Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131302e302f32342d3234203d3e20323636343136.roa
File:                     3137302e38312e3131302e302f32342d3234203d3e20323636343136.roa (raw, json)
Hash identifier:          WI7HDLUydfKuXeo9+pbFgHMMOCxGNaOrRiDCU7O68ZY=
Subject key identifier:   B8:BC:50:96:79:31:65:C6:E4:11:3D:E3:3B:68:89:64:9D:1E:48:79
Certificate issuer:       /CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
Certificate serial:       6B2AF7ACC7ED132CDB8A403104088A1B21CBA015
Authority key identifier: 3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131302e302f32342d3234203d3e20323636343136.roa
Signing time:             Sat 25 May 2024 15:15:32 +0000
ROA not before:           Sat 25 May 2024 15:10:32 +0000
ROA not after:            Sat 24 May 2025 15:15:32 +0000
asID:                     266416
IP address blocks:        170.81.110.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2a:f7:ac:c7:ed:13:2c:db:8a:40:31:04:08:8a:1b:21:cb:a0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F9C724B8A4D384BB0BC626E0279F0491D983BB2
        Validity
            Not Before: May 25 15:10:32 2024 GMT
            Not After : May 24 15:15:32 2025 GMT
        Subject: CN=B8BC5096793165C6E4113DE33B6889649D1E4879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:cb:fc:a5:60:46:e6:8e:23:8f:e1:e6:ac:
                    60:a4:99:9a:83:02:d3:54:dc:56:67:b4:8f:1b:a1:
                    23:4d:ec:6a:06:04:76:9e:6e:1a:d2:19:38:1c:f2:
                    6f:b0:10:ad:e0:4c:28:db:c9:8e:32:02:25:51:bc:
                    17:17:71:34:79:1e:1b:fa:c9:d1:59:0e:5e:53:8e:
                    6e:fe:2d:57:cd:9f:4c:01:b5:9e:9c:0e:ec:fc:64:
                    8b:51:a1:89:dd:fa:41:55:9a:a1:a7:9d:cd:c4:7f:
                    6e:b7:a4:ba:e2:15:cd:a6:d9:92:0d:6d:69:5c:2d:
                    07:f5:6b:c7:04:33:88:69:bd:33:ee:9f:f6:ee:4d:
                    45:d3:27:7c:61:25:de:d9:cb:e2:c9:89:28:59:00:
                    ed:27:76:22:3c:40:dc:1f:01:1c:2b:fb:01:37:11:
                    60:1a:08:f5:23:25:fc:af:af:98:88:03:c0:8d:cf:
                    04:bd:16:db:d7:8e:e8:82:20:ed:6a:fd:fd:4c:4f:
                    f9:12:6d:cb:e2:d2:5c:e7:c7:5e:e8:20:a9:44:c9:
                    77:2c:e4:8d:ba:de:5e:e4:08:c8:e7:db:14:e1:b0:
                    fd:5f:1d:08:84:15:42:13:e3:b2:dd:9e:bb:82:78:
                    a9:17:e9:4b:cb:10:42:e2:d5:11:6d:eb:eb:7f:79:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BC:50:96:79:31:65:C6:E4:11:3D:E3:3B:68:89:64:9D:1E:48:79
            X509v3 Authority Key Identifier:
                keyid:3F:9C:72:4B:8A:4D:38:4B:B0:BC:62:6E:02:79:F0:49:1D:98:3B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F9C724B8A4D384BB0BC626E0279F0491D983BB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eb4drTVKnMn6jVfkMcXRhCSniHrp3TBQ8e6gKgw7obtr/0/3137302e38312e3131302e302f32342d3234203d3e20323636343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:45:fb:8a:38:e5:3f:69:a7:7f:9a:fc:e2:b7:47:f7:83:
         b9:48:95:16:13:b6:46:44:ea:97:cc:dc:c7:89:ee:2c:6e:a1:
         ca:f3:ce:a4:d7:99:10:f9:37:38:04:af:c9:d8:f0:ee:7a:fe:
         9d:ec:e8:0a:16:66:c9:49:e0:c5:c9:cf:f7:54:e6:41:08:72:
         ec:7b:81:c1:72:03:0c:4b:8c:24:99:b3:a4:d8:3f:17:a7:a9:
         39:b2:1e:7a:31:2e:54:83:60:b4:6b:ef:a6:c7:21:d4:7a:46:
         d6:8c:f0:c1:04:ba:ab:72:15:72:07:3e:76:17:f2:af:68:0a:
         a2:b2:e7:f8:de:e9:15:a5:f4:29:3b:43:7d:fe:ef:d0:80:bb:
         7b:f0:74:1c:9f:c2:43:a4:fa:9a:1b:1d:54:38:3d:de:f8:ee:
         a4:9a:82:8b:cf:37:c2:b9:ab:fe:25:f6:f5:38:93:1d:e3:c4:
         2a:f3:52:9f:ad:ef:b3:f1:a3:0d:79:f1:db:82:c5:54:88:1b:
         b4:86:95:99:f2:66:3f:de:91:bb:a8:67:13:33:cb:1e:95:91:
         f2:cc:95:c5:39:8a:75:19:02:f9:21:fe:29:88:7b:7f:71:82:
         d2:3f:64:d0:5c:9c:5a:09:fa:86:7c:29:f6:0b:0d:68:e6:30:
         32:f5:f0:9a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUayr3rMftEyzbikAxBAiKGyHLoBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Y5QzcyNEI4QTREMzg0QkIwQkM2MjZFMDI3OUYwNDkx
RDk4M0JCMjAeFw0yNDA1MjUxNTEwMzJaFw0yNTA1MjQxNTE1MzJaMDMxMTAvBgNV
BAMTKEI4QkM1MDk2NzkzMTY1QzZFNDExM0RFMzNCNjg4OTY0OUQxRTQ4NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeA8v8pWBG5o4jj+HmrGCkmZqD
AtNU3FZntI8boSNN7GoGBHaebhrSGTgc8m+wEK3gTCjbyY4yAiVRvBcXcTR5Hhv6
ydFZDl5Tjm7+LVfNn0wBtZ6cDuz8ZItRoYnd+kFVmqGnnc3Ef263pLriFc2m2ZIN
bWlcLQf1a8cEM4hpvTPun/buTUXTJ3xhJd7Zy+LJiShZAO0ndiI8QNwfARwr+wE3
EWAaCPUjJfyvr5iIA8CNzwS9FtvXjuiCIO1q/f1MT/kSbcvi0lznx17oIKlEyXcs
5I263l7kCMjn2xThsP1fHQiEFUIT47LdnruCeKkX6UvLEELi1RFt6+t/eRExAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuLxQlnkxZcbkET3jO2iJZJ0eSHkwHwYDVR0j
BBgwFoAUP5xyS4pNOEuwvGJuAnnwSR2YO7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWI0ZHJUVktuTW42alZma01jWFJoQ1NuaUhycDNUQlE4ZTZnS2d3N29i
dHIvMC8zRjlDNzI0QjhBNEQzODRCQjBCQzYyNkUwMjc5RjA0OTFEOTgzQkIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGOUM3MjRCOEE0RDM4NEJC
MEJDNjI2RTAyNzlGMDQ5MUQ5ODNCQjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ViNGRyVFZLbk1uNmpWZmtNY1hSaENTbmlIcnAzVEJROGU2Z0tndzdvYnRyLzAv
MzEzNzMwMmUzODMxMmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUW4wDQYJKoZIhvcNAQELBQADggEBAHQuRfuK
OOU/aad/mvzit0f3g7lIlRYTtkZE6pfM3MeJ7ixuocrzzqTXmRD5NzgEr8nY8O56
/p3s6AoWZslJ4MXJz/dU5kEIcux7gcFyAwxLjCSZs6TYPxenqTmyHnoxLlSDYLRr
76bHIdR6RtaM8MEEuqtyFXIHPnYX8q9oCqKy5/je6RWl9Ck7Q33+79CAu3vwdByf
wkOk+pobHVQ4Pd747qSagovPN8K5q/4l9vU4kx3jxCrzUp+t77Pxow158duCxVSI
G7SGlZnyZj/ekbuoZxMzyx6VkfLMlcU5inUZAvkh/imIe39xgtI/ZNBcnFoJ+oZ8
KfYLDWjmMDL18Jo=
-----END CERTIFICATE-----
Generated at Sat Aug 10 04:15:11 2024 by rpki-client on console-ams.rpki-client.org