Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32322d3232203d3e20323635393739.roa
File:                     3136342e3136332e3235322e302f32322d3232203d3e20323635393739.roa (raw, json)
Hash identifier:          GSncMPU1a+WrTFJg3lOewYDbviTVnqGnEcG3iJU/lkM=
Subject key identifier:   E4:C4:93:BC:0B:4B:BE:53:AF:1E:67:5B:39:C3:99:05:BE:3F:81:24
Certificate issuer:       /CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
Certificate serial:       222A971E0D3299DBDFEC8BE260A261E7B65CEB2D
Authority key identifier: F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32322d3232203d3e20323635393739.roa
Signing time:             Mon 06 May 2024 14:46:12 +0000
ROA not before:           Mon 06 May 2024 14:41:12 +0000
ROA not after:            Mon 05 May 2025 14:46:12 +0000
asID:                     265979
IP address blocks:        164.163.252.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:97:1e:0d:32:99:db:df:ec:8b:e2:60:a2:61:e7:b6:5c:eb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F866341C2B2DD5819D80AB45E2B0E6754E0C7682
        Validity
            Not Before: May  6 14:41:12 2024 GMT
            Not After : May  5 14:46:12 2025 GMT
        Subject: CN=E4C493BC0B4BBE53AF1E675B39C39905BE3F8124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:61:30:b4:cb:d6:f7:d7:00:a1:3b:a6:bb:
                    aa:fa:39:4c:a9:f0:04:d2:a8:98:b0:1b:d6:80:26:
                    6d:85:bc:3d:79:ab:82:bc:4a:7f:c9:c9:b8:c0:f3:
                    82:d3:c6:ee:06:60:82:db:61:aa:34:1c:05:e9:5e:
                    55:6b:95:86:3b:07:90:c4:c6:f2:f4:ed:06:97:ab:
                    39:07:51:83:c1:e8:7d:2d:31:cc:c3:2d:a0:24:24:
                    f2:ae:a5:84:ce:db:7f:c0:11:2e:16:34:64:c4:d2:
                    2b:b1:80:b8:0a:4d:2e:a8:e2:08:7c:79:93:28:89:
                    51:eb:45:cf:29:6f:10:09:dd:d4:ff:37:57:0d:57:
                    4a:25:31:1c:48:af:45:26:d4:ae:62:8c:f3:b2:7c:
                    41:6c:35:ad:02:d1:c4:7f:58:66:8b:7f:f5:0d:f6:
                    cd:00:cb:66:a7:cb:0d:76:ef:93:a8:4f:18:de:3c:
                    e8:a8:8d:cb:fe:21:56:30:49:a7:e4:d0:73:d5:87:
                    ff:90:41:74:57:32:9d:8f:e2:0e:6e:82:22:97:d1:
                    85:26:69:bf:d6:53:28:df:e3:6f:07:97:b7:6a:84:
                    54:f6:ba:53:60:53:98:6d:64:7f:61:1f:e3:d7:8d:
                    34:34:60:8d:96:b9:a1:e6:e4:de:1a:98:a6:ed:aa:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:93:BC:0B:4B:BE:53:AF:1E:67:5B:39:C3:99:05:BE:3F:81:24
            X509v3 Authority Key Identifier:
                keyid:F8:66:34:1C:2B:2D:D5:81:9D:80:AB:45:E2:B0:E6:75:4E:0C:76:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F866341C2B2DD5819D80AB45E2B0E6754E0C7682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwJ7zWPxPNZPdxKc6YugxiRsvtGmECWpCMqDME2gE6Hn/0/3136342e3136332e3235322e302f32322d3232203d3e20323635393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:f0:6b:5c:6c:73:d1:b2:5f:19:4d:d0:2c:8b:e5:e5:d9:73:
         9f:61:d0:9e:95:d4:d6:aa:94:9e:1c:b9:cf:4b:ca:75:e6:86:
         2c:20:ef:c3:4d:44:bc:cc:d6:0e:f7:8a:dd:dd:98:1a:6a:4d:
         42:98:60:d9:61:08:92:79:93:27:2a:31:c8:1c:2b:3f:ba:e4:
         d0:19:64:81:03:ae:88:bf:c4:48:15:bf:f3:d6:e6:ae:98:56:
         b0:f8:6e:7f:d5:16:6c:a1:20:56:43:5a:65:b0:a7:8f:f9:e3:
         c1:0e:20:45:90:f8:8f:cd:f7:b8:b2:ff:46:e1:b6:f8:43:87:
         08:22:8c:fe:a5:79:8b:51:a3:05:e6:ba:3e:f5:7d:88:c9:77:
         96:d4:6b:d2:78:e1:14:a7:18:84:5b:4c:a1:22:8b:0d:9c:ae:
         33:5c:89:cb:42:08:4d:a9:c7:e6:27:de:8a:8c:0e:f6:42:73:
         c5:9c:87:8d:50:cf:0c:b9:51:37:7a:a6:c5:43:cc:b8:fa:50:
         bf:a0:96:07:b3:dd:18:fc:e7:da:20:d6:3e:d9:7b:6b:f6:51:
         a7:ab:b9:b2:cc:de:7d:e6:64:60:d6:d6:f2:10:81:97:76:03:
         bc:96:6b:60:78:06:97:9c:ff:fe:fa:e1:09:bf:f1:b2:b7:6e:
         73:d7:a3:ad
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIiqXHg0ymdvf7IviYKJh57Zc6y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjg2NjM0MUMyQjJERDU4MTlEODBBQjQ1RTJCMEU2NzU0
RTBDNzY4MjAeFw0yNDA1MDYxNDQxMTJaFw0yNTA1MDUxNDQ2MTJaMDMxMTAvBgNV
BAMTKEU0QzQ5M0JDMEI0QkJFNTNBRjFFNjc1QjM5QzM5OTA1QkUzRjgxMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PWEwtMvW99cAoTumu6r6OUyp
8ATSqJiwG9aAJm2FvD15q4K8Sn/JybjA84LTxu4GYILbYao0HAXpXlVrlYY7B5DE
xvL07QaXqzkHUYPB6H0tMczDLaAkJPKupYTO23/AES4WNGTE0iuxgLgKTS6o4gh8
eZMoiVHrRc8pbxAJ3dT/N1cNV0olMRxIr0Um1K5ijPOyfEFsNa0C0cR/WGaLf/UN
9s0Ay2anyw1275OoTxjePOiojcv+IVYwSafk0HPVh/+QQXRXMp2P4g5ugiKX0YUm
ab/WUyjf428Hl7dqhFT2ulNgU5htZH9hH+PXjTQ0YI2WuaHm5N4amKbtqgQZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5MSTvAtLvlOvHmdbOcOZBb4/gSQwHwYDVR0j
BBgwFoAU+GY0HCst1YGdgKtF4rDmdU4MdoIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3dKN3pXUHhQTlpQZHhLYzZZdWd4aVJzdnRHbUVDV3BDTXFETUUyZ0U2
SG4vMC9GODY2MzQxQzJCMkRENTgxOUQ4MEFCNDVFMkIwRTY3NTRFMEM3NjgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4NjYzNDFDMkIyREQ1ODE5
RDgwQUI0NUUyQjBFNjc1NEUwQzc2ODIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N3Sjd6V1B4UE5aUGR4S2M2WXVneGlSc3Z0R21FQ1dwQ01xRE1FMmdFNkhuLzAv
MzEzNjM0MmUzMTM2MzMyZTMyMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM5MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSj/DANBgkqhkiG9w0BAQsFAAOCAQEAZ/Br
XGxz0bJfGU3QLIvl5dlzn2HQnpXU1qqUnhy5z0vKdeaGLCDvw01EvMzWDveK3d2Y
GmpNQphg2WEIknmTJyoxyBwrP7rk0BlkgQOuiL/ESBW/89bmrphWsPhuf9UWbKEg
VkNaZbCnj/njwQ4gRZD4j833uLL/RuG2+EOHCCKM/qV5i1GjBea6PvV9iMl3ltRr
0njhFKcYhFtMoSKLDZyuM1yJy0IITanH5ifeiowO9kJzxZyHjVDPDLlRN3qmxUPM
uPpQv6CWB7PdGPzn2iDWPtl7a/ZRp6u5sszefeZkYNbW8hCBl3YDvJZrYHgGl5z/
/vrhCb/xsrduc9ejrQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:36:00 2024 by rpki-client on console-ams.rpki-client.org