Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32332d3234203d3e20323730383538.roa
File:                     3137392e302e3139302e302f32332d3234203d3e20323730383538.roa (raw, json)
Hash identifier:          wQU+hIIaXOfQY+rGtvV55I8QBu/XKcHq0++2vLXSykY=
Subject key identifier:   81:8E:78:FD:5B:50:94:C2:C9:C9:0A:E4:84:22:45:CF:02:E2:B8:FB
Certificate issuer:       /CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
Certificate serial:       4BAF434D9D41FEC68F39BE7CC32AC0A2D21CDA1D
Authority key identifier: B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32332d3234203d3e20323730383538.roa
Signing time:             Fri 15 Nov 2024 14:01:04 +0000
ROA not before:           Fri 15 Nov 2024 13:56:04 +0000
ROA not after:            Fri 14 Nov 2025 14:01:04 +0000
asID:                     270858
IP address blocks:        179.0.190.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:af:43:4d:9d:41:fe:c6:8f:39:be:7c:c3:2a:c0:a2:d2:1c:da:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201
        Validity
            Not Before: Nov 15 13:56:04 2024 GMT
            Not After : Nov 14 14:01:04 2025 GMT
        Subject: CN=818E78FD5B5094C2C9C90AE4842245CF02E2B8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:2f:1a:91:93:44:77:16:9c:2e:03:91:5d:
                    49:7e:d3:85:27:49:f6:2a:17:7f:dc:2d:c9:ad:f4:
                    ab:df:0b:4b:c8:ad:05:4f:d5:da:ad:98:a5:9e:03:
                    c1:ac:51:3d:ea:04:80:21:0a:6f:f3:57:1b:ac:ec:
                    7a:98:c0:0a:ec:99:93:2e:93:e6:ac:71:41:0c:e0:
                    a6:11:95:96:56:7e:24:64:86:3f:33:46:2b:36:f8:
                    68:58:40:24:ed:a1:c7:d6:f2:10:04:8f:b5:ae:b7:
                    1a:41:8e:56:49:c4:9e:5b:9a:bf:8d:c2:fa:f8:a1:
                    40:52:ed:a3:9c:86:87:68:bd:da:1d:3c:23:b1:1e:
                    36:0d:15:25:fe:14:58:7b:13:57:ed:a7:c1:c0:81:
                    80:5a:20:5a:cb:9c:d5:1d:24:80:d2:fd:26:bf:80:
                    bf:16:86:23:d1:b2:b8:d7:ff:46:8e:9d:1d:e2:4b:
                    4c:28:53:10:c2:b2:5a:01:ca:a0:74:a6:4a:0b:23:
                    3d:4d:81:8a:69:e3:0d:7f:08:82:5e:2c:67:71:e0:
                    4c:65:19:02:28:a3:43:e9:ea:3d:85:3f:79:90:d4:
                    17:ce:32:18:0c:7c:a1:76:3c:08:6b:20:c0:88:7c:
                    09:df:48:03:6c:65:33:bb:4e:e3:d6:50:f7:5a:92:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:78:FD:5B:50:94:C2:C9:C9:0A:E4:84:22:45:CF:02:E2:B8:FB
            X509v3 Authority Key Identifier:
                keyid:B5:2B:3B:29:5A:50:F5:06:C0:AF:D9:1C:EF:EC:2C:83:C3:DA:02:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B52B3B295A50F506C0AFD91CEFEC2C83C3DA0201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/3137392e302e3139302e302f32332d3234203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:7d:d0:72:cd:3f:66:a9:de:f8:47:d4:9d:21:2f:f2:c0:
