Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
File:                     3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa (raw, json)
Hash identifier:          gZqE0/shzhPrHKHsUChdoZsL46wRUIQ+0ZvIO2QA/7U=
Subject key identifier:   75:4A:86:20:3D:37:56:E2:B8:C8:A2:0D:90:63:76:5B:55:0C:3C:1B
Certificate issuer:       /CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
Certificate serial:       499BFBDA7442195C3BD3186E261F4264D66C9B
Authority key identifier: F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa
Signing time:             Fri 04 Oct 2024 20:41:15 +0000
ROA not before:           Fri 04 Oct 2024 20:36:15 +0000
ROA not after:            Fri 03 Oct 2025 20:41:15 +0000
asID:                     265300
IP address blocks:        200.106.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9b:fb:da:74:42:19:5c:3b:d3:18:6e:26:1f:42:64:d6:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2
        Validity
            Not Before: Oct  4 20:36:15 2024 GMT
            Not After : Oct  3 20:41:15 2025 GMT
        Subject: CN=754A86203D3756E2B8C8A20D9063765B550C3C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:21:f3:68:b6:51:ca:bc:41:0b:f7:c0:74:8e:
                    71:cd:4c:42:f7:39:da:47:e9:74:21:db:8e:ad:e0:
                    de:8a:e7:0f:92:14:5c:1b:d7:4e:04:97:7e:e5:20:
                    9f:ec:5c:77:93:21:05:a2:c5:2f:f6:d1:22:74:82:
                    71:4f:55:c7:c5:41:87:04:97:c6:66:74:ed:9e:22:
                    6d:1c:ff:3c:51:69:32:f4:e9:4f:4b:93:b1:18:37:
                    81:1a:9b:a9:42:bd:12:f1:21:02:9f:d9:ae:4b:1b:
                    6c:13:68:71:0a:c8:83:2c:7f:aa:94:5c:ef:62:f0:
                    0a:f5:a0:6e:ac:68:29:ce:94:e7:75:d1:df:e3:8d:
                    5b:b9:8c:5f:ea:69:4e:9c:3f:05:c4:3e:b5:87:2b:
                    fb:67:53:e5:90:19:73:ea:8f:3e:26:25:db:4d:ae:
                    21:9c:ce:53:2f:71:ad:20:69:6a:ab:9f:32:08:3e:
                    b8:2a:44:1c:ce:da:a6:ff:09:8a:fd:37:14:5d:18:
                    6d:72:1d:f5:5e:84:11:75:17:93:7a:09:b2:15:70:
                    ad:40:cc:3b:2e:e7:99:64:2c:d3:1e:aa:8c:3c:72:
                    bf:34:6b:69:ba:83:2f:a6:34:b6:04:3e:6e:44:d6:
                    fb:ee:e5:9d:ca:54:46:e5:3c:16:45:f2:db:a5:11:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:86:20:3D:37:56:E2:B8:C8:A2:0D:90:63:76:5B:55:0C:3C:1B
            X509v3 Authority Key Identifier:
                keyid:F0:B9:44:31:6C:D1:E1:E6:EB:4D:12:8F:A5:E4:1C:A2:9C:A9:4C:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B944316CD1E1E6EB4D128FA5E41CA29CA94CB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/0/3230302e3130362e3133322e302f32322d3232203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:8d:b0:12:8f:65:46:78:f5:b0:76:d6:41:1b:60:bc:84:
