Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa
File:                     3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa (raw, json)
Hash identifier:          2bTETYEe1HgyBBpUCvmXwbfZxweS+AqXdugPWPRbko0=
Subject key identifier:   BF:C5:4D:87:13:5B:C3:85:22:15:7C:E6:66:0E:FA:12:B2:F4:24:A4
Certificate issuer:       /CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
Certificate serial:       6ED753676343DB4B5119BB0E9B63239F94456544
Authority key identifier: F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa
Signing time:             Fri 05 Apr 2024 04:03:54 +0000
ROA not before:           Fri 05 Apr 2024 03:58:54 +0000
ROA not after:            Fri 04 Apr 2025 04:03:54 +0000
asID:                     270870
IP address blocks:        138.59.155.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:53:67:63:43:db:4b:51:19:bb:0e:9b:63:23:9f:94:45:65:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69806C292D733D0A7BD46A6448D288ADCBE75E8
        Validity
            Not Before: Apr  5 03:58:54 2024 GMT
            Not After : Apr  4 04:03:54 2025 GMT
        Subject: CN=BFC54D87135BC38522157CE6660EFA12B2F424A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:a7:15:bf:9a:fb:bf:5d:02:a1:5d:46:ac:
                    7a:27:b4:48:4a:76:8e:0a:82:6b:24:7a:5f:da:1e:
                    cd:bc:ae:8e:af:76:d8:ea:f4:0d:42:f1:2e:db:2c:
                    e5:6e:ea:d3:eb:ad:74:54:b0:59:d8:96:29:f0:44:
                    c6:a0:06:45:5e:25:6f:c2:e8:ba:f4:95:b8:e3:f3:
                    42:e4:ab:5a:08:73:bd:80:03:15:55:9a:fe:37:60:
                    d9:55:0a:95:59:c4:68:0a:02:d4:81:94:ec:03:c2:
                    12:84:f3:de:f7:fa:08:e4:c3:90:b3:db:26:85:00:
                    6d:d5:a5:2b:b6:56:3d:0d:65:3a:1a:f7:16:d5:5f:
                    b8:cb:5a:c3:6f:08:93:3f:10:31:82:cd:ce:1f:db:
                    1b:0d:9b:3c:5f:3c:79:6a:e9:3e:55:0e:16:b3:2f:
                    1a:60:39:c1:9a:c2:26:a4:0a:13:08:de:28:76:06:
                    63:10:50:b2:6b:ab:58:8a:d1:b7:cd:d6:a7:92:4d:
                    4a:b5:93:81:ef:d1:66:b0:36:12:fd:46:b3:7a:a7:
                    22:2b:02:78:24:85:f2:34:9b:fa:26:32:f2:13:50:
                    b3:a4:b4:f7:dc:fc:9d:a2:98:20:d4:33:e4:3d:c1:
                    4d:c4:61:8d:77:11:ec:47:34:da:84:7f:8d:5d:13:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:4D:87:13:5B:C3:85:22:15:7C:E6:66:0E:FA:12:B2:F4:24:A4
            X509v3 Authority Key Identifier:
                keyid:F6:98:06:C2:92:D7:33:D0:A7:BD:46:A6:44:8D:28:8A:DC:BE:75:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69806C292D733D0A7BD46A6448D288ADCBE75E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/1/3133382e35392e3135352e302f32342d3234203d3e20323730383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:0f:4f:7a:13:f3:71:de:34:66:62:bf:cd:03:27:47:a4:78:
         a1:a2:75:31:1c:45:2b:4f:ec:49:35:fb:44:3f:2c:17:e0:60:
         67:f5:6b:8c:4e:be:0f:40:79:19:10:71:87:27:30:6f:ec:46:
         dc:b2:9a:12:f5:2b:f0:2e:c9:61:ca:fa:89:64:c6:69:ba:48:
         dd:2a:a4:2c:17:83:0e:70:ff:8f:62:78:c2:86:aa:72:30:78:
         44:42:f1:4f:15:d1:8e:d6:85:a5:05:5b:46:6a:21:49:50:32:
         d2:1d:38:44:c5:41:49:c2:e7:b0:94:a3:8b:52:a9:2d:f7:bd:
         c9:18:ca:58:01:10:f0:da:d3:2d:f3:39:c0:63:50:61:3f:81:
         2d:6d:ce:d8:a9:f3:0f:71:13:6e:20:c8:8b:ec:7b:20:59:c6:
         38:d8:c1:99:12:b3:52:82:4d:59:ab:1f:28:28:64:6a:78:0b:
         ca:0a:a4:ae:a9:de:f1:50:4f:26:5a:01:c1:d7:f0:e5:c0:cb:
         85:d5:56:5d:84:d7:a1:f6:42:40:90:f7:d9:6e:36:bf:09:a6:
         fe:67:84:c7:8b:1d:cc:a1:da:86:a7:dd:6b:df:3c:71:6f:72:
         53:e8:56:2b:9d:38:3d:70:f2:61:fd:da:e0:49:56:39:34:7b:
         33:88:ab:56
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbtdTZ2ND20tRGbsOm2Mjn5RFZUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5ODA2QzI5MkQ3MzNEMEE3QkQ0NkE2NDQ4RDI4OEFE
Q0JFNzVFODAeFw0yNDA0MDUwMzU4NTRaFw0yNTA0MDQwNDAzNTRaMDMxMTAvBgNV
BAMTKEJGQzU0RDg3MTM1QkMzODUyMjE1N0NFNjY2MEVGQTEyQjJGNDI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPiqcVv5r7v10CoV1GrHontEhK
do4Kgmskel/aHs28ro6vdtjq9A1C8S7bLOVu6tPrrXRUsFnYlinwRMagBkVeJW/C
6Lr0lbjj80Lkq1oIc72AAxVVmv43YNlVCpVZxGgKAtSBlOwDwhKE8973+gjkw5Cz
2yaFAG3VpSu2Vj0NZToa9xbVX7jLWsNvCJM/EDGCzc4f2xsNmzxfPHlq6T5VDhaz
LxpgOcGawiakChMI3ih2BmMQULJrq1iK0bfN1qeSTUq1k4Hv0WawNhL9RrN6pyIr
AngkhfI0m/omMvITULOktPfc/J2imCDUM+Q9wU3EYY13EexHNNqEf41dE+hVAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUv8VNhxNbw4UiFXzmZg76ErL0JKQwHwYDVR0j
BBgwFoAU9pgGwpLXM9CnvUamRI0oity+degwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3
LzEvRjY5ODA2QzI5MkQ3MzNEMEE3QkQ0NkE2NDQ4RDI4OEFEQ0JFNzVFOC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GNjk4MDZDMjkyRDczM0QwQTdC
RDQ2QTY0NDhEMjg4QURDQkU3NUU4LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
N1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3LzEvMzEz
MzM4MmUzNTM5MmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAz
ODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACKO5swDQYJKoZIhvcNAQELBQADggEBAEgPT3oT83He
NGZiv80DJ0ekeKGidTEcRStP7Ek1+0Q/LBfgYGf1a4xOvg9AeRkQcYcnMG/sRtyy
mhL1K/AuyWHK+olkxmm6SN0qpCwXgw5w/49ieMKGqnIweERC8U8V0Y7WhaUFW0Zq
IUlQMtIdOETFQUnC57CUo4tSqS33vckYylgBEPDa0y3zOcBjUGE/gS1tztip8w9x
E24gyIvseyBZxjjYwZkSs1KCTVmrHygoZGp4C8oKpK6p3vFQTyZaAcHX8OXAy4XV
Vl2E16H2QkCQ99luNr8Jpv5nhMeLHcyh2oan3WvfPHFvclPoViudOD1w8mH92uBJ
Vjk0ezOIq1Y=
-----END CERTIFICATE-----
Generated at Sun Aug 11 05:44:51 2024 by rpki-client on console-fra.rpki-client.org