Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa
File:                     3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          /7nvL+TuLYPqgNIi2BXjgwmB0hyOK/BTyMB6cnv8Klo=
Subject key identifier:   94:27:A0:46:6B:72:11:E7:19:40:BF:E2:44:CC:F7:6F:DC:7E:9C:6D
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       1415EDC9736F32CC201F198BBEC0DF44E0BD2058
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:31:25 +0000
ROA not before:           Fri 09 Aug 2024 17:26:25 +0000
ROA not after:            Fri 08 Aug 2025 17:31:25 +0000
asID:                     270814
IP address blocks:        168.90.228.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:15:ed:c9:73:6f:32:cc:20:1f:19:8b:be:c0:df:44:e0:bd:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:26:25 2024 GMT
            Not After : Aug  8 17:31:25 2025 GMT
        Subject: CN=9427A0466B7211E71940BFE244CCF76FDC7E9C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:5b:46:67:4c:93:30:32:8b:3d:3c:0e:f8:
                    6c:07:33:15:62:5b:3a:34:0f:ff:ef:3c:71:23:d6:
                    82:04:83:e1:49:11:0c:95:30:da:62:a5:28:05:88:
                    5e:da:84:9d:50:d6:47:2d:9f:f4:dc:d4:e0:04:99:
                    3e:03:ee:0d:2e:97:a3:fc:6e:d1:7b:5c:b3:85:32:
                    04:18:70:de:72:a4:1f:34:7a:6f:ab:29:da:74:b0:
                    28:b6:da:6c:af:55:10:d5:05:6e:10:57:70:9a:08:
                    d0:45:24:69:be:31:49:5c:ec:c9:fd:41:af:25:02:
                    55:73:4b:4a:7e:99:fc:6e:28:08:69:dc:94:0c:61:
                    68:e0:61:b2:da:6c:df:6a:fc:e9:38:58:6d:6f:31:
                    b2:4a:65:e2:1d:86:9b:08:a4:f4:8d:c3:fc:a1:7a:
                    e6:b7:d3:dd:b8:fc:b3:87:32:e3:01:e9:92:94:61:
                    de:15:6c:fb:f5:b1:a7:9b:ad:e0:05:d1:d0:28:7a:
                    14:f6:ea:80:5a:1d:4e:79:5a:8c:2b:1e:9a:ac:52:
                    9c:ee:e9:2f:05:9b:9b:cd:e9:86:84:84:04:f9:94:
                    ce:3c:d9:aa:cc:19:80:dc:4d:a5:77:ea:64:2c:87:
                    94:9c:1d:2d:00:c8:29:97:1e:b2:51:99:6a:1b:22:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:27:A0:46:6B:72:11:E7:19:40:BF:E2:44:CC:F7:6F:DC:7E:9C:6D
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3136382e39302e3232382e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:35:0f:0b:21:13:7f:7d:0f:a5:f6:8b:b0:43:f5:29:c8:7a:
         98:73:db:d2:8f:04:bd:d3:84:69:b4:ac:91:1b:23:aa:5a:13:
         56:19:81:03:c3:d0:56:c3:d1:50:5e:5b:24:0c:5c:f4:52:89:
         f8:bc:01:b0:2a:ca:34:a7:4b:5f:6a:66:0a:39:a8:76:1a:3d:
         5c:d8:9e:be:c6:f6:c9:d4:d7:c6:52:6b:7a:cc:16:e9:6a:7b:
         a2:10:e8:39:84:c2:0d:1b:b5:c8:48:3b:94:94:3c:a3:9d:9b:
         7a:d4:29:1c:2b:6b:4f:8b:4b:03:6a:6b:ac:21:93:37:94:0b:
         7d:50:83:1e:95:3b:be:00:bf:40:d7:e8:51:8a:1b:cc:0e:d3:
         ae:fd:4c:9f:3a:31:85:40:52:bf:98:80:15:f0:53:bd:21:d4:
         c6:c5:aa:22:ff:cd:e9:7a:97:f7:b7:f0:2b:df:f6:88:a2:d8:
         46:9b:47:f2:84:83:8f:37:ec:9b:d3:36:37:8d:12:6c:18:f1:
         98:94:03:90:9a:d4:ab:86:a6:3c:96:56:7f:f6:0f:71:f0:f7:
         4f:42:c4:4b:e7:58:03:fe:18:4d:e3:bf:b1:01:36:32:b7:42:
         3a:38:f2:a0:26:e1:08:eb:ab:d2:81:44:f4:6f:00:31:ad:48:
         c1:1f:09:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFBXtyXNvMswgHxmLvsDfROC9IFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1REEzMTkwRUQ5QkNENEZEQjcyMzcwOEFGNURCODc1
MkMyQ0FDMjAeFw0yNDA4MDkxNzI2MjVaFw0yNTA4MDgxNzMxMjVaMDMxMTAvBgNV
BAMTKDk0MjdBMDQ2NkI3MjExRTcxOTQwQkZFMjQ0Q0NGNzZGREM3RTlDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGFtGZ0yTMDKLPTwO+GwHMxVi
Wzo0D//vPHEj1oIEg+FJEQyVMNpipSgFiF7ahJ1Q1kctn/Tc1OAEmT4D7g0ul6P8
btF7XLOFMgQYcN5ypB80em+rKdp0sCi22myvVRDVBW4QV3CaCNBFJGm+MUlc7Mn9
Qa8lAlVzS0p+mfxuKAhp3JQMYWjgYbLabN9q/Ok4WG1vMbJKZeIdhpsIpPSNw/yh
eua30924/LOHMuMB6ZKUYd4VbPv1saebreAF0dAoehT26oBaHU55WowrHpqsUpzu
6S8Fm5vN6YaEhAT5lM482arMGYDcTaV36mQsh5ScHS0AyCmXHrJRmWobInA/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlCegRmtyEecZQL/iRMz3b9x+nG0wHwYDVR0j
BBgwFoAUe12jGQ7ZvNT9tyNwivXbh1LCysIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC83QjVEQTMxOTBFRDlCQ0Q0RkRCNzIzNzA4QUY1REI4NzUyQzJDQUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNURBMzE5MEVEOUJDRDRG
REI3MjM3MDhBRjVEQjg3NTJDMkNBQzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzEzNjM4MmUzOTMwMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzODMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoWuQwDQYJKoZIhvcNAQELBQADggEBAII1Dwsh
E399D6X2i7BD9SnIephz29KPBL3ThGm0rJEbI6paE1YZgQPD0FbD0VBeWyQMXPRS
ifi8AbAqyjSnS19qZgo5qHYaPVzYnr7G9snU18ZSa3rMFulqe6IQ6DmEwg0btchI
O5SUPKOdm3rUKRwra0+LSwNqa6whkzeUC31Qgx6VO74Av0DX6FGKG8wO0679TJ86
MYVAUr+YgBXwU70h1MbFqiL/zel6l/e38Cvf9oii2EabR/KEg4837JvTNjeNEmwY
8ZiUA5Ca1KuGpjyWVn/2D3Hw909CxEvnWAP+GE3jv7EBNjK3Qjo48qAm4Qjrq9KB
RPRvADGtSMEfCQY=
-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org