Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
File:                     3133312e3130382e36302e302f32322d3232203d3e203631363634.roa (raw, json)
Hash identifier:          WBkgJ56WmkoX9XJAKJufgYy1MkiQk+Uj+Fhqhb0NK3k=
Subject key identifier:   E5:F5:8F:EB:50:73:00:7B:5C:9F:9E:7A:43:09:B3:27:00:04:82:6A
Certificate issuer:       /CN=A2838E50EF4130DD6AD153940830854022E210E9
Certificate serial:       63EDED0B1F0D53E570691A272C8C439F9436F819
Authority key identifier: A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2838E50EF4130DD6AD153940830854022E210E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa
Signing time:             Fri 25 Oct 2024 19:31:03 +0000
ROA not before:           Fri 25 Oct 2024 19:26:03 +0000
ROA not after:            Fri 24 Oct 2025 19:31:03 +0000
asID:                     61664
IP address blocks:        131.108.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:ed:0b:1f:0d:53:e5:70:69:1a:27:2c:8c:43:9f:94:36:f8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2838E50EF4130DD6AD153940830854022E210E9
        Validity
            Not Before: Oct 25 19:26:03 2024 GMT
            Not After : Oct 24 19:31:03 2025 GMT
        Subject: CN=E5F58FEB5073007B5C9F9E7A4309B3270004826A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:e5:de:7f:fe:4a:58:11:58:95:b4:ac:84:
                    ed:5a:31:17:88:ba:6f:c8:5a:a2:1d:46:d0:6c:d0:
                    3c:07:ac:60:0d:05:10:e3:73:a9:2a:63:41:2d:de:
                    44:08:e9:94:5c:6f:fa:90:44:e6:04:2f:9c:96:3c:
                    f6:20:17:04:c4:dd:14:36:4a:d3:ae:f5:f5:17:42:
                    8c:ce:6d:ca:98:3e:23:89:3c:75:8f:8b:e7:de:f0:
                    af:7a:8b:0a:04:fc:5a:06:0c:bc:37:49:c6:c8:e3:
                    af:35:48:56:00:a1:0d:73:61:07:60:17:ec:eb:cd:
                    99:1f:8e:16:dd:a3:83:15:5d:64:f7:1d:ad:1f:bb:
                    7b:93:a8:9c:2b:a8:23:eb:a6:77:c2:b9:e1:4c:96:
                    49:60:87:02:7b:8c:97:38:65:f3:fd:4e:ba:9f:d5:
                    d4:b2:59:eb:37:d3:2d:16:a2:7b:c1:40:cc:2c:cc:
                    ff:18:b5:b3:fd:73:a6:95:e1:17:e2:fc:80:16:5c:
                    da:b4:f2:1b:3a:ee:5d:2d:97:a4:c3:90:9c:3d:e8:
                    c6:7d:cb:01:d4:93:bd:c2:ba:ac:5d:9a:80:88:15:
                    35:c9:d7:ce:e5:ee:4b:ed:52:07:5e:83:eb:3d:c8:
                    04:ca:c5:23:7d:53:f4:a5:fa:66:8b:73:23:69:4d:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:8F:EB:50:73:00:7B:5C:9F:9E:7A:43:09:B3:27:00:04:82:6A
            X509v3 Authority Key Identifier:
                keyid:A2:83:8E:50:EF:41:30:DD:6A:D1:53:94:08:30:85:40:22:E2:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/A2838E50EF4130DD6AD153940830854022E210E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2838E50EF4130DD6AD153940830854022E210E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQaYCa31cP5qGuPDMx2V5dv6unKP1wsXfrNZSEzQhMe/0/3133312e3130382e36302e302f32322d3232203d3e203631363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:0a:9a:75:2a:7c:d5:6f:ff:95:59:56:5a:5d:e0:6e:02:
         10:81:40:0f:a6:56:5b:a5:2f:ea:d3:5b:cf:92:a0:48:56:99:
         21:00:55:7c:43:3b:e9:ef:1a:45:5c:32:81:dd:50:74:c7:4a:
         9a:83:e6:95:23:ca:6e:ba:ab:e0:4b:a5:9a:7d:a7:2d:d7:cf:
         a6:e1:ae:11:30:40:18:8e:c2:7b:aa:79:bb:66:fd:bf:d3:f7:
         e0:07:e3:d5:39:c4:33:51:1c:86:79:0d:12:07:80:bd:65:80:
         1b:fd:ee:f1:c0:66:ff:bd:30:6b:a1:81:36:72:25:5e:71:85:
         22:f6:e0:e1:05:96:5d:71:11:7e:41:5c:61:28:0c:22:d9:b8:
         08:ed:8d:70:6d:dd:6c:3f:6c:5a:f5:c6:83:ac:b9:44:80:84:
         85:21:0c:c9:1f:5c:98:c5:f6:18:2e:4d:d7:50:d9:e4:1f:7a:
         6b:a1:ad:f2:ad:f3:bd:94:5a:b7:5d:31:ba:1c:03:e3:d6:7c:
         13:ad:8a:c1:42:b3:4f:2d:c8:c0:da:dc:71:a2:ff:bb:2f:2b:
         50:a9:3d:a7:ee:a1:76:7c:e9:64:8a:4d:77:de:34:5d:5a:cc:
         89:ed:82:ee:ce:1e:d2:5c:ea:de:65:f4:a9:5b:a9:d5:85:55:
         d0:75:20:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY+3tCx8NU+VwaRonLIxDn5Q2+BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI4MzhFNTBFRjQxMzBERDZBRDE1Mzk0MDgzMDg1NDAy
MkUyMTBFOTAeFw0yNDEwMjUxOTI2MDNaFw0yNTEwMjQxOTMxMDNaMDMxMTAvBgNV
BAMTKEU1RjU4RkVCNTA3MzAwN0I1QzlGOUU3QTQzMDlCMzI3MDAwNDgyNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsOXef/5KWBFYlbSshO1aMReI
um/IWqIdRtBs0DwHrGANBRDjc6kqY0Et3kQI6ZRcb/qQROYEL5yWPPYgFwTE3RQ2
StOu9fUXQozObcqYPiOJPHWPi+fe8K96iwoE/FoGDLw3ScbI4681SFYAoQ1zYQdg
F+zrzZkfjhbdo4MVXWT3Ha0fu3uTqJwrqCPrpnfCueFMlklghwJ7jJc4ZfP9Trqf
1dSyWes30y0WonvBQMwszP8YtbP9c6aV4Rfi/IAWXNq08hs67l0tl6TDkJw96MZ9
ywHUk73CuqxdmoCIFTXJ187l7kvtUgdeg+s9yATKxSN9U/Sl+maLcyNpTSAdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5fWP61BzAHtcn556QwmzJwAEgmowHwYDVR0j
BBgwFoAUooOOUO9BMN1q0VOUCDCFQCLiEOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBRYVlDYTMxY1A1cUd1UERNeDJWNWR2NnVuS1Axd3NYZnJOWlNFelFo
TWUvMC9BMjgzOEU1MEVGNDEzMERENkFEMTUzOTQwODMwODU0MDIyRTIxMEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyODM4RTUwRUY0MTMwREQ2
QUQxNTM5NDA4MzA4NTQwMjJFMjEwRTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwUWFZQ2EzMWNQNXFHdVBETXgyVjVkdjZ1bktQMXdzWGZyTlpTRXpRaE1lLzAv
MzEzMzMxMmUzMTMwMzgyZTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg2w8MA0GCSqGSIb3DQEBCwUAA4IBAQAqHAqadSp8
1W//lVlWWl3gbgIQgUAPplZbpS/q01vPkqBIVpkhAFV8Qzvp7xpFXDKB3VB0x0qa
g+aVI8puuqvgS6Wafact18+m4a4RMEAYjsJ7qnm7Zv2/0/fgB+PVOcQzURyGeQ0S
B4C9ZYAb/e7xwGb/vTBroYE2ciVecYUi9uDhBZZdcRF+QVxhKAwi2bgI7Y1wbd1s
P2xa9caDrLlEgISFIQzJH1yYxfYYLk3XUNnkH3proa3yrfO9lFq3XTG6HAPj1nwT
rYrBQrNPLcjA2txxov+7LytQqT2n7qF2fOlkik133jRdWsyJ7YLuzh7SXOreZfSp
W6nVhVXQdSBD
-----END CERTIFICATE-----
Generated at Sat Oct 26 22:53:51 2024 by rpki-client on console-ams.rpki-client.org