Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
File:                     3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa (raw, json)
Hash identifier:          ASGBi19LPzcigWofI4tqyZJPcv/x4/WL7ev68S5z0Oc=
Subject key identifier:   2B:31:C8:33:34:10:D4:2A:61:DE:76:E3:10:F0:E0:8E:C6:4F:F8:8E
Certificate issuer:       /CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
Certificate serial:       62798CF1E4370F938C296FF768CF9BEC3E21132C
Authority key identifier: DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa
Signing time:             Fri 11 Oct 2024 13:05:26 +0000
ROA not before:           Fri 11 Oct 2024 13:00:26 +0000
ROA not after:            Fri 10 Oct 2025 13:05:26 +0000
asID:                     263335
IP address blocks:        191.36.139.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:79:8c:f1:e4:37:0f:93:8c:29:6f:f7:68:cf:9b:ec:3e:21:13:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEEAF7105E3BE07D30B2A414352B05173B92D375
        Validity
            Not Before: Oct 11 13:00:26 2024 GMT
            Not After : Oct 10 13:05:26 2025 GMT
        Subject: CN=2B31C8333410D42A61DE76E310F0E08EC64FF88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:c9:d7:1d:ff:56:12:77:8f:72:1c:b0:b2:
                    45:c0:b9:fb:8a:16:c8:e4:8c:0f:f5:4d:da:7a:16:
                    59:9c:f0:c1:6e:b2:d2:97:87:87:2c:c2:d3:65:a0:
                    58:04:90:d8:1e:74:00:60:0d:94:fd:98:68:d2:c0:
                    92:06:7c:fd:f3:1d:47:b5:22:d0:b0:11:00:5c:8e:
                    d9:de:bb:06:8f:da:02:51:2b:e5:d6:b6:40:8d:00:
                    42:69:de:fe:ae:88:f8:f6:fe:6c:10:77:2a:2a:9e:
                    6e:17:33:b9:32:93:ac:fc:84:e0:53:d8:cb:d9:55:
                    d5:76:0f:1c:62:b6:2f:45:34:2e:16:14:4d:2b:02:
                    0a:e3:c8:09:41:c1:0d:40:6d:84:9f:80:9c:b3:25:
                    7b:f7:92:d9:e4:6a:c5:cb:87:8f:69:3b:65:07:ec:
                    1b:b9:c6:26:be:dc:69:05:60:2e:83:87:72:56:f3:
                    be:32:b5:3f:be:4a:d9:f1:69:62:a6:02:69:25:23:
                    9a:61:3c:ff:de:74:13:5b:b3:3a:3b:73:21:51:34:
                    90:8e:30:a7:5e:11:6d:6e:e5:23:b3:1e:e4:8b:a2:
                    0c:c1:ec:5e:80:1c:29:c7:9c:f4:2a:9c:68:91:b3:
                    95:96:37:b2:63:fb:c2:72:ea:34:27:e3:41:c3:6c:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:31:C8:33:34:10:D4:2A:61:DE:76:E3:10:F0:E0:8E:C6:4F:F8:8E
            X509v3 Authority Key Identifier:
                keyid:DE:EA:F7:10:5E:3B:E0:7D:30:B2:A4:14:35:2B:05:17:3B:92:D3:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEEAF7105E3BE07D30B2A414352B05173B92D375.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJqWSDhMeHtn7zLmjQ8ap3SQtHEGGoe5oS79BzPzXDBG/1/3139312e33362e3133392e302f32342d3234203d3e20323633333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.36.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:df:d9:5a:6a:8d:b2:5f:56:81:78:ef:b5:5a:b0:db:c2:c7:
