Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa
File:                     3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa (raw, json)
Hash identifier:          2BBBYOK1WSNVJ7U2z0TdspIIgDmArzhZzDuqiSZ+s2k=
Subject key identifier:   6B:AE:12:84:E8:37:37:B3:BE:33:E0:C3:20:2F:36:9B:17:95:E6:71
Certificate issuer:       /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial:       3F121C60C16D0FDD061AF147B2459DC524F477C5
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa
Signing time:             Wed 04 Sep 2024 22:46:13 +0000
ROA not before:           Wed 04 Sep 2024 22:41:13 +0000
ROA not after:            Wed 03 Sep 2025 22:46:13 +0000
asID:                     52944
IP address blocks:        168.205.154.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:12:1c:60:c1:6d:0f:dd:06:1a:f1:47:b2:45:9d:c5:24:f4:77:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
        Validity
            Not Before: Sep  4 22:41:13 2024 GMT
            Not After : Sep  3 22:46:13 2025 GMT
        Subject: CN=6BAE1284E83737B3BE33E0C3202F369B1795E671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:96:d5:02:4c:7e:df:2b:ff:b1:c5:fd:df:
                    7c:8d:2c:82:41:5a:69:4c:51:50:84:43:3a:9a:58:
                    e7:be:4d:65:eb:65:d9:34:0f:fc:f9:fc:a3:7e:79:
                    76:5e:99:5c:1f:58:fa:59:8f:94:a0:f3:c5:7c:59:
                    a9:db:2c:dd:84:c3:b2:7f:f5:0b:6a:eb:ff:a4:4e:
                    f6:76:b7:02:cc:6f:9a:f2:09:01:be:5a:55:c1:44:
                    d0:59:85:74:4e:ca:16:a7:63:f7:bf:3d:e5:7c:0e:
                    f7:9c:5d:3f:bb:02:c8:b0:6f:a3:df:50:c0:9c:b7:
                    32:38:b1:6c:1b:6c:db:68:7b:59:b9:06:17:33:b9:
                    d4:53:b7:3f:00:28:8a:b0:20:c4:9e:ef:7c:ea:60:
                    b0:cd:8b:64:b7:b3:37:bf:2f:2d:57:ec:2d:c9:91:
                    b2:18:8a:8a:5e:48:9a:95:c3:72:39:de:2a:4e:73:
                    25:8e:10:0d:55:90:75:3d:6e:a7:16:c3:a1:0a:6d:
                    f3:d3:f1:e2:74:44:ca:67:34:4f:72:44:eb:43:e5:
                    f0:2f:83:bb:f7:69:a2:62:61:84:5b:27:74:3c:0a:
                    7a:69:e5:95:a4:2d:9e:a8:8e:6e:a4:ee:d5:7b:66:
                    2e:2d:b5:f8:cb:91:73:e2:50:67:01:4a:16:84:d5:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AE:12:84:E8:37:37:B3:BE:33:E0:C3:20:2F:36:9B:17:95:E6:71
            X509v3 Authority Key Identifier:
                keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/3136382e3230352e3135342e302f32332d3233203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b8:d2:f2:49:a1:c2:16:c3:e8:c6:68:ab:1d:be:53:c6:12:
         20:3e:a6:92:6d:6e:21:d6:60:dc:f3:81:2c:7e:04:6c:6a:a1:
         3c:aa:56:92:72:27:3c:46:5b:e9:06:3f:56:00:bd:bd:40:4a:
         82:09:90:61:ae:ae:c1:01:e9:5f:f8:d4:d7:65:b6:f0:32:dc:
         ad:9e:42:d5:98:43:bf:91:21:3a:68:d6:53:7c:1b:dc:ba:b3:
         e4:64:ba:79:d0:a5:f4:16:95:0b:a6:16:0e:90:25:b3:88:22:
         9b:05:25:f2:01:47:ae:c8:95:e3:d7:e4:5e:2f:a9:26:4d:41:
         d2:7e:8f:51:fd:59:be:d5:d4:2e:7b:91:1a:ef:29:af:46:0e:
         d1:df:2d:fe:f3:90:6d:30:3f:e4:e3:7d:d8:4a:e5:1a:d1:e1:
         9d:a9:1c:57:a2:af:b8:5d:fe:43:35:67:89:ec:7f:65:e8:ab:
         62:c5:f1:fd:63:9d:59:1f:cf:76:d6:ee:26:4d:d4:40:79:f7:
         b2:c3:7f:37:da:d0:5f:6d:47:b5:8f:68:0b:a4:a1:1c:36:42:
         05:a6:49:ba:6e:1e:d5:ba:a8:42:ca:9c:bf:51:aa:a1:82:e0:
         b9:f2:9b:c6:ef:33:d8:f2:3e:eb:ed:ca:74:de:ad:b9:1d:28:
         10:a0:d8:81
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPxIcYMFtD90GGvFHskWdxST0d8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTczMzA4NDgxNkYxODFEQURFNjZDRkYwMDZFOTZEREY4
NTNEODIxODAeFw0yNDA5MDQyMjQxMTNaFw0yNTA5MDMyMjQ2MTNaMDMxMTAvBgNV
BAMTKDZCQUUxMjg0RTgzNzM3QjNCRTMzRTBDMzIwMkYzNjlCMTc5NUU2NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyJbVAkx+3yv/scX933yNLIJB
WmlMUVCEQzqaWOe+TWXrZdk0D/z5/KN+eXZemVwfWPpZj5Sg88V8WanbLN2Ew7J/
9Qtq6/+kTvZ2twLMb5ryCQG+WlXBRNBZhXROyhanY/e/PeV8DvecXT+7Asiwb6Pf
UMCctzI4sWwbbNtoe1m5BhczudRTtz8AKIqwIMSe73zqYLDNi2S3sze/Ly1X7C3J
kbIYiopeSJqVw3I53ipOcyWOEA1VkHU9bqcWw6EKbfPT8eJ0RMpnNE9yROtD5fAv
g7v3aaJiYYRbJ3Q8Cnpp5ZWkLZ6ojm6k7tV7Zi4ttfjLkXPiUGcBShaE1T5jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa64ShOg3N7O+M+DDIC82mxeV5nEwHwYDVR0j
BBgwFoAUFzMISBbxgdreZs/wBult34U9ghgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFZ1TnNhTGphYTJYVGJRa3JiWmlnam5WeXM3UVpkQVRNUGlHamlyQVNX
ZmovMC8xNzMzMDg0ODE2RjE4MURBREU2NkNGRjAwNkU5NkRERjg1M0Q4MjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3MzMwODQ4MTZGMTgxREFE
RTY2Q0ZGMDA2RTk2RERGODUzRDgyMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RWdU5zYUxqYWEyWFRiUWtyYlppZ2puVnlzN1FaZEFUTVBpR2ppckFTV2ZqLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzOTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGozZowDQYJKoZIhvcNAQELBQADggEBAG+40vJJ
ocIWw+jGaKsdvlPGEiA+ppJtbiHWYNzzgSx+BGxqoTyqVpJyJzxGW+kGP1YAvb1A
SoIJkGGursEB6V/41NdltvAy3K2eQtWYQ7+RITpo1lN8G9y6s+RkunnQpfQWlQum
Fg6QJbOIIpsFJfIBR67IlePX5F4vqSZNQdJ+j1H9Wb7V1C57kRrvKa9GDtHfLf7z
kG0wP+TjfdhK5RrR4Z2pHFeir7hd/kM1Z4nsf2Xoq2LF8f1jnVkfz3bW7iZN1EB5
97LDfzfa0F9tR7WPaAukoRw2QgWmSbpuHtW6qELKnL9RqqGC4Lnym8bvM9jyPuvt
ynTerbkdKBCg2IE=
-----END CERTIFICATE-----
Generated at Sun Sep 22 22:34:30 2024 by rpki-client on console-fra.rpki-client.org