Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa
File:                     3139302e35322e37382e302f32342d3234203d3e20323636313336.roa (raw, json)
Hash identifier:          SXXJ3I25Qa41thWtAAfCJpL5Aew8oHLzx17Lc9N5OmI=
Subject key identifier:   18:30:42:68:30:8D:DA:DC:3C:2D:41:DA:7B:2D:A1:1C:CB:97:AE:08
Certificate issuer:       /CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
Certificate serial:       0501B5808A5F3A6F0D1D9E002F58CBAE4C393F1E
Authority key identifier: 63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa
Signing time:             Thu 04 Apr 2024 20:55:47 +0000
ROA not before:           Thu 04 Apr 2024 20:50:47 +0000
ROA not after:            Thu 03 Apr 2025 20:55:47 +0000
asID:                     266136
IP address blocks:        190.52.78.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:01:b5:80:8a:5f:3a:6f:0d:1d:9e:00:2f:58:cb:ae:4c:39:3f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630BDC748C0C3B8F1051E4DD84924614896BFA07
        Validity
            Not Before: Apr  4 20:50:47 2024 GMT
            Not After : Apr  3 20:55:47 2025 GMT
        Subject: CN=18304268308DDADC3C2D41DA7B2DA11CCB97AE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:7b:9f:1c:4c:9b:11:bb:5f:16:69:45:60:
                    f4:c2:5d:b4:3e:a7:4f:f0:53:ec:67:bc:ab:a6:ba:
                    4f:44:ca:99:c3:29:e0:1e:bc:2f:40:89:27:5c:55:
                    ef:e5:c3:05:74:e9:a3:7a:5f:90:c7:57:c3:87:2e:
                    99:03:03:25:50:ef:9e:8e:24:5f:ee:e0:28:28:4e:
                    00:2b:50:06:f3:07:34:f7:d2:ca:35:ef:21:b9:69:
                    f9:0c:04:94:7b:5c:b7:2d:61:50:1f:a3:10:85:21:
                    51:2d:01:8e:48:4c:fb:be:ac:f4:9f:92:f9:03:55:
                    8e:19:4b:d9:af:42:f5:32:ef:27:34:3e:e4:76:ff:
                    a6:48:97:10:97:f5:9f:dc:c0:a1:bb:89:cd:37:ae:
                    2e:92:62:dc:4f:d6:5c:cf:01:18:a6:84:e0:e7:1d:
                    2c:4c:b1:d5:7a:e1:78:da:70:86:5e:6e:0b:69:4e:
                    67:1f:fd:ab:e3:a6:28:77:26:21:b9:12:e7:51:2c:
                    14:98:37:3d:97:c6:bd:1d:83:ce:cb:69:75:6e:2a:
                    7d:ac:55:2d:92:74:f5:bd:51:7d:8c:42:a3:eb:19:
                    7a:9c:55:bb:52:fc:a7:85:22:43:c6:61:26:3e:de:
                    4c:2f:f9:d3:33:df:b5:07:38:b2:ad:93:81:f0:e7:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:42:68:30:8D:DA:DC:3C:2D:41:DA:7B:2D:A1:1C:CB:97:AE:08
            X509v3 Authority Key Identifier:
                keyid:63:0B:DC:74:8C:0C:3B:8F:10:51:E4:DD:84:92:46:14:89:6B:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/630BDC748C0C3B8F1051E4DD84924614896BFA07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/1/3139302e35322e37382e302f32342d3234203d3e20323636313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:28:e3:67:4b:25:9e:92:cb:aa:b2:3c:87:53:f0:fc:e7:bc:
         5f:f5:02:e6:b5:cc:cc:b1:ca:4f:92:e0:a3:a5:4e:5c:f6:ad:
         00:d1:90:19:b6:a3:fc:06:3b:a6:16:bc:b7:7d:6a:e9:75:1a:
         3f:3c:e6:47:da:e4:ed:16:bf:fe:1a:80:3d:7d:80:93:a8:1a:
         e0:a6:d4:ef:fa:27:52:d1:82:b3:f1:2f:60:64:e4:e2:d3:6e:
         d3:02:98:1b:68:1a:89:63:2f:bb:ef:bc:af:61:99:51:6b:38:
         2b:5e:c3:f9:3d:27:4a:fa:08:06:75:6f:41:87:bb:7d:85:09:
         e0:90:2a:16:1c:48:a9:06:f2:9b:c0:fd:3e:4e:bf:3d:ab:86:
         dc:ed:eb:29:cd:4f:43:e6:a5:b6:14:47:49:5c:1f:61:39:5a:
         4d:00:fd:bd:08:db:e3:6c:c2:e3:7e:f8:1c:a9:f0:8f:af:8f:
         bb:5f:8d:9b:2c:d6:8d:24:31:f0:31:93:50:48:c5:39:cc:e5:
         fd:e9:df:53:fb:c3:a6:17:b0:aa:de:3e:7a:99:9f:34:83:5f:
         ff:02:bb:dd:47:ea:17:68:87:23:69:20:8c:c0:0d:ff:89:cd:
         b8:54:76:8d:c8:70:d1:86:01:b8:4c:9f:ef:71:9e:d3:ee:d4:
         d5:36:de:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBQG1gIpfOm8NHZ4AL1jLrkw5Px4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMwQkRDNzQ4QzBDM0I4RjEwNTFFNEREODQ5MjQ2MTQ4
OTZCRkEwNzAeFw0yNDA0MDQyMDUwNDdaFw0yNTA0MDMyMDU1NDdaMDMxMTAvBgNV
BAMTKDE4MzA0MjY4MzA4RERBREMzQzJENDFEQTdCMkRBMTFDQ0I5N0FFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLXufHEybEbtfFmlFYPTCXbQ+
p0/wU+xnvKumuk9EypnDKeAevC9AiSdcVe/lwwV06aN6X5DHV8OHLpkDAyVQ756O
JF/u4CgoTgArUAbzBzT30so17yG5afkMBJR7XLctYVAfoxCFIVEtAY5ITPu+rPSf
kvkDVY4ZS9mvQvUy7yc0PuR2/6ZIlxCX9Z/cwKG7ic03ri6SYtxP1lzPARimhODn
HSxMsdV64XjacIZebgtpTmcf/avjpih3JiG5EudRLBSYNz2Xxr0dg87LaXVuKn2s
VS2SdPW9UX2MQqPrGXqcVbtS/KeFIkPGYSY+3kwv+dMz37UHOLKtk4Hw5xL3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGDBCaDCN2tw8LUHaey2hHMuXrggwHwYDVR0j
BBgwFoAUYwvcdIwMO48QUeTdhJJGFIlr+gcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNjYnUxRnRjTUNqSEJ1bzVoQ285RFBDYUhYZFgxV2NSMVhXelZwdW5S
VjMvMS82MzBCREM3NDhDMEMzQjhGMTA1MUU0REQ4NDkyNDYxNDg5NkJGQTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzMEJEQzc0OEMwQzNCOEYx
MDUxRTRERDg0OTI0NjE0ODk2QkZBMDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzY2J1MUZ0Y01DakhCdW81aENvOURQQ2FIWGRYMVdjUjFYV3pWcHVuUlYzLzEv
MzEzOTMwMmUzNTMyMmUzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvjROMA0GCSqGSIb3DQEBCwUAA4IBAQCSKONnSyWe
ksuqsjyHU/D857xf9QLmtczMscpPkuCjpU5c9q0A0ZAZtqP8BjumFry3fWrpdRo/
POZH2uTtFr/+GoA9fYCTqBrgptTv+idS0YKz8S9gZOTi027TApgbaBqJYy+777yv
YZlRazgrXsP5PSdK+ggGdW9Bh7t9hQngkCoWHEipBvKbwP0+Tr89q4bc7espzU9D
5qW2FEdJXB9hOVpNAP29CNvjbMLjfvgcqfCPr4+7X42bLNaNJDHwMZNQSMU5zOX9
6d9T+8OmF7Cq3j56mZ80g1//ArvdR+oXaIcjaSCMwA3/ic24VHaNyHDRhgG4TJ/v
cZ7T7tTVNt4U
-----END CERTIFICATE-----
Generated at Wed Jun 12 13:31:48 2024 by rpki-client on console-fra.rpki-client.org