:09:ab:95:05:
                    4a:05:3c:87:20:34:6b:34:42:e9:92:6f:23:82:26:
                    70:a4:20:ff:67:1d:d2:69:02:5f:6f:58:d9:2e:cd:
                    a7:95:13:5b:d0:63:81:05:aa:ed:11:ef:f4:eb:ed:
                    35:62:17:06:06:be:8d:29:c5:be:07:8a:bb:1d:c6:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:28:AD:22:17:CD:EF:81:CA:AA:24:27:A8:3B:AD:85:55:26:A9
            X509v3 Authority Key Identifier:
                keyid:59:4F:46:60:63:EF:34:DE:FA:34:B6:EC:7F:29:5F:CA:A7:8F:43:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/594F466063EF34DEFA34B6EC7F295FCAA78F43B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsRcagYge4DdjbhLCwvjfbkpinnG7nGjNfHJJUibU8ZS/0/3137302e3234342e31362e302f32322d3234203d3e20323636353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:c9:c0:a2:43:6f:ce:4c:32:f9:19:7e:1f:6d:49:94:45:50:
         e8:1e:76:ea:eb:d9:2e:00:4b:4b:b4:21:8e:0a:3f:b4:0d:97:
         7b:10:7d:58:50:d3:d1:14:74:82:8f:ca:76:ad:ac:4f:3d:d3:
         9e:ae:bd:ed:45:95:8f:7e:d6:2d:e6:3f:4b:ab:76:43:3b:5d:
         9a:0d:d9:07:88:d0:f9:9a:b0:da:0b:01:39:aa:7b:e9:0a:cb:
         45:d5:44:1f:77:44:de:c3:2b:df:a9:db:26:a8:56:ec:4e:6d:
         08:f6:0d:2c:ca:86:fd:dd:5d:3f:3a:8c:56:a1:f3:7f:55:f9:
         dd:a4:70:45:5a:94:ae:5f:b2:54:dd:5d:41:00:63:05:2a:40:
         67:f1:01:e2:63:9c:f8:3e:81:5e:39:36:ff:da:6f:2e:47:b6:
         99:2d:03:31:0f:2f:c1:ef:e0:80:75:9c:09:23:78:60:ce:e5:
         69:ff:81:73:01:43:90:88:a0:8a:d0:c1:ab:3e:d8:42:e3:1a:
         7f:f4:72:ae:01:ac:14:45:bc:78:2f:e9:06:c4:b3:a9:4a:32:
         09:4d:c2:65:29:7b:6c:89:06:81:73:24:36:b9:58:ed:99:e1:
         17:55:a2:f9:2d:29:ac:31:e1:47:2d:26:40:2d:b7:33:da:4f:
         16:f7:c8:7a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYX2IbHR8bsQdBa+KIdmxkmm0W6swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk0RjQ2NjA2M0VGMzRERUZBMzRCNkVDN0YyOTVGQ0FB
NzhGNDNCNjAeFw0yNDExMDQxNzE5NDhaFw0yNTExMDMxNzI0NDhaMDMxMTAvBgNV
BAMTKDYzQjMyOEFEMjIxN0NERUY4MUNBQUEyNDI3QTgzQkFEODU1NTI2QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtlHmcUKvTAQY2EyaY37y/Ycs
gZwmjCQc0U/eurlCbbBWM4hzf1U8GmRrhSiCXcSxY3FoAhJ9s91ONPn0sOwJ6tGq
R7wtARKxZfj2cbwyG/XHUIxi+WyB/up0AmyT2y37qbi2TpCz4xR4S/2v42IRV8G0
hw0ltk9cF2AXK3nyCu3TWsgBNTN+XYeVM+PGo/NtTsdvpTxHAr4suBhghsu46KQN
A/RsuZ69lAhSw8b/HWLkcZHNC1UdoykNFBFsCauVBUoFPIcgNGs0QumSbyOCJnCk
IP9nHdJpAl9vWNkuzaeVE1vQY4EFqu0R7/Tr7TViFwYGvo0pxb4Hirsdxu/hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY7MorSIXze+ByqokJ6g7rYVVJqkwHwYDVR0j
BBgwFoAUWU9GYGPvNN76NLbsfylfyqePQ7YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnNSY2FnWWdlNERkamJoTEN3dmpmYmtwaW5uRzduR2pOZkhKSlVpYlU4
WlMvMC81OTRGNDY2MDYzRUYzNERFRkEzNEI2RUM3RjI5NUZDQUE3OEY0M0I2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU5NEY0NjYwNjNFRjM0REVG
QTM0QjZFQzdGMjk1RkNBQTc4RjQzQjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JzUmNhZ1lnZTREZGpiaExDd3ZqZmJrcGlubkc3bkdqTmZISkpVaWJVOFpTLzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9BAwDQYJKoZIhvcNAQELBQADggEBAInJwKJD
b85MMvkZfh9tSZRFUOgedurr2S4AS0u0IY4KP7QNl3sQfVhQ09EUdIKPynatrE89
056uve1FlY9+1i3mP0urdkM7XZoN2QeI0PmasNoLATmqe+kKy0XVRB93RN7DK9+p
2yaoVuxObQj2DSzKhv3dXT86jFah839V+d2kcEValK5fslTdXUEAYwUqQGfxAeJj
nPg+gV45Nv/aby5HtpktAzEPL8Hv4IB1nAkjeGDO5Wn/gXMBQ5CIoIrQwas+2ELj
Gn/0cq4BrBRFvHgv6QbEs6lKMglNwmUpe2yJBoFzJDa5WO2Z4RdVovktKawx4Uct
JkAttzPaTxb3yHo=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:24:06 2024 by rpki-client on console-fra.rpki-client.org