Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
File:                     3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          IuXxo1W2wFTxQOTwGr/aSkl7U/NOOt5tgaA/sIMO/Xo=
Subject key identifier:   9D:C6:7E:6A:F2:FB:57:08:13:FD:F3:2E:0D:13:3C:85:B5:4B:83:89
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       0A32C1B51370E2608C8F75C033751DE1AC45BF98
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:10:26 +0000
ROA not before:           Fri 03 May 2024 20:05:26 +0000
ROA not after:            Fri 02 May 2025 20:10:26 +0000
asID:                     28667
IP address blocks:        187.110.240.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:32:c1:b5:13:70:e2:60:8c:8f:75:c0:33:75:1d:e1:ac:45:bf:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:05:26 2024 GMT
            Not After : May  2 20:10:26 2025 GMT
        Subject: CN=9DC67E6AF2FB570813FDF32E0D133C85B54B8389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:43:16:79:01:b5:05:73:b9:3a:d4:1d:07:
                    72:dd:e6:bb:53:94:17:6d:cd:d6:e9:c7:ae:9a:ae:
                    03:76:3a:40:a2:14:ac:10:41:20:db:79:ae:e0:ba:
                    dc:4a:57:c2:b0:60:a2:89:bc:13:97:2f:4f:39:09:
                    fb:93:dd:a9:5a:fe:d2:8c:6f:d3:78:f6:e9:81:c1:
                    86:41:5f:15:fa:a3:ff:1b:b1:ed:c2:05:cb:1e:90:
                    4d:26:43:44:ab:05:23:99:26:c4:bb:ce:ba:7b:2c:
                    52:a1:4b:0c:39:73:26:11:7e:28:ee:71:9c:ed:78:
                    ee:fd:c4:3e:37:15:28:22:ad:0e:a3:4c:81:8b:69:
                    f6:ba:31:61:0e:6d:44:e2:7c:4b:a9:64:25:5e:58:
                    a9:e2:18:b9:ea:d4:9e:7b:e3:c0:4d:67:44:54:fd:
                    22:cd:19:0c:68:5c:e9:b1:e7:92:0d:ef:33:d9:10:
                    70:10:b5:e0:2e:b6:9d:7c:5d:13:4a:99:5f:e6:54:
                    77:07:37:b1:5f:58:93:18:5b:55:aa:7c:5f:dd:9a:
                    3a:2d:51:e7:79:f1:d2:44:3f:67:4f:ac:13:96:99:
                    30:a0:bd:df:d5:a1:8c:c5:72:32:ee:01:4e:25:9d:
                    71:37:57:07:a4:89:9d:8b:c8:30:64:5f:09:2a:de:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:7E:6A:F2:FB:57:08:13:FD:F3:2E:0D:13:3C:85:B5:4B:83:89
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138372e3131302e3234302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:f8:92:1b:83:6a:65:ed:87:be:b1:f1:ac:81:5c:f2:97:
         d5:88:18:94:ec:cb:0b:a3:46:d3:95:d9:de:e0:93:56:ac:e5:
         2c:88:d1:fd:27:f1:a8:a7:0f:65:7b:56:90:43:53:8e:37:ae:
         19:6e:06:54:b6:2a:49:9a:2e:8a:bc:8f:51:54:0c:90:a2:06:
         bd:8d:7b:7f:da:3b:92:3c:d4:66:5d:2a:16:bf:d8:99:3f:cc:
         05:fd:e7:cf:a2:a6:c3:da:f2:27:d9:4c:35:88:c7:41:50:c6:
         74:4e:b0:53:5c:f0:cd:58:5a:93:cb:2a:54:bf:b4:e0:94:5c:
         8c:e3:42:6f:52:fd:53:a4:fd:39:4d:82:d7:32:9f:d6:10:48:
         c9:19:09:71:f9:98:72:9d:b6:4e:79:8b:a2:73:71:5a:40:76:
         0f:b6:7c:35:65:92:18:17:4b:57:c2:df:06:b4:bc:3c:38:f8:
         42:97:6a:9d:bf:77:a4:32:58:70:33:25:b0:27:9c:f1:b9:74:
         ea:5b:02:ca:33:b1:62:27:ef:4a:17:4e:7f:2f:a5:5f:fa:0b:
         14:df:e1:e4:6c:57:7d:a9:08:14:bf:8d:1b:e5:b9:45:59:d3:
         7c:e6:9d:f4:f3:e4:ca:45:97:5d:4f:5e:35:b3:74:ae:34:ca:
         ce:8b:33:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCjLBtRNw4mCMj3XAM3Ud4axFv5gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUMwQjRGRTI4RTBCQjhERkNCMzJGRjI3RkQ3NEVFREVG
MzYzNDJEMzAeFw0yNDA1MDMyMDA1MjZaFw0yNTA1MDIyMDEwMjZaMDMxMTAvBgNV
BAMTKDlEQzY3RTZBRjJGQjU3MDgxM0ZERjMyRTBEMTMzQzg1QjU0QjgzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhDkMWeQG1BXO5OtQdB3Ld5rtT
lBdtzdbpx66argN2OkCiFKwQQSDbea7gutxKV8KwYKKJvBOXL085CfuT3ala/tKM
b9N49umBwYZBXxX6o/8bse3CBcsekE0mQ0SrBSOZJsS7zrp7LFKhSww5cyYRfiju
cZzteO79xD43FSgirQ6jTIGLafa6MWEObUTifEupZCVeWKniGLnq1J5748BNZ0RU
/SLNGQxoXOmx55IN7zPZEHAQteAutp18XRNKmV/mVHcHN7FfWJMYW1WqfF/dmjot
Ued58dJEP2dPrBOWmTCgvd/VoYzFcjLuAU4lnXE3VwekiZ2LyDBkXwkq3sdfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUncZ+avL7VwgT/fMuDRM8hbVLg4kwHwYDVR0j
BBgwFoAUnAtP4o4LuN/LMv8n/XTu3vNjQtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMC85QzBCNEZFMjhFMEJCOERGQ0IzMkZGMjdGRDc0RUVERUYzNjM0MkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlDMEI0RkUyOEUwQkI4REZD
QjMyRkYyN0ZENzRFRURFRjM2MzQyRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzAv
MzEzODM3MmUzMTMxMzAyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7bvAwDQYJKoZIhvcNAQELBQADggEBAKWk+JIb
g2pl7Ye+sfGsgVzyl9WIGJTsywujRtOV2d7gk1as5SyI0f0n8ainD2V7VpBDU443
rhluBlS2KkmaLoq8j1FUDJCiBr2Ne3/aO5I81GZdKha/2Jk/zAX958+ipsPa8ifZ
TDWIx0FQxnROsFNc8M1YWpPLKlS/tOCUXIzjQm9S/VOk/TlNgtcyn9YQSMkZCXH5
mHKdtk55i6JzcVpAdg+2fDVlkhgXS1fC3wa0vDw4+EKXap2/d6QyWHAzJbAnnPG5
dOpbAsozsWIn70oXTn8vpV/6CxTf4eRsV32pCBS/jRvluUVZ03zmnfTz5MpFl11P
XjWzdK40ys6LM14=
-----END CERTIFICATE-----
Generated at Thu May 30 10:55:50 2024 by rpki-client on console-fra.rpki-client.org