Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa
File:                     32342e3135322e342e302f32322d3232203d3e20323730343934.roa (raw, json)
Hash identifier:          QyBRsgiiWq0fo44ryFkmQPvrm/BnfcOE9D87nq0ayAM=
Subject key identifier:   E9:9F:96:FB:E6:E5:C9:9F:BA:73:05:61:D8:0E:85:5C:84:05:4C:9F
Certificate issuer:       /CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
Certificate serial:       5F964C3BA2AB5F6C0FA747F4ED185002D9519944
Authority key identifier: 92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa
Signing time:             Tue 27 Aug 2024 18:18:33 +0000
ROA not before:           Tue 27 Aug 2024 18:13:33 +0000
ROA not after:            Tue 26 Aug 2025 18:18:33 +0000
asID:                     270494
IP address blocks:        24.152.4.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:96:4c:3b:a2:ab:5f:6c:0f:a7:47:f4:ed:18:50:02:d9:51:99:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686
        Validity
            Not Before: Aug 27 18:13:33 2024 GMT
            Not After : Aug 26 18:18:33 2025 GMT
        Subject: CN=E99F96FBE6E5C99FBA730561D80E855C84054C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3b:0b:c7:ce:86:c8:9e:7a:73:5a:14:46:8c:
                    72:a5:b7:f6:9c:de:ec:cb:1d:b0:26:e6:e7:94:2d:
                    13:c6:f2:b2:c3:27:60:29:42:42:67:3e:a9:52:86:
                    f5:f7:c3:aa:27:a3:76:be:c1:34:38:ac:26:52:5b:
                    cd:b6:6a:51:31:68:72:c8:39:37:78:74:d1:1d:3b:
                    bc:a4:47:e6:63:55:90:23:68:3f:24:84:7e:1c:b7:
                    f3:72:bf:1b:2a:cd:22:6b:69:99:f7:20:e9:c1:64:
                    4f:01:e1:bb:fb:a7:d6:87:c1:cd:de:62:ff:20:c3:
                    c7:c3:c2:c7:a1:df:4e:c8:ee:6f:8a:d4:ad:88:4f:
                    18:5a:95:fe:2a:80:38:5b:e0:75:9e:ab:d5:a5:b7:
                    6f:df:47:0b:60:95:9a:fa:25:c4:b3:9f:70:f6:77:
                    ab:23:e3:65:7c:47:2e:61:21:95:ec:0d:af:76:e6:
                    43:76:9b:27:94:fa:4c:0d:ef:05:45:e3:ac:03:aa:
                    89:44:b9:fc:78:92:23:14:17:a2:f2:96:c7:c0:92:
                    96:3e:71:9f:6d:75:8c:74:f5:5d:e4:76:30:2e:5c:
                    b5:70:ed:f1:5d:35:4c:11:17:bc:a7:e7:84:c8:d2:
                    10:98:59:24:9d:55:5d:24:5e:3b:a0:36:d4:85:ff:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9F:96:FB:E6:E5:C9:9F:BA:73:05:61:D8:0E:85:5C:84:05:4C:9F
            X509v3 Authority Key Identifier:
                keyid:92:C2:7D:71:FD:C3:A0:3B:05:0E:2F:DD:3E:DC:FA:11:F1:7B:76:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92C27D71FDC3A03B050E2FDD3EDCFA11F17B7686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/32342e3135322e342e302f32322d3232203d3e20323730343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:a2:df:e3:b9:17:4b:b8:71:ab:a0:28:b1:50:a5:af:75:7d:
         60:cc:cf:d5:4f:11:a7:68:18:30:25:3f:11:c8:04:e8:4b:25:
         a7:b5:57:31:b6:0b:70:05:aa:3f:3e:55:65:01:b9:bf:60:87:
         80:0b:b0:f3:92:e7:9f:2d:37:ff:a1:07:87:ba:ac:d1:58:b0:
         d1:88:aa:5c:a6:2b:89:77:95:45:cc:e9:23:a7:de:aa:7d:98:
         b3:d5:0c:ac:e8:04:86:3e:f9:91:28:5c:8c:60:47:a4:23:02:
         9e:31:ad:47:e3:be:df:68:36:ec:35:3d:00:2c:5d:7b:de:f3:
         8f:72:e2:22:00:33:1d:ba:f8:0c:ab:5d:00:07:30:1d:a2:b0:
         8b:c7:e6:5f:e0:6f:61:fb:4e:57:d3:75:a8:6f:27:84:f2:68:
         9a:54:35:da:ce:cd:9e:d6:6c:25:d1:54:d5:c6:41:d7:75:06:
         b8:36:1d:f1:13:37:6e:92:65:74:d9:1e:35:48:91:f3:d3:53:
         2c:82:72:65:88:1c:17:35:45:93:64:d0:34:4a:de:da:02:f9:
         86:af:d2:66:57:c7:de:75:0d:89:a1:17:d8:bb:22:5a:8d:42:
         60:ec:ea:45:13:05:76:f3:31:bd:77:c8:4e:aa:46:d6:08:91:
         be:01:a4:db
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUX5ZMO6KrX2wPp0f07RhQAtlRmUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJDMjdENzFGREMzQTAzQjA1MEUyRkREM0VEQ0ZBMTFG
MTdCNzY4NjAeFw0yNDA4MjcxODEzMzNaFw0yNTA4MjYxODE4MzNaMDMxMTAvBgNV
BAMTKEU5OUY5NkZCRTZFNUM5OUZCQTczMDU2MUQ4MEU4NTVDODQwNTRDOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOwvHzobInnpzWhRGjHKlt/ac
3uzLHbAm5ueULRPG8rLDJ2ApQkJnPqlShvX3w6ono3a+wTQ4rCZSW822alExaHLI
OTd4dNEdO7ykR+ZjVZAjaD8khH4ct/NyvxsqzSJraZn3IOnBZE8B4bv7p9aHwc3e
Yv8gw8fDwseh307I7m+K1K2ITxhalf4qgDhb4HWeq9Wlt2/fRwtglZr6JcSzn3D2
d6sj42V8Ry5hIZXsDa925kN2myeU+kwN7wVF46wDqolEufx4kiMUF6LylsfAkpY+
cZ9tdYx09V3kdjAuXLVw7fFdNUwRF7yn54TI0hCYWSSdVV0kXjugNtSF/39VAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6Z+W++blyZ+6cwVh2A6FXIQFTJ8wHwYDVR0j
BBgwFoAUksJ9cf3DoDsFDi/dPtz6EfF7doYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0Z1dkJLZ0FBU0ZrdDZSTjF4QTJDNko0Tkx2cGF1YkZGRnJGNXd1bmpY
akEvMC85MkMyN0Q3MUZEQzNBMDNCMDUwRTJGREQzRURDRkExMUYxN0I3Njg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyQzI3RDcxRkRDM0EwM0Iw
NTBFMkZERDNFRENGQTExRjE3Qjc2ODYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NGdXZCS2dBQVNGa3Q2Uk4xeEEyQzZKNE5MdnBhdWJGRkZyRjV3dW5qWGpBLzAv
MzIzNDJlMzEzNTMyMmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzczMDM0
MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAhiYBDANBgkqhkiG9w0BAQsFAAOCAQEAhaLf47kXS7hx
q6AosVClr3V9YMzP1U8Rp2gYMCU/EcgE6Eslp7VXMbYLcAWqPz5VZQG5v2CHgAuw
85Lnny03/6EHh7qs0Viw0YiqXKYriXeVRczpI6feqn2Ys9UMrOgEhj75kShcjGBH
pCMCnjGtR+O+32g27DU9ACxde97zj3LiIgAzHbr4DKtdAAcwHaKwi8fmX+BvYftO
V9N1qG8nhPJomlQ12s7NntZsJdFU1cZB13UGuDYd8RM3bpJldNkeNUiR89NTLIJy
ZYgcFzVFk2TQNEre2gL5hq/SZlfH3nUNiaEX2LsiWo1CYOzqRRMFdvMxvXfITqpG
1giRvgGk2w==
-----END CERTIFICATE-----
Generated at Sat Sep 7 11:07:56 2024 by rpki-client on console-fra.rpki-client.org