         4a:96:8f:a2:f2:18:de:f0:11:f9:b1:d7:35:e6:0b:ce:2a:33:
         ba:5f:98:a0:96:18:a7:61:ba:ef:e6:26:46:69:38:d8:0f:ff:
         2a:b6:a0:d2:da:e3:73:e4:73:ae:ce:72:80:d5:fb:8d:35:b8:
         f7:4a:ec:e9:3f:9d:be:18:a6:2b:3f:4f:32:e0:45:7c:8e:30:
         93:b1:4b:16:aa:ef:00:5b:92:07:84:59:6b:8f:81:b0:b4:be:
         b2:98:38:5d:1f:24:ba:fb:a3:50:32:e6:c6:b5:47:cc:ea:f1:
         e7:54:9b:90:d8:3d:83:1e:cd:41:50:91:1e:79:e3:87:70:ca:
         69:02:09:71:4b:fc:97:a7:42:58:cb:5b:a4:cf:bb:0d:2c:45:
         5f:c9:dd:7e:c3:a3:d3:7c:be:11:cd:f1:45:cf:be:73:0c:5d:
         6f:02:b4:5c:9f:26:49:7c:f5:6b:84:ba:07:d9:1b:ac:57:1b:
         3f:6e:fb:3e:ae:cf:f4:47:f7:f7:1b:4f:96:f7:16:16:6c:fb:
         a2:15:40:e6:de:08:b9:9f:0a:2b:85:e1:e6:97:4a:f6:0f:3d:
         62:3c:fa:f0:a4:6b:43:bc:35:21:18:32:93:5d:19:7a:23:88:
         db:8b:61:7e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYnmM8eQ3D5OMKW/3aM+b7D4hEywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFQUY3MTA1RTNCRTA3RDMwQjJBNDE0MzUyQjA1MTcz
QjkyRDM3NTAeFw0yNDEwMTExMzAwMjZaFw0yNTEwMTAxMzA1MjZaMDMxMTAvBgNV
BAMTKDJCMzFDODMzMzQxMEQ0MkE2MURFNzZFMzEwRjBFMDhFQzY0RkY4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhz8nXHf9WEnePchywskXAufuK
FsjkjA/1Tdp6Flmc8MFustKXh4cswtNloFgEkNgedABgDZT9mGjSwJIGfP3zHUe1
ItCwEQBcjtneuwaP2gJRK+XWtkCNAEJp3v6uiPj2/mwQdyoqnm4XM7kyk6z8hOBT
2MvZVdV2Dxxiti9FNC4WFE0rAgrjyAlBwQ1AbYSfgJyzJXv3ktnkasXLh49pO2UH
7Bu5xia+3GkFYC6Dh3JW874ytT++StnxaWKmAmklI5phPP/edBNbszo7cyFRNJCO
MKdeEW1u5SOzHuSLogzB7F6AHCnHnPQqnGiRs5WWN7Jj+8Jy6jQn40HDbH4dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKzHIMzQQ1Cph3nbjEPDgjsZP+I4wHwYDVR0j
BBgwFoAU3ur3EF474H0wsqQUNSsFFzuS03UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpxV1NEaE1lSHRuN3pMbWpROGFwM1NRdEhFR0dvZTVvUzc5QnpQelhE
QkcvMS9ERUVBRjcxMDVFM0JFMDdEMzBCMkE0MTQzNTJCMDUxNzNCOTJEMzc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRUFGNzEwNUUzQkUwN0Qz
MEIyQTQxNDM1MkIwNTE3M0I5MkQzNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKcVdTRGhNZUh0bjd6TG1qUThhcDNTUXRIRUdHb2U1b1M3OUJ6UHpYREJHLzEv
MzEzOTMxMmUzMzM2MmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC/JIswDQYJKoZIhvcNAQELBQADggEBACPf2Vpq
jbJfVoF477VasNvCx0qWj6LyGN7wEfmx1zXmC84qM7pfmKCWGKdhuu/mJkZpONgP
/yq2oNLa43Pkc67OcoDV+401uPdK7Ok/nb4Ypis/TzLgRXyOMJOxSxaq7wBbkgeE
WWuPgbC0vrKYOF0fJLr7o1Ay5sa1R8zq8edUm5DYPYMezUFQkR5544dwymkCCXFL
/JenQljLW6TPuw0sRV/J3X7Do9N8vhHN8UXPvnMMXW8CtFyfJkl89WuEugfZG6xX
Gz9u+z6uz/RH9/cbT5b3FhZs+6IVQObeCLmfCiuF4eaXSvYPPWI8+vCka0O8NSEY
MpNdGXojiNuLYX4=
-----END CERTIFICATE-----
Generated at Tue Nov 5 12:42:50 2024 by rpki-client on console-ams.rpki-client.org