Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa
File:                     3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa (raw, json)
Hash identifier:          mSLxvzcn+TIxqF2j3qbASGQMx2fg1kB1HDBXGfDPdjs=
Subject key identifier:   F7:83:34:87:9F:7C:4B:81:16:4B:05:E9:70:38:E7:40:5F:EF:8A:C3
Certificate issuer:       /CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
Certificate serial:       687446931D12000B063FD291FF231832FB88DD4A
Authority key identifier: 88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa
Signing time:             Thu 04 Apr 2024 06:55:13 +0000
ROA not before:           Thu 04 Apr 2024 06:50:13 +0000
ROA not after:            Thu 03 Apr 2025 06:55:13 +0000
asID:                     263459
IP address blocks:        177.190.168.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:74:46:93:1d:12:00:0b:06:3f:d2:91:ff:23:18:32:fb:88:dd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885913EDC9ED5005A646E7D37295CF2B9B9037F9
        Validity
            Not Before: Apr  4 06:50:13 2024 GMT
            Not After : Apr  3 06:55:13 2025 GMT
        Subject: CN=F78334879F7C4B81164B05E97038E7405FEF8AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:cc:61:b9:5c:67:47:64:1b:d9:ca:55:c0:
                    5a:65:1e:36:59:4b:5e:22:ea:70:44:7f:5e:c9:b2:
                    c6:df:dc:be:50:ad:ef:59:ae:4b:67:a6:52:46:bf:
                    07:fc:7e:bb:0e:11:b5:f5:73:36:cd:9a:f6:ae:bb:
                    68:b1:78:27:98:3f:a6:42:d4:ca:e0:7f:42:36:30:
                    d3:e9:4f:22:2f:1b:9a:30:3e:95:0e:5c:3d:03:ef:
                    7b:ed:a4:5a:31:8e:41:b9:81:82:87:e6:aa:6a:d9:
                    64:b3:36:2f:c8:03:0e:fb:cd:9c:0e:f5:5d:5e:64:
                    c9:6e:08:24:28:5f:55:cf:17:ab:23:6a:48:a8:be:
                    bf:0a:29:61:f3:0e:9f:23:79:2f:65:4f:41:7b:b5:
                    c0:f0:94:fd:4b:22:a8:83:54:0b:94:86:4b:f4:0f:
                    15:ca:39:dc:bb:69:52:ed:ff:5c:77:4c:8b:1f:44:
                    d3:93:9e:5b:56:39:35:4f:81:1c:c3:f8:7a:6c:7c:
                    7e:14:7d:85:c4:0f:2d:79:74:91:cc:82:9f:f2:9b:
                    9d:52:ae:20:64:db:9b:f2:9a:93:fe:95:53:82:5e:
                    5e:be:2f:9f:7e:09:5c:6d:4f:0e:7b:6c:b6:81:60:
                    be:80:59:7b:9c:7d:2c:64:eb:ca:57:be:86:cd:a0:
                    a8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:83:34:87:9F:7C:4B:81:16:4B:05:E9:70:38:E7:40:5F:EF:8A:C3
            X509v3 Authority Key Identifier:
                keyid:88:59:13:ED:C9:ED:50:05:A6:46:E7:D3:72:95:CF:2B:9B:90:37:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/885913EDC9ED5005A646E7D37295CF2B9B9037F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDrmCiioJoLsuZ3LQ7vz7T1tm7B8BtUZBMKSSrghkwKT/1/3137372e3139302e3136382e302f32342d3234203d3e20323633343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:88:52:4f:d2:6b:b5:8a:95:0e:1e:5d:01:c2:9c:55:19:
