Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33382e302f32342d3234203d3e20323636333234.roa
File:                     3137302e3233382e33382e302f32342d3234203d3e20323636333234.roa (raw, json)
Hash identifier:          yfqKGZvYHE1QKD2t5/cpfq996dhXSvNBpYnITVyWYj0=
Subject key identifier:   E4:FE:DE:06:09:6D:EB:33:98:CC:A8:AF:1C:FB:73:EC:48:A2:DD:DD
Certificate issuer:       /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial:       11FF54A48F41AC595BAC53D8B46368F8983565F7
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33382e302f32342d3234203d3e20323636333234.roa
Signing time:             Wed 19 Jun 2024 18:14:14 +0000
ROA not before:           Wed 19 Jun 2024 18:09:14 +0000
ROA not after:            Wed 18 Jun 2025 18:14:14 +0000
asID:                     266324
IP address blocks:        170.238.38.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ff:54:a4:8f:41:ac:59:5b:ac:53:d8:b4:63:68:f8:98:35:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
        Validity
            Not Before: Jun 19 18:09:14 2024 GMT
            Not After : Jun 18 18:14:14 2025 GMT
        Subject: CN=E4FEDE06096DEB3398CCA8AF1CFB73EC48A2DDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:7e:29:4e:5e:62:74:2e:81:fa:25:e1:fc:
                    d6:ef:24:66:db:cb:a8:e4:c1:36:79:bb:c1:d4:10:
                    c5:5e:c5:f8:27:13:43:5b:84:68:24:ea:99:bb:a2:
                    00:c2:e0:4d:41:67:fc:69:0f:cc:4b:2e:9d:26:98:
                    75:84:88:f1:5a:22:f3:8c:de:06:78:fd:84:9c:1a:
                    8c:e1:de:07:dd:5b:ce:69:ba:f7:e7:b5:a2:4c:8c:
                    8d:5e:48:f5:73:c6:76:01:df:ff:dc:a2:37:f7:f3:
                    0b:50:a6:50:c1:eb:a2:e5:a7:91:13:bf:47:18:2b:
                    2d:45:c8:93:74:d9:8d:f8:fd:aa:85:bb:6b:6a:0c:
                    1d:94:26:54:df:33:f5:87:4e:ac:7f:dc:f7:49:5d:
                    16:22:c6:90:51:77:74:c0:9c:bf:55:03:91:f6:3a:
                    38:dc:ea:66:95:c3:2d:6f:9f:e2:7c:df:56:2e:91:
                    71:7b:36:eb:da:af:7f:c2:c6:3d:cc:3c:77:59:4d:
                    51:53:38:c3:e5:ca:4f:fb:58:dc:f5:70:de:f4:63:
                    d7:b5:eb:39:0f:fb:64:1d:3d:8e:95:65:ce:db:7f:
                    9e:f3:60:ce:f4:e3:73:f4:b5:90:87:08:7e:8f:62:
                    d5:b7:cd:6a:1b:4e:97:b6:27:fb:a2:59:77:59:33:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FE:DE:06:09:6D:EB:33:98:CC:A8:AF:1C:FB:73:EC:48:A2:DD:DD
            X509v3 Authority Key Identifier:
                keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/3137302e3233382e33382e302f32342d3234203d3e20323636333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d9:8e:58:8f:d4:9d:b5:27:da:56:28:28:ec:ed:4b:bb:d8:
         47:a3:0b:cf:32:78:fe:16:77:1f:89:42:4f:40:3c:40:e2:1b:
         03:f7:c7:7b:90:be:33:cb:76:dd:d0:5a:55:a9:96:b3:9b:1c:
         2c:b7:0e:17:87:90:77:ac:60:68:78:c7:5e:dc:a2:98:8a:ea:
         48:21:99:45:d1:ee:47:b6:57:57:de:b7:f8:80:6a:e9:8f:d9:
         42:4d:21:58:90:b3:6b:39:f8:f8:08:ac:25:31:66:73:06:e4:
         bd:36:93:bc:8a:1a:2b:56:b0:dd:de:7d:2e:87:3e:e5:1b:d0:
         57:47:76:61:4c:c4:33:6f:62:1d:73:96:26:0b:7f:01:a0:99:
         fd:a4:4d:04:80:2b:f5:4a:fb:11:f5:f1:f4:ab:24:3c:a7:c7:
         38:f2:33:f2:d1:7c:32:8d:78:9c:05:03:0a:cf:1c:1f:68:26:
         d6:bc:7e:af:cd:39:94:11:be:19:45:14:1c:3a:4a:7a:e9:8f:
         79:f3:01:ad:d1:cd:3b:7a:ab:1a:bf:39:e8:16:6e:b8:50:30:
         16:3a:db:d9:35:2a:1a:69:47:96:b7:2b:89:7b:00:35:5d:e6:
         11:8b:74:6d:1c:48:1c:17:5f:00:65:53:60:eb:40:c4:12:95:
         50:7c:19:eb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEf9UpI9BrFlbrFPYtGNo+Jg1ZfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1RjNENTJERDhDMjcyQ0M2NDQ5MkE3NjIxQUU1NTFF
MDg0QTAxOTAeFw0yNDA2MTkxODA5MTRaFw0yNTA2MTgxODE0MTRaMDMxMTAvBgNV
BAMTKEU0RkVERTA2MDk2REVCMzM5OENDQThBRjFDRkI3M0VDNDhBMkREREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmOH4pTl5idC6B+iXh/NbvJGbb
y6jkwTZ5u8HUEMVexfgnE0NbhGgk6pm7ogDC4E1BZ/xpD8xLLp0mmHWEiPFaIvOM
3gZ4/YScGozh3gfdW85puvfntaJMjI1eSPVzxnYB3//cojf38wtQplDB66Llp5ET
v0cYKy1FyJN02Y34/aqFu2tqDB2UJlTfM/WHTqx/3PdJXRYixpBRd3TAnL9VA5H2
Ojjc6maVwy1vn+J831YukXF7Nuvar3/Cxj3MPHdZTVFTOMPlyk/7WNz1cN70Y9e1
6zkP+2QdPY6VZc7bf57zYM7043P0tZCHCH6PYtW3zWobTpe2J/uiWXdZM8ifAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5P7eBglt6zOYzKivHPtz7Eii3d0wHwYDVR0j
BBgwFoAU4l89Ut2MJyzGRJKnYhrlUeCEoBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC9FMjVGM0Q1MkREOEMyNzJDQzY0NDkyQTc2MjFBRTU1MUUwODRBMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNUYzRDUyREQ4QzI3MkND
NjQ0OTJBNzYyMUFFNTUxRTA4NEEwMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzEzNzMwMmUzMjMzMzgyZTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq7iYwDQYJKoZIhvcNAQELBQADggEBAKzZjliP
1J21J9pWKCjs7Uu72EejC88yeP4Wdx+JQk9APEDiGwP3x3uQvjPLdt3QWlWplrOb
HCy3DheHkHesYGh4x17copiK6kghmUXR7ke2V1fet/iAaumP2UJNIViQs2s5+PgI
rCUxZnMG5L02k7yKGitWsN3efS6HPuUb0FdHdmFMxDNvYh1zliYLfwGgmf2kTQSA
K/VK+xH18fSrJDynxzjyM/LRfDKNeJwFAwrPHB9oJta8fq/NOZQRvhlFFBw6Snrp
j3nzAa3RzTt6qxq/OegWbrhQMBY629k1KhppR5a3K4l7ADVd5hGLdG0cSBwXXwBl
U2DrQMQSlVB8Ges=
-----END CERTIFICATE-----
Generated at Thu Jun 27 00:22:47 2024 by rpki-client on console-ams.rpki-client.org