         55:0e:18:55:b6:74:6c:53:a2:fc:dc:b7:28:b1:61:e4:fe:f8:
         da:47:8f:a8:f2:3c:a9:7f:e4:cd:6b:14:d7:97:df:45:ba:81:
         d5:e1:60:2c:b8:79:97:20:fa:06:c8:1d:a7:01:e5:01:cd:c9:
         26:82:77:ca:26:cc:b2:61:26:9d:17:94:b0:60:bf:80:46:cd:
         ec:6d:83:12:99:ef:92:0d:d5:5c:a3:d0:d6:25:6f:37:56:94:
         88:1c:05:f1:28:55:e3:c2:ec:45:2a:94:b1:ea:79:a4:52:00:
         80:e7:41:e7:e6:76:fb:68:11:9c:1e:69:48:66:da:dc:58:10:
         9f:3d:34:44:83:c6:e1:4a:ac:36:98:dd:c0:4c:7e:71:e2:20:
         f8:e5:01:4c:7d:10:47:41:67:6d:16:47:8d:26:61:c7:3b:21:
         90:fd:e9:1c:40:37:4f:5e:00:52:b3:6f:27:97:4a:41:a9:3f:
         65:1b:fd:39:90:6b:c8:95:5f:71:f5:13:52:ad:11:9b:05:18:
         d1:40:dd:09:06:59:06:d9:27:da:cd:c8:43:76:d6:5b:e9:ad:
         b1:29:0c:d5:70:59:fe:67:16:55:bc:d0:bc:4a:a4:ae:a0:53:
         dc:90:d4:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS69DTZ1B/saPOb58wyrAotIc2h0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUyQjNCMjk1QTUwRjUwNkMwQUZEOTFDRUZFQzJDODND
M0RBMDIwMTAeFw0yNDExMTUxMzU2MDRaFw0yNTExMTQxNDAxMDRaMDMxMTAvBgNV
BAMTKDgxOEU3OEZENUI1MDk0QzJDOUM5MEFFNDg0MjI0NUNGMDJFMkI4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPS8akZNEdxacLgORXUl+04Un
SfYqF3/cLcmt9KvfC0vIrQVP1dqtmKWeA8GsUT3qBIAhCm/zVxus7HqYwArsmZMu
k+ascUEM4KYRlZZWfiRkhj8zRis2+GhYQCTtocfW8hAEj7WutxpBjlZJxJ5bmr+N
wvr4oUBS7aOchodovdodPCOxHjYNFSX+FFh7E1ftp8HAgYBaIFrLnNUdJIDS/Sa/
gL8WhiPRsrjX/0aOnR3iS0woUxDCsloByqB0pkoLIz1NgYpp4w1/CIJeLGdx4Exl
GQIoo0Pp6j2FP3mQ1BfOMhgMfKF2PAhrIMCIfAnfSANsZTO7TuPWUPdakoBtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgY54/VtQlMLJyQrkhCJFzwLiuPswHwYDVR0j
BBgwFoAUtSs7KVpQ9QbAr9kc7+wsg8PaAgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzR5S1Q3dEdrYkR5dzNxVHk0RXoyN292dURxdVd3VmpmTjVBWjh3VGY2
TmkvMC9CNTJCM0IyOTVBNTBGNTA2QzBBRkQ5MUNFRkVDMkM4M0MzREEwMjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I1MkIzQjI5NUE1MEY1MDZD
MEFGRDkxQ0VGRUMyQzgzQzNEQTAyMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0eUtUN3RHa2JEeXczcVR5NEV6MjdvdnVEcXVXd1ZqZk41QVo4d1RmNk5pLzAv
MzEzNzM5MmUzMDJlMzEzOTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBswC+MA0GCSqGSIb3DQEBCwUAA4IBAQArHn3Qcs0/
Zqne+EfUnSEv8sBVDhhVtnRsU6L83LcosWHk/vjaR4+o8jypf+TNaxTXl99FuoHV
4WAsuHmXIPoGyB2nAeUBzckmgnfKJsyyYSadF5SwYL+ARs3sbYMSme+SDdVco9DW
JW83VpSIHAXxKFXjwuxFKpSx6nmkUgCA50Hn5nb7aBGcHmlIZtrcWBCfPTREg8bh
Sqw2mN3ATH5x4iD45QFMfRBHQWdtFkeNJmHHOyGQ/ekcQDdPXgBSs28nl0pBqT9l
G/05kGvIlV9x9RNSrRGbBRjRQN0JBlkG2SfazchDdtZb6a2xKQzVcFn+ZxZVvNC8
SqSuoFPckNTc
-----END CERTIFICATE-----
Generated at Sat Nov 16 18:19:08 2024 by rpki-client on console-ams.rpki-client.org