Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3332203d3e20323731343232.roa
File:                     3138312e3138392e36382e302f32322d3332203d3e20323731343232.roa (raw, json)
Hash identifier:          88h1g7vlSKIadtWMhgNdYNd44VSuLkUa1TAmAvfiyOQ=
Subject key identifier:   0C:3B:F7:15:FF:21:43:FF:BC:C7:99:46:27:3E:82:AA:FB:C0:52:A9
Certificate issuer:       /CN=C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E
Certificate serial:       7C65F054D9E0DF707D4F132935E1D2C84698F04E
Authority key identifier: C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3332203d3e20323731343232.roa
Signing time:             Tue 29 Oct 2024 22:37:05 +0000
ROA not before:           Tue 29 Oct 2024 22:32:05 +0000
ROA not after:            Tue 28 Oct 2025 22:37:05 +0000
asID:                     271422
IP address blocks:        181.189.68.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:65:f0:54:d9:e0:df:70:7d:4f:13:29:35:e1:d2:c8:46:98:f0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E
        Validity
            Not Before: Oct 29 22:32:05 2024 GMT
            Not After : Oct 28 22:37:05 2025 GMT
        Subject: CN=0C3BF715FF2143FFBCC79946273E82AAFBC052A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:4c:0f:4b:a1:a7:91:b0:b5:13:b6:eb:53:
                    3d:6c:05:ce:25:a5:e4:b9:22:4b:39:f9:bb:1d:5c:
                    73:fc:34:1f:2d:93:25:ba:23:8c:1e:be:cf:ef:9a:
                    52:21:fa:13:e0:c3:08:99:fe:d0:5b:23:29:1b:06:
                    48:2d:1c:4e:74:e9:25:3d:ca:04:10:df:42:c1:e1:
                    a1:3e:09:88:12:0a:da:d2:f1:8f:a8:e8:26:3b:94:
                    4f:0b:b1:e8:65:40:ee:36:3c:db:0b:c2:c4:46:ce:
                    85:05:25:15:8d:37:c0:6c:12:a3:50:6e:ed:e3:ce:
                    48:94:7c:39:71:51:9c:da:be:63:96:54:48:35:cd:
                    22:f8:6c:5e:9f:d1:de:14:12:87:37:42:6c:be:47:
                    10:44:ea:10:e5:ab:d8:82:9b:d9:46:b8:40:9d:6b:
                    a8:f7:ba:37:77:1f:b1:b7:f8:6e:0e:29:b4:46:67:
                    a8:9a:6a:62:bb:b9:00:b2:89:79:00:e3:77:38:eb:
                    95:c5:7f:dc:6d:46:b6:39:07:27:69:4d:d9:ef:ab:
                    1b:ab:1d:e6:07:57:ed:b0:96:5d:c0:dc:d2:2d:1d:
                    53:0f:f4:38:0e:05:e1:a3:b7:fd:76:d5:60:c9:d1:
                    c8:1c:eb:7b:4f:e8:c0:10:d8:b1:80:fd:76:fd:4b:
                    79:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:F7:15:FF:21:43:