Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
File:                     3134332e302e3235322e302f32322d3332203d3e20323634303233.roa (raw, json)
Hash identifier:          XkeXmioguxR4ydeVUaeZEKr1mr/NCLWGDcPjy/qngbU=
Subject key identifier:   D3:20:66:73:90:E5:26:EE:56:57:F7:6B:7B:86:48:0E:DA:27:AC:C9
Certificate issuer:       /CN=08136CA7352D25C029AA2B1D778499953A3A28E7
Certificate serial:       55A40AEA59F61205061BDEAC56A97D1B9DC383F9
Authority key identifier: 08:13:6C:A7:35:2D:25:C0:29:AA:2B:1D:77:84:99:95:3A:3A:28:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08136CA7352D25C029AA2B1D778499953A3A28E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa
Signing time:             Thu 19 Sep 2024 18:04:28 +0000
ROA not before:           Thu 19 Sep 2024 17:59:28 +0000
ROA not after:            Thu 18 Sep 2025 18:04:28 +0000
asID:                     264023
IP address blocks:        143.0.252.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:0a:ea:59:f6:12:05:06:1b:de:ac:56:a9:7d:1b:9d:c3:83:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08136CA7352D25C029AA2B1D778499953A3A28E7
        Validity
            Not Before: Sep 19 17:59:28 2024 GMT
            Not After : Sep 18 18:04:28 2025 GMT
        Subject: CN=D320667390E526EE5657F76B7B86480EDA27ACC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:16:d6:31:f5:a0:94:76:69:68:0f:55:7b:
                    46:73:47:16:be:9b:c9:0b:31:e9:6e:8c:cb:a6:48:
                    8b:5e:da:d1:6e:41:c5:97:12:db:1f:c5:25:0b:4f:
                    c4:a2:e0:37:88:66:8f:62:9f:45:d6:38:f1:86:15:
                    3c:19:09:90:35:e3:1d:df:d9:91:9f:a9:35:5a:47:
                    47:96:25:46:79:3c:04:cb:6b:d4:92:67:21:c2:6c:
                    50:e5:38:2c:ac:03:e7:3e:6d:aa:73:52:4d:3a:7e:
                    7a:69:e4:c2:d3:cd:e1:f2:0f:98:c9:5a:26:e6:cc:
                    10:95:90:ff:84:51:a8:8b:2b:dc:21:ab:27:ca:73:
                    fb:57:c9:e9:27:a7:40:8f:eb:02:a2:6c:e6:48:ce:
                    8d:e0:c0:2a:01:a8:6b:7e:e8:fb:50:b4:a2:3c:73:
                    00:61:5f:73:b8:9e:72:e6:8b:a6:52:b1:88:7e:34:
                    c4:1b:58:cd:f3:22:ef:38:9c:e5:a5:69:aa:b3:5b:
                    53:7a:25:18:93:80:b4:b6:6e:f2:35:05:e1:6c:98:
                    25:67:7d:7c:ba:e6:00:30:d6:e2:08:a2:0e:7e:fc:
                    10:2c:f5:c8:58:1f:c6:8b:e4:63:7e:25:29:23:62:
                    83:55:35:7b:11:c2:03:12:6e:66:71:81:06:1f:b0:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:66:73:90:E5:26:EE:56:57:F7:6B:7B:86:48:0E:DA:27:AC:C9
            X509v3 Authority Key Identifier:
                keyid:08:13:6C:A7:35:2D:25:C0:29:AA:2B:1D:77:84:99:95:3A:3A:28:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/08136CA7352D25C029AA2B1D778499953A3A28E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/08136CA7352D25C029AA2B1D778499953A3A28E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/3134332e302e3235322e302f32322d3332203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:16:7f:07:39:bc:7b:96:39:ee:59:aa:e5:0b:c8:bf:47:1e:
         da:38:54:d6:bd:56:39:ab:6b:e5:89:37:e4:ad:e5:f6:17:91:
         9a:0f:50:52:64:24:19:f3:ff:94:a9:b1:3f:4d:bc:2b:3b:51:
         8e:d5:18:8a:e3:f5:73:d4:20:9b:10:75:f5:2e:a8:a3:b3:44:
         12:53:ba:68:44:42:e9:52:5e:80:aa:8b:eb:6d:51:1c:0b:b5:
         9e:7a:37:c1:14:4c:f0:6a:cc:4b:96:7b:07:3b:9b:d3:ba:a5:
         1c:97:87:e0:a1:d2:4c:94:40:d5:47:81:4f:0c:92:0b:66:fb:
         31:00:b8:1b:85:e1:f0:4f:57:b3:f1:ed:2b:1f:29:6f:78:3f:
         8b:ae:f0:98:24:1b:e2:53:0f:29:f4:d0:24:d5:7e:b4:ef:22:
         ec:dd:6a:e3:94:9b:d4:cf:11:4e:da:0f:88:9c:79:83:24:a4:
         e9:e1:c2:3a:dd:20:f0:58:bf:90:cb:65:fc:13:9b:0a:da:1b:
         36:2f:e2:3c:25:d5:fe:54:73:86:12:68:2b:5f:16:bb:09:7d:
         f8:d8:d9:fc:23:a5:75:4f:b8:17:9c:0b:3b:18:00:d1:e4:0b:
         00:77:8b:c7:67:19:8c:ba:71:16:0a:1d:ca:a0:67:c3:20:18:
         d6:98:43:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVaQK6ln2EgUGG96sVql9G53Dg/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgxMzZDQTczNTJEMjVDMDI5QUEyQjFENzc4NDk5OTUz
QTNBMjhFNzAeFw0yNDA5MTkxNzU5MjhaFw0yNTA5MTgxODA0MjhaMDMxMTAvBgNV
BAMTKEQzMjA2NjczOTBFNTI2RUU1NjU3Rjc2QjdCODY0ODBFREEyN0FDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oxbWMfWglHZpaA9Ve0ZzRxa+
m8kLMelujMumSIte2tFuQcWXEtsfxSULT8Si4DeIZo9in0XWOPGGFTwZCZA14x3f
2ZGfqTVaR0eWJUZ5PATLa9SSZyHCbFDlOCysA+c+bapzUk06fnpp5MLTzeHyD5jJ
WibmzBCVkP+EUaiLK9whqyfKc/tXyeknp0CP6wKibOZIzo3gwCoBqGt+6PtQtKI8
cwBhX3O4nnLmi6ZSsYh+NMQbWM3zIu84nOWlaaqzW1N6JRiTgLS2bvI1BeFsmCVn
fXy65gAw1uIIog5+/BAs9chYH8aL5GN+JSkjYoNVNXsRwgMSbmZxgQYfsE37AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0yBmc5DlJu5WV/dre4ZIDtonrMkwHwYDVR0j
BBgwFoAUCBNspzUtJcApqisdd4SZlTo6KOcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzJmdlJidUFZa1dmVVY4RjRjVGQ0VkJmYjRIZnhYS3pXTlhoaUFBQUs3
aDcvMC8wODEzNkNBNzM1MkQyNUMwMjlBQTJCMUQ3Nzg0OTk5NTNBM0EyOEU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA4MTM2Q0E3MzUyRDI1QzAy
OUFBMkIxRDc3ODQ5OTk1M0EzQTI4RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0MyZnZSYnVBWWtXZlVWOEY0Y1RkNFZCZmI0SGZ4WEt6V05YaGlBQUFLN2g3LzAv
MzEzNDMzMmUzMDJlMzIzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCjwD8MA0GCSqGSIb3DQEBCwUAA4IBAQAOFn8HObx7
ljnuWarlC8i/Rx7aOFTWvVY5q2vliTfkreX2F5GaD1BSZCQZ8/+UqbE/TbwrO1GO
1RiK4/Vz1CCbEHX1Lqijs0QSU7poRELpUl6AqovrbVEcC7WeejfBFEzwasxLlnsH
O5vTuqUcl4fgodJMlEDVR4FPDJILZvsxALgbheHwT1ez8e0rHylveD+LrvCYJBvi
Uw8p9NAk1X607yLs3WrjlJvUzxFO2g+InHmDJKTp4cI63SDwWL+Qy2X8E5sK2hs2
L+I8JdX+VHOGEmgrXxa7CX342Nn8I6V1T7gXnAs7GADR5AsAd4vHZxmMunEWCh3K
oGfDIBjWmEOr
-----END CERTIFICATE-----
Generated at Sun Oct 6 07:31:24 2024 by rpki-client on console-ams.rpki-client.org