Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa
File:                     3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa (raw, json)
Hash identifier:          JKRansYWCxKOX528o87JKExRFfy8fht84mppFfuy2qI=
Subject key identifier:   5B:5C:66:FD:31:8B:62:4B:DD:F8:FF:A1:71:B7:D4:56:40:38:C5:20
Certificate issuer:       /CN=DA05A5A4E368E7D591C311689FB45ECE06D7E648
Certificate serial:       36AF6E60C8A917F26A605DBDB0D5872BF3564992
Authority key identifier: DA:05:A5:A4:E3:68:E7:D5:91:C3:11:68:9F:B4:5E:CE:06:D7:E6:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA05A5A4E368E7D591C311689FB45ECE06D7E648.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa
Signing time:             Mon 18 Nov 2024 21:29:51 +0000
ROA not before:           Mon 18 Nov 2024 21:24:51 +0000
ROA not after:            Mon 17 Nov 2025 21:29:51 +0000
asID:                     264397
IP address blocks:        164.163.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:af:6e:60:c8:a9:17:f2:6a:60:5d:bd:b0:d5:87:2b:f3:56:49:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA05A5A4E368E7D591C311689FB45ECE06D7E648
        Validity
            Not Before: Nov 18 21:24:51 2024 GMT
            Not After : Nov 17 21:29:51 2025 GMT
        Subject: CN=5B5C66FD318B624BDDF8FFA171B7D4564038C520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:9b:42:68:ab:14:83:91:09:f7:1b:ff:4b:
                    c4:7d:e7:e5:0a:7c:28:73:6a:bf:d9:06:4b:30:d3:
                    18:eb:6d:c5:fe:f9:f3:b8:f7:e9:0f:63:1f:ff:09:
                    ba:0e:ad:d4:79:99:4e:9e:3f:c0:46:dc:5e:7a:59:
                    00:2f:b7:6a:9b:9f:b7:0b:39:20:28:3c:f3:7d:52:
                    06:2a:5a:07:b7:07:6d:7b:11:5c:68:88:ee:a6:48:
                    96:3d:80:63:83:f3:ce:18:71:85:50:cb:0f:9e:b7:
                    01:1d:e6:6b:b6:fa:43:ad:56:af:0d:17:26:49:d7:
                    c2:8f:18:a3:0a:c2:4d:5a:e0:9a:45:9f:3c:62:7b:
                    f9:71:8e:6f:68:f4:27:90:13:a8:3f:f8:2f:ca:8a:
                    a6:22:80:4a:ff:18:e4:c6:fe:cb:45:51:4d:d7:a9:
                    30:54:fb:2a:33:a8:5f:d6:0e:f6:b8:5a:83:f7:01:
                    6c:3c:4e:e2:60:0d:11:59:0d:9f:93:1f:0d:92:a1:
                    f5:b3:17:b4:54:75:89:e0:44:35:4a:45:26:8d:0f:
                    84:e6:15:85:c0:68:d3:c3:17:da:c2:db:e5:93:95:
                    cb:da:d3:bd:65:18:5b:32:ae:ec:02:80:3c:7d:92:
                    bd:4a:07:7c:9c:61:03:57:8b:c8:ac:58:0f:75:f9:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5C:66:FD:31:8B:62:4B:DD:F8:FF:A1:71:B7:D4:56:40:38:C5:20
            X509v3 Authority Key Identifier:
                keyid:DA:05:A5:A4:E3:68:E7:D5:91:C3:11:68:9F:B4:5E:CE:06:D7:E6:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/DA05A5A4E368E7D591C311689FB45ECE06D7E648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA05A5A4E368E7D591C311689FB45ECE06D7E648.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/3136342e3136332e33362e302f32322d3234203d3e20323634333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:1e:36:c2:c5:17:a4:0e:97:35:12:93:8c:7b:81:e5:3d:
         55:2e:ad:bb:73:93:16:7e:26:c0:1e:48:a7:bd:60:17:05:2b:
         59:55:3d:de:ce:e3:c2:6f:07:86:f8:fa:c2:fb:9f:56:01:37:
         00:3b:73:74:83:69:32:b9:6b:c3:a4:6f:b4:39:93:13:7a:df:
         fd:bd:d0:e2:7b:de:f0:17:00:85:7b:70:05:b7:66:0a:1b:f0:
         d6:eb:91:3e:74:39:f4:80:7a:12:71:d6:11:74:c1:72:0a:39:
         16:a0:3d:3c:00:1c:96:7b:aa:33:74:c3:78:5b:2c:4f:e0:d4:
         cb:01:69:ce:72:0e:fb:2b:85:eb:e6:61:d7:41:cb:77:dd:8b:
         e4:8c:d2:61:cd:26:ed:15:83:39:9a:5e:37:da:55:96:4c:9a:
         10:ea:29:74:c2:15:a2:12:68:e7:81:b0:13:63:62:c0:1d:37:
         dd:1a:d1:87:a4:26:65:33:69:ed:1b:08:f6:12:67:1c:19:56:
         1c:27:ea:1d:11:72:ea:bf:7d:8b:35:7e:36:e2:c6:70:e7:40:
         e4:cb:94:fe:8f:ac:e7:cb:30:5e:8a:56:93:65:00:f6:ed:b7:
         60:d5:5a:3f:a5:a0:c3:f6:f5:c3:4e:23:d0:41:4a:de:84:30:
         e3:fb:d5:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNq9uYMipF/JqYF29sNWHK/NWSZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEwNUE1QTRFMzY4RTdENTkxQzMxMTY4OUZCNDVFQ0Uw
NkQ3RTY0ODAeFw0yNDExMTgyMTI0NTFaFw0yNTExMTcyMTI5NTFaMDMxMTAvBgNV
BAMTKDVCNUM2NkZEMzE4QjYyNEJEREY4RkZBMTcxQjdENDU2NDAzOEM1MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWJtCaKsUg5EJ9xv/S8R95+UK
fChzar/ZBksw0xjrbcX++fO49+kPYx//CboOrdR5mU6eP8BG3F56WQAvt2qbn7cL
OSAoPPN9UgYqWge3B217EVxoiO6mSJY9gGOD884YcYVQyw+etwEd5mu2+kOtVq8N
FyZJ18KPGKMKwk1a4JpFnzxie/lxjm9o9CeQE6g/+C/KiqYigEr/GOTG/stFUU3X
qTBU+yozqF/WDva4WoP3AWw8TuJgDRFZDZ+THw2SofWzF7RUdYngRDVKRSaND4Tm
FYXAaNPDF9rC2+WTlcva071lGFsyruwCgDx9kr1KB3ycYQNXi8isWA91+SI5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUW1xm/TGLYkvd+P+hcbfUVkA4xSAwHwYDVR0j
BBgwFoAU2gWlpONo59WRwxFon7RezgbX5kgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ296WldhRGZkdTNCYmhrRmZTZmJzMzNnYUdnTXlSZkRCRURYUnI4eFNy
OGEvMC9EQTA1QTVBNEUzNjhFN0Q1OTFDMzExNjg5RkI0NUVDRTA2RDdFNjQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RBMDVBNUE0RTM2OEU3RDU5
MUMzMTE2ODlGQjQ1RUNFMDZEN0U2NDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvelpXYURmZHUzQmJoa0ZmU2ZiczMzZ2FHZ015UmZEQkVEWFJyOHhTcjhhLzAv
MzEzNjM0MmUzMTM2MzMyZTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKkoyQwDQYJKoZIhvcNAQELBQADggEBAJxpHjbC
xRekDpc1EpOMe4HlPVUurbtzkxZ+JsAeSKe9YBcFK1lVPd7O48JvB4b4+sL7n1YB
NwA7c3SDaTK5a8Okb7Q5kxN63/290OJ73vAXAIV7cAW3Zgob8NbrkT50OfSAehJx
1hF0wXIKORagPTwAHJZ7qjN0w3hbLE/g1MsBac5yDvsrhevmYddBy3fdi+SM0mHN
Ju0VgzmaXjfaVZZMmhDqKXTCFaISaOeBsBNjYsAdN90a0YekJmUzae0bCPYSZxwZ
Vhwn6h0Rcuq/fYs1fjbixnDnQOTLlP6PrOfLMF6KVpNlAPbtt2DVWj+loMP29cNO
I9BBSt6EMOP71RQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:04:13 2024 by rpki-client on console-fra.rpki-client.org