         32:21:34:7d:08:ca:bc:54:d3:45:d7:20:5b:d8:5d:cf:93:3f:
         1d:e5:5b:b2:29:f8:2b:4f:26:01:51:9f:cd:4a:e0:d6:eb:2e:
         09:8c:a7:78:84:7a:79:26:04:ba:d3:c8:d1:52:95:03:e0:03:
         e9:b9:5a:01:c7:1c:de:4a:07:30:47:69:d5:53:26:c8:09:00:
         93:9c:a7:e3:22:9a:0f:9a:82:21:cf:17:ac:ea:b8:17:b3:0d:
         2b:17:0a:24:fe:e3:4c:bc:68:c1:f3:1d:c8:d5:2f:89:63:f2:
         75:58:52:99:0b:fe:7d:6e:fd:dd:af:6a:d3:bf:ba:f8:b9:2c:
         59:41:0d:94:49:c2:a2:54:2f:cb:c2:7b:fc:03:6e:e6:aa:98:
         e1:92:97:e0:9d:62:d7:93:71:5e:02:8a:85:f6:78:6e:29:61:
         6a:7c:79:4a:7a:e7:b8:1b:56:b3:10:6d:43:31:88:26:3b:32:
         f9:28:6e:45:60:a9:c4:1e:da:4a:ac:5d:66:6c:8b:5c:77:1f:
         61:46:1d:7b:b6:c8:6b:14:94:08:2d:f0:ed:9a:3f:b3:f3:5e:
         11:14:4a:9c:af:dd:91:a9:b6:0c:3d:b1:ca:97:61:4b:ea:f4:
         10:56:e2:f2
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITSZv72nRCGVw70xhuJh9CZNZsmzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhGMEI5NDQzMTZDRDFFMUU2RUI0RDEyOEZBNUU0MUNBMjlD
QTk0Q0IyMB4XDTI0MTAwNDIwMzYxNVoXDTI1MTAwMzIwNDExNVowMzExMC8GA1UE
AxMoNzU0QTg2MjAzRDM3NTZFMkI4QzhBMjBEOTA2Mzc2NUI1NTBDM0MxQjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM0h82i2Ucq8QQv3wHSOcc1MQvc5
2kfpdCHbjq3g3ornD5IUXBvXTgSXfuUgn+xcd5MhBaLFL/bRInSCcU9Vx8VBhwSX
xmZ07Z4ibRz/PFFpMvTpT0uTsRg3gRqbqUK9EvEhAp/ZrksbbBNocQrIgyx/qpRc
72LwCvWgbqxoKc6U53XR3+ONW7mMX+ppTpw/BcQ+tYcr+2dT5ZAZc+qPPiYl202u
IZzOUy9xrSBpaqufMgg+uCpEHM7apv8Jiv03FF0YbXId9V6EEXUXk3oJshVwrUDM
Oy7nmWQs0x6qjDxyvzRrabqDL6Y0tgQ+bkTW++7lncpURuU8FkXy26URdd8CAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBR1SoYgPTdW4rjIog2QY3ZbVQw8GzAfBgNVHSME
GDAWgBTwuUQxbNHh5utNEo+l5ByinKlMsjAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN2Q0YkZmS3VWelU4ZHhvQ1NxdnNEM1VCV2tWYUR3dXVyTHFIZlpXRURv
Yy8wL0YwQjk0NDMxNkNEMUUxRTZFQjREMTI4RkE1RTQxQ0EyOUNBOTRDQjIuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRjBCOTQ0MzE2Q0QxRTFFNkVC
NEQxMjhGQTVFNDFDQTI5Q0E5NENCMi5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
QzdkNGJGZkt1VnpVOGR4b0NTcXZzRDNVQldrVmFEd3V1ckxxSGZaV0VEb2MvMC8z
MjMwMzAyZTMxMzAzNjJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIz
NjM1MzMzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCyGqEMA0GCSqGSIb3DQEBCwUAA4IBAQCPQ42w
Eo9lRnj1sHbWQRtgvIQyITR9CMq8VNNF1yBb2F3Pkz8d5VuyKfgrTyYBUZ/NSuDW
6y4JjKd4hHp5JgS608jRUpUD4APpuVoBxxzeSgcwR2nVUybICQCTnKfjIpoPmoIh
zxes6rgXsw0rFwok/uNMvGjB8x3I1S+JY/J1WFKZC/59bv3dr2rTv7r4uSxZQQ2U
ScKiVC/Lwnv8A27mqpjhkpfgnWLXk3FeAoqF9nhuKWFqfHlKeue4G1azEG1DMYgm
OzL5KG5FYKnEHtpKrF1mbItcdx9hRh17tshrFJQILfDtmj+z814RFEqcr92RqbYM
PbHKl2FL6vQQVuLy
-----END CERTIFICATE-----
Generated at Thu Nov 14 20:09:24 2024 by rpki-client on console-fra.rpki-client.org