Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139382e302f32342d3234203d3e20323633353538.roa
File:                     3134332e3235352e3139382e302f32342d3234203d3e20323633353538.roa (raw, json)
Hash identifier:          EyRZzcrmDRssVlZmk3YluCZ+l8qgGlrGBCwmRkiz8kg=
Subject key identifier:   30:59:48:77:03:F7:18:71:98:F9:B7:14:65:46:65:F5:EA:0A:D2:4A
Certificate issuer:       /CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
Certificate serial:       626FD5405D704D4EE8B30E9C79AFF9F34AC8313D
Authority key identifier: A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139382e302f32342d3234203d3e20323633353538.roa
Signing time:             Thu 04 Apr 2024 08:00:24 +0000
ROA not before:           Thu 04 Apr 2024 07:55:24 +0000
ROA not after:            Thu 03 Apr 2025 08:00:24 +0000
asID:                     263558
IP address blocks:        143.255.198.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:d5:40:5d:70:4d:4e:e8:b3:0e:9c:79:af:f9:f3:4a:c8:31:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A906EE3A1971BDCA885697AA0F14019A18D54DAF
        Validity
            Not Before: Apr  4 07:55:24 2024 GMT
            Not After : Apr  3 08:00:24 2025 GMT
        Subject: CN=3059487703F7187198F9B714654665F5EA0AD24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:7e:f2:b9:a1:2a:4c:d6:e8:f0:94:fb:63:
                    9a:ad:95:67:8d:6c:58:3a:38:4b:65:2f:fe:c7:ac:
                    45:6b:e9:2c:1d:4d:ef:84:91:66:c9:7e:4b:de:b7:
                    17:f0:4c:a6:e0:72:ae:b1:23:b5:23:90:b1:2c:ab:
                    fe:05:e3:cb:5f:d2:f3:ed:e7:5f:fc:85:96:05:df:
                    b0:d5:a5:0c:f7:a1:93:f4:b1:f3:d9:22:eb:05:83:
                    6e:66:6b:fc:5b:bb:d9:0e:b4:f9:24:57:71:c9:1c:
                    66:db:d1:1f:c8:1c:b3:02:89:52:91:7f:e8:7a:2a:
                    b7:b4:8b:c5:2e:da:d1:cb:ea:0a:42:f6:2e:6c:f6:
                    03:17:aa:fb:20:d5:99:30:dc:e1:13:85:44:50:67:
                    9c:ea:e7:84:0b:f8:2e:4f:43:15:76:8b:27:20:ae:
                    0f:53:8d:67:04:6b:af:eb:02:fd:0f:4f:2c:ef:77:
                    2d:03:0f:12:00:3a:d4:77:98:ea:63:65:09:10:55:
                    73:72:1e:fc:e9:bb:92:ca:e3:53:39:ad:a5:ef:dc:
                    42:a3:c2:4f:89:14:eb:e5:53:5a:e4:91:51:5e:57:
                    b8:f4:8c:95:0b:d7:7d:9c:9f:27:80:32:ce:d6:54:
                    58:3d:e3:e1:f9:43:ce:e6:a7:bd:cb:42:5b:da:90:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:59:48:77:03:F7:18:71:98:F9:B7:14:65:46:65:F5:EA:0A:D2:4A
            X509v3 Authority Key Identifier:
                keyid:A9:06:EE:3A:19:71:BD:CA:88:56:97:AA:0F:14:01:9A:18:D5:4D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A906EE3A1971BDCA885697AA0F14019A18D54DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DADXqQmpxEshCfS56hYCX5TuGfFZhc7RzW8C6Y9zumag/1/3134332e3235352e3139382e302f32342d3234203d3e20323633353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:a7:92:cc:f5:73:41:1c:66:a5:8a:af:e6:66:fc:56:72:
         6e:6f:ba:c7:55:e8:c5:9b:66:41:ef:49:fd:f1:fe:e5:f1:f7:
         da:32:0b:57:99:57:1a:9d:22:33:81:29:75:b2:bc:bd:a3:0d:
         48:68:cf:28:2b:8f:29:52:78:59:42:39:18:97:6b:d6:b3:87:
         b3:6b:c4:51:8f:3b:5f:ee:f3:e6:64:99:77:50:bc:78:c6:c9:
         ea:fc:db:5e:70:de:be:de:55:77:42:8f:b6:39:61:09:ad:a0:
         8e:73:4c:b3:a4:bc:fd:6a:aa:a1:37:8d:0a:73:b1:03:d7:38:
         74:bf:53:97:a3:5d:bc:f5:2a:50:55:65:bb:4f:59:a1:5b:6f:
         36:fa:1e:35:41:98:a9:7a:9e:35:72:df:a0:5e:e4:e5:6f:dc:
         e5:82:06:76:e1:a8:1a:77:37:ae:d5:d9:55:f9:aa:fd:cd:ff:
         56:72:a2:5e:71:e9:c9:74:5c:dd:2d:cf:cc:8e:0c:12:f6:5b:
         0b:a6:97:8c:ae:5c:e8:03:15:c9:4e:8f:d7:aa:2f:dc:96:f3:
         57:b8:61:29:07:ec:92:a7:1a:7c:a5:e8:9f:81:b7:ab:72:b2:
         76:28:a9:97:95:36:a4:65:e4:68:c8:39:92:38:7b:65:31:7f:
         87:4a:f9:aa
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYm/VQF1wTU7osw6cea/580rIMT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkwNkVFM0ExOTcxQkRDQTg4NTY5N0FBMEYxNDAxOUEx
OEQ1NERBRjAeFw0yNDA0MDQwNzU1MjRaFw0yNTA0MDMwODAwMjRaMDMxMTAvBgNV
BAMTKDMwNTk0ODc3MDNGNzE4NzE5OEY5QjcxNDY1NDY2NUY1RUEwQUQyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+C37yuaEqTNbo8JT7Y5qtlWeN
bFg6OEtlL/7HrEVr6SwdTe+EkWbJfkvetxfwTKbgcq6xI7UjkLEsq/4F48tf0vPt
51/8hZYF37DVpQz3oZP0sfPZIusFg25ma/xbu9kOtPkkV3HJHGbb0R/IHLMCiVKR
f+h6Kre0i8Uu2tHL6gpC9i5s9gMXqvsg1Zkw3OEThURQZ5zq54QL+C5PQxV2iycg
rg9TjWcEa6/rAv0PTyzvdy0DDxIAOtR3mOpjZQkQVXNyHvzpu5LK41M5raXv3EKj
wk+JFOvlU1rkkVFeV7j0jJUL132cnyeAMs7WVFg94+H5Q87mp73LQlvakDePAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUMFlIdwP3GHGY+bcUZUZl9eoK0kowHwYDVR0j
BBgwFoAUqQbuOhlxvcqIVpeqDxQBmhjVTa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFEWHFRbXB4RXNoQ2ZTNTZoWUNYNVR1R2ZGWmhjN1J6VzhDNlk5enVt
YWcvMS9BOTA2RUUzQTE5NzFCRENBODg1Njk3QUEwRjE0MDE5QTE4RDU0REFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MDZFRTNBMTk3MUJEQ0E4
ODU2OTdBQTBGMTQwMTlBMThENTREQUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBRFhxUW1weEVzaENmUzU2aFlDWDVUdUdmRlpoYzdSelc4QzZZOXp1bWFnLzEv
MzEzNDMzMmUzMjM1MzUyZTMxMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI//xjANBgkqhkiG9w0BAQsFAAOCAQEApWCn
ksz1c0EcZqWKr+Zm/FZybm+6x1XoxZtmQe9J/fH+5fH32jILV5lXGp0iM4EpdbK8
vaMNSGjPKCuPKVJ4WUI5GJdr1rOHs2vEUY87X+7z5mSZd1C8eMbJ6vzbXnDevt5V
d0KPtjlhCa2gjnNMs6S8/WqqoTeNCnOxA9c4dL9Tl6NdvPUqUFVlu09ZoVtvNvoe
NUGYqXqeNXLfoF7k5W/c5YIGduGoGnc3rtXZVfmq/c3/VnKiXnHpyXRc3S3PzI4M
EvZbC6aXjK5c6AMVyU6P16ov3JbzV7hhKQfskqcafKXon4G3q3Kydiipl5U2pGXk
aMg5kjh7ZTF/h0r5qg==
-----END CERTIFICATE-----
Generated at Tue Oct 1 22:05:17 2024 by rpki-client on console-ams.rpki-client.org