Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e302e302f31382d3332203d3e203134383430.roa
File:                     3230312e31362e302e302f31382d3332203d3e203134383430.roa (raw, json)
Hash identifier:          XP0K2GA1qVJGG1IdjNl4wGctVFh63Tb48qyAAjLJ59E=
Subject key identifier:   99:F1:4C:34:1E:E4:DC:3A:50:5B:E5:04:EC:42:FC:33:97:A8:0C:3F
Certificate issuer:       /CN=935257EB3C9C286B284FF65477D23761A683AD6E
Certificate serial:       2090D9F18540E9D6DB6418A3A6F8B3170C473217
Authority key identifier: 93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e302e302f31382d3332203d3e203134383430.roa
Signing time:             Mon 22 Apr 2024 18:37:47 +0000
ROA not before:           Mon 22 Apr 2024 18:32:47 +0000
ROA not after:            Mon 21 Apr 2025 18:37:47 +0000
asID:                     14840
IP address blocks:        201.16.0.0/18 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:d9:f1:85:40:e9:d6:db:64:18:a3:a6:f8:b3:17:0c:47:32:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935257EB3C9C286B284FF65477D23761A683AD6E
        Validity
            Not Before: Apr 22 18:32:47 2024 GMT
            Not After : Apr 21 18:37:47 2025 GMT
        Subject: CN=99F14C341EE4DC3A505BE504EC42FC3397A80C3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:36:58:80:2f:10:2c:8b:46:d6:31:f5:bb:
                    cc:ec:1e:95:06:0b:91:a2:ee:18:15:a0:9d:e6:b5:
                    0f:1d:d4:bb:99:0c:d1:8e:72:ec:6b:6b:45:4b:48:
                    61:8b:9a:70:d5:6f:1f:e1:8f:2f:be:05:ec:f6:fb:
                    07:89:e3:97:f0:49:ac:85:0d:e7:39:98:18:0c:02:
                    eb:b8:41:25:27:6e:90:2e:dc:20:d9:fe:a6:83:2d:
                    f8:cf:f1:bf:e8:14:63:19:77:e2:cf:59:a0:2d:89:
                    77:11:5a:a9:37:36:10:6d:a1:29:49:78:d6:19:d9:
                    f9:d9:73:d6:e7:56:89:f9:0d:28:32:f2:fa:69:6c:
                    b0:cb:cf:19:67:23:6d:81:ec:12:91:4c:81:d3:a1:
                    6c:36:bd:0e:7b:17:5c:5f:0a:6f:a4:0f:b6:24:2a:
                    ab:c8:fe:b1:de:15:9b:03:74:1b:b4:d5:b9:95:71:
                    2d:bd:5b:a8:be:da:0c:8e:cd:26:cb:cd:6d:4a:75:
                    1d:05:ea:27:02:5b:9f:72:70:05:e3:23:1e:a7:9a:
                    98:25:7b:10:b5:5e:2c:62:3a:23:e1:13:bc:98:c5:
                    33:4e:bc:ad:63:4e:8c:fc:cd:30:f6:b4:b8:74:60:
                    6a:01:04:a3:b3:85:4f:47:30:3b:5d:91:ea:7b:86:
                    f3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:4C:34:1E:E4:DC:3A:50:5B:E5:04:EC:42:FC:33:97:A8:0C:3F
            X509v3 Authority Key Identifier:
                keyid:93:52:57:EB:3C:9C:28:6B:28:4F:F6:54:77:D2:37:61:A6:83:AD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/935257EB3C9C286B284FF65477D23761A683AD6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/935257EB3C9C286B284FF65477D23761A683AD6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/3230312e31362e302e302f31382d3332203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.16.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:ff:95:1f:95:f4:74:ac:ec:7d:aa:0c:c5:94:83:5b:f0:
         72:5b:dd:0d:40:61:7c:6a:62:e2:91:4c:30:e6:4c:e8:9a:da:
         0a:cf:de:8a:41:ef:23:b1:dc:bc:7e:09:3b:a5:fe:e4:db:10:
         59:71:8a:2a:66:d1:49:1d:c6:c4:5e:76:4f:52:9e:d7:58:27:
         61:da:cf:99:5d:5d:53:49:98:e7:5f:d2:1d:dc:cb:26:67:27:
         b3:30:93:38:1f:c7:4b:a8:f0:f4:22:35:68:ef:f7:63:be:d2:
         65:66:b1:52:48:88:27:8c:12:08:f6:19:d2:b9:09:d4:8f:b0:
         fb:18:43:5a:29:9e:21:cf:20:21:b6:57:66:e2:dd:14:83:ba:
         49:58:9a:df:94:0a:db:85:e0:0a:7d:63:47:32:da:b6:ff:58:
         ed:d1:18:fa:f7:b8:a7:99:9c:72:ab:14:b7:06:fe:53:40:3c:
         d2:64:fd:23:f5:c8:26:70:e6:bd:9a:76:6c:4d:73:b3:73:a3:
         66:1a:b8:34:5a:0f:f7:6f:94:c4:c9:25:df:a9:6c:01:e2:82:
         c8:27:f6:2a:ca:ea:93:f9:8f:6c:9e:6f:da:0a:25:3e:2e:51:
         2f:73:f7:51:d9:13:0a:84:ee:eb:95:5d:ec:3c:7a:f9:4c:1c:
         a0:21:74:a7
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIJDZ8YVA6dbbZBijpvizFwxHMhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM1MjU3RUIzQzlDMjg2QjI4NEZGNjU0NzdEMjM3NjFB
NjgzQUQ2RTAeFw0yNDA0MjIxODMyNDdaFw0yNTA0MjExODM3NDdaMDMxMTAvBgNV
BAMTKDk5RjE0QzM0MUVFNERDM0E1MDVCRTUwNEVDNDJGQzMzOTdBODBDM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVjZYgC8QLItG1jH1u8zsHpUG
C5Gi7hgVoJ3mtQ8d1LuZDNGOcuxra0VLSGGLmnDVbx/hjy++Bez2+weJ45fwSayF
Dec5mBgMAuu4QSUnbpAu3CDZ/qaDLfjP8b/oFGMZd+LPWaAtiXcRWqk3NhBtoSlJ
eNYZ2fnZc9bnVon5DSgy8vppbLDLzxlnI22B7BKRTIHToWw2vQ57F1xfCm+kD7Yk
KqvI/rHeFZsDdBu01bmVcS29W6i+2gyOzSbLzW1KdR0F6icCW59ycAXjIx6nmpgl
exC1XixiOiPhE7yYxTNOvK1jToz8zTD2tLh0YGoBBKOzhU9HMDtdkep7hvM9AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUmfFMNB7k3DpQW+UE7EL8M5eoDD8wHwYDVR0j
BBgwFoAUk1JX6zycKGsoT/ZUd9I3YaaDrW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2NLVGFzWW9rMk42dTR5cnBRTGFjU054WkM5M3RLc05SWTZpaUFzMnpa
ZWUvMC85MzUyNTdFQjNDOUMyODZCMjg0RkY2NTQ3N0QyMzc2MUE2ODNBRDZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkzNTI1N0VCM0M5QzI4NkIy
ODRGRjY1NDc3RDIzNzYxQTY4M0FENkUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjS1Rhc1lvazJONnU0eXJwUUxhY1NOeFpDOTN0S3NOUlk2aWlBczJ6WmVlLzAv
MzIzMDMxMmUzMTM2MmUzMDJlMzAyZjMxMzgyZDMzMzIyMDNkM2UyMDMxMzQzODM0
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAbJEAAwDQYJKoZIhvcNAQELBQADggEBAEqf/5UflfR0rOx9
qgzFlINb8HJb3Q1AYXxqYuKRTDDmTOia2grP3opB7yOx3Lx+CTul/uTbEFlxiipm
0UkdxsRedk9SntdYJ2Haz5ldXVNJmOdf0h3cyyZnJ7Mwkzgfx0uo8PQiNWjv92O+
0mVmsVJIiCeMEgj2GdK5CdSPsPsYQ1opniHPICG2V2bi3RSDuklYmt+UCtuF4Ap9
Y0cy2rb/WO3RGPr3uKeZnHKrFLcG/lNAPNJk/SP1yCZw5r2admxNc7Nzo2YauDRa
D/dvlMTJJd+pbAHigsgn9irK6pP5j2yeb9oKJT4uUS9z91HZEwqE7uuVXew8evlM
HKAhdKc=
-----END CERTIFICATE-----
Generated at Sat May 18 16:23:38 2024 by rpki-client on console-fra.rpki-client.org