         71:d6:ff:ca:06:f6:ea:de:cb:27:8c:fd:f6:0c:35:69:1e:68:
         07:50:f3:11:bd:af:05:9e:05:8f:78:29:56:4a:d8:ed:e7:1e:
         01:f2:e7:5a:62:b2:3f:d6:96:c0:c7:65:b8:c3:6e:77:4e:8d:
         2e:13:52:9c:0b:17:f8:dd:79:f0:e1:6a:5e:f5:4a:e7:aa:63:
         f4:dc:7f:62:66:bc:52:4e:65:eb:b0:7c:3a:c5:c3:79:9f:03:
         88:5b:68:fd:cd:d7:25:f3:8c:fc:34:51:5a:b7:7d:79:95:42:
         4e:cb:8a:7a:91:82:b3:af:eb:bd:63:75:64:e7:ee:86:f1:da:
         6a:56:7a:19:c9:4f:af:2e:2e:c4:4d:0e:0e:57:52:c8:68:25:
         ab:2b:fb:cf:a3:4e:0e:15:27:86:71:fe:a4:56:cd:53:c3:d8:
         2d:3a:14:2a:1d:75:1b:44:ff:2d:6c:e8:77:eb:89:20:cb:fd:
         54:f9:78:b2:37:0b:e7:0a:fa:20:ac:f7:4c:5e:60:b5:cd:bc:
         9c:f6:b1:55:73:e4:8d:ca:a3:c9:f8:e8:68:db:a1:99:a6:97:
         94:ed:82:36:4b:d4:4a:21:70:80:1c:fe:8c:99:5a:7f:48:34:
         87:cd:b4:05
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaHRGkx0SAAsGP9KR/yMYMvuI3UowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1OTEzRURDOUVENTAwNUE2NDZFN0QzNzI5NUNGMkI5
QjkwMzdGOTAeFw0yNDA0MDQwNjUwMTNaFw0yNTA0MDMwNjU1MTNaMDMxMTAvBgNV
BAMTKEY3ODMzNDg3OUY3QzRCODExNjRCMDVFOTcwMzhFNzQwNUZFRjhBQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgsxhuVxnR2Qb2cpVwFplHjZZ
S14i6nBEf17Jssbf3L5Qre9ZrktnplJGvwf8frsOEbX1czbNmvauu2ixeCeYP6ZC
1Mrgf0I2MNPpTyIvG5owPpUOXD0D73vtpFoxjkG5gYKH5qpq2WSzNi/IAw77zZwO
9V1eZMluCCQoX1XPF6sjakiovr8KKWHzDp8jeS9lT0F7tcDwlP1LIqiDVAuUhkv0
DxXKOdy7aVLt/1x3TIsfRNOTnltWOTVPgRzD+HpsfH4UfYXEDy15dJHMgp/ym51S
riBk25vympP+lVOCXl6+L59+CVxtTw57bLaBYL6AWXucfSxk68pXvobNoKjbAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU94M0h598S4EWSwXpcDjnQF/visMwHwYDVR0j
BBgwFoAUiFkT7cntUAWmRufTcpXPK5uQN/kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRURybUNpaW9Kb0xzdVozTFE3dno3VDF0bTdCOEJ0VVpCTUtTU3JnaGt3
S1QvMS84ODU5MTNFREM5RUQ1MDA1QTY0NkU3RDM3Mjk1Q0YyQjlCOTAzN0Y5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4NTkxM0VEQzlFRDUwMDVB
NjQ2RTdEMzcyOTVDRjJCOUI5MDM3RjkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEcm1DaWlvSm9Mc3VaM0xRN3Z6N1QxdG03QjhCdFVaQk1LU1NyZ2hrd0tULzEv
MzEzNzM3MmUzMTM5MzAyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+qDANBgkqhkiG9w0BAQsFAAOCAQEADtOI
Uk/Sa7WKlQ4eXQHCnFUZcdb/ygb26t7LJ4z99gw1aR5oB1DzEb2vBZ4Fj3gpVkrY
7eceAfLnWmKyP9aWwMdluMNud06NLhNSnAsX+N158OFqXvVK56pj9Nx/Yma8Uk5l
67B8OsXDeZ8DiFto/c3XJfOM/DRRWrd9eZVCTsuKepGCs6/rvWN1ZOfuhvHaalZ6
GclPry4uxE0ODldSyGglqyv7z6NODhUnhnH+pFbNU8PYLToUKh11G0T/LWzod+uJ
IMv9VPl4sjcL5wr6IKz3TF5gtc28nPaxVXPkjcqjyfjoaNuhmaaXlO2CNkvUSiFw
gBz+jJlaf0g0h820BQ==
-----END CERTIFICATE-----
Generated at Mon Jun 17 21:59:59 2024 by rpki-client on console-fra.rpki-client.org