Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa
File:                     3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa (raw, json)
Hash identifier:          9KbBu1xrrPLm/TKdwR2Dyr8mH1Ymjhu7Yz7cwsoD/HI=
Subject key identifier:   CC:9C:75:18:4B:00:FC:98:1F:25:57:16:01:43:09:34:D1:11:83:DA
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       691B0B95B8236362A6A11343C9DA3DAC87275F69
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa
Signing time:             Thu 04 Apr 2024 02:58:48 +0000
ROA not before:           Thu 04 Apr 2024 02:53:48 +0000
ROA not after:            Thu 03 Apr 2025 02:58:48 +0000
asID:                     263335
IP address blocks:        191.36.136.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1b:0b:95:b8:23:63:62:a6:a1:13:43:c9:da:3d:ac:87:27:5f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Apr  4 02:53:48 2024 GMT
            Not After : Apr  3 02:58:48 2025 GMT
        Subject: CN=CC9C75184B00FC981F25571601430934D11183DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:e8:b0:81:95:9f:cb:5c:22:48:11:db:51:
                    97:bb:eb:bd:07:b6:f9:bb:e2:b1:cb:12:84:aa:83:
                    a7:66:a8:59:6e:a7:31:e2:78:26:76:5c:9d:0c:eb:
                    41:d1:d0:16:96:95:a6:1a:2c:87:73:20:15:03:8e:
                    93:78:2b:d1:8e:5f:ec:c3:47:9b:a6:c1:1c:32:fe:
                    e3:9c:4c:4e:8f:de:01:34:49:e8:88:61:32:c0:82:
                    5a:19:84:c7:2b:7d:ca:37:91:82:b2:cf:3a:f1:49:
                    f9:cd:9e:91:d7:1b:b6:cb:68:70:04:e9:74:87:37:
                    77:39:f0:0b:9d:1d:d1:4b:72:03:15:5d:c9:b8:e9:
                    fc:20:07:ec:60:72:67:b8:a2:56:7b:c3:20:05:af:
                    1f:2e:05:e5:f8:d8:19:52:3a:2c:1b:3e:71:d7:ef:
                    ba:d3:fe:d1:72:21:17:bf:83:77:64:57:b3:d8:00:
                    16:81:78:16:b3:a5:8e:4d:57:63:aa:a5:89:f1:1e:
                    28:8e:76:8f:38:03:57:00:f2:d1:33:c1:fb:de:17:
                    a9:f9:de:a6:c6:67:c7:10:24:a2:58:70:20:4a:dd:
                    e5:0e:ff:34:db:be:39:db:70:3c:41:0f:1f:1c:fa:
                    9d:6e:fc:4b:35:1e:5b:fb:94:af:3a:98:4d:e3:b9:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:75:18:4B:00:FC:98:1F:25:57:16:01:43:09:34:D1:11:83:DA
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133362e302f32332d3233203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:e4:92:da:48:1f:10:a1:7d:59:59:83:bb:52:9f:d9:99:a2:
         92:4b:8d:76:cb:aa:6e:b1:b7:9f:84:a2:d7:fa:63:1f:87:58:
         c8:08:eb:4e:1b:eb:92:17:02:ef:35:1d:97:7b:28:49:c7:95:
         7e:62:52:c8:e7:03:8f:85:d4:6e:f0:94:6a:c9:a2:46:33:2b:
         de:fc:62:e2:3e:38:1a:25:66:05:a8:c2:98:08:0c:7f:6d:f1:
         57:6f:58:c9:ab:c1:88:5d:41:66:8f:fb:fc:0c:33:c5:0c:cc:
         bb:eb:7a:19:56:06:de:59:05:67:35:02:ac:ab:2b:5d:82:8f:
         1f:5f:bb:fe:99:db:04:b3:a9:98:0a:88:18:7b:80:f7:11:68:
         c1:6b:34:4c:7d:6d:11:45:32:5c:0f:8b:67:d7:5e:44:e9:79:
         e9:5d:2e:9e:ae:07:ee:de:35:87:25:09:71:ab:f1:e8:e5:7c:
         cd:f3:65:f2:f8:da:6e:a6:85:68:0c:95:6f:e4:9c:6e:8b:11:
         68:87:cb:6f:14:0a:c9:7c:de:56:11:7a:3a:f1:82:44:98:65:
         d9:5f:e0:dc:9c:37:b2:06:84:dc:09:fa:3d:61:b7:4c:c5:6d:
         3d:7e:f4:6a:92:eb:fa:da:38:95:f3:11:43:d0:cb:72:6f:70:
         ef:49:36:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaRsLlbgjY2KmoRNDydo9rIcnX2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFQUY3MTA1RTNCRTA3RDMwQjJBNDE0MzUyQjA1MTcz
QjkyRDM3NTAeFw0yNDA0MDQwMjUzNDhaFw0yNTA0MDMwMjU4NDhaMDMxMTAvBgNV
BAMTKENDOUM3NTE4NEIwMEZDOTgxRjI1NTcxNjAxNDMwOTM0RDExMTgzREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjSOiwgZWfy1wiSBHbUZe7670H
tvm74rHLEoSqg6dmqFlupzHieCZ2XJ0M60HR0BaWlaYaLIdzIBUDjpN4K9GOX+zD
R5umwRwy/uOcTE6P3gE0SeiIYTLAgloZhMcrfco3kYKyzzrxSfnNnpHXG7bLaHAE
6XSHN3c58AudHdFLcgMVXcm46fwgB+xgcme4olZ7wyAFrx8uBeX42BlSOiwbPnHX
77rT/tFyIRe/g3dkV7PYABaBeBazpY5NV2OqpYnxHiiOdo84A1cA8tEzwfveF6n5
3qbGZ8cQJKJYcCBK3eUO/zTbvjnbcDxBDx8c+p1u/Es1Hlv7lK86mE3juXIpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzJx1GEsA/JgfJVcWAUMJNNERg9owHwYDVR0j
BBgwFoAU3ur3EF474H0wsqQUNSsFFzuS03UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMS9ERUVBRjcxMDVFM0JFMDdEMzBCMkE0MTQzNTJCMDUxNzNCOTJEMzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRUFGNzEwNUUzQkUwN0Qz
MEIyQTQxNDM1MkIwNTE3M0I5MkQzNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzEv
MzEzOTMxMmUzMzM2MmUzMTMzMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG/JIgwDQYJKoZIhvcNAQELBQADggEBAAjkktpI
HxChfVlZg7tSn9mZopJLjXbLqm6xt5+Eotf6Yx+HWMgI604b65IXAu81HZd7KEnH
lX5iUsjnA4+F1G7wlGrJokYzK978YuI+OBolZgWowpgIDH9t8VdvWMmrwYhdQWaP
+/wMM8UMzLvrehlWBt5ZBWc1AqyrK12Cjx9fu/6Z2wSzqZgKiBh7gPcRaMFrNEx9
bRFFMlwPi2fXXkTpeeldLp6uB+7eNYclCXGr8ejlfM3zZfL42m6mhWgMlW/knG6L
EWiHy28UCsl83lYRejrxgkSYZdlf4NycN7IGhNwJ+j1ht0zFbT1+9GqS6/raOJXz
EUPQy3JvcO9JNsI=
-----END CERTIFICATE-----
Generated at Tue Nov 5 10:21:30 2024 by rpki-client on console-fra.rpki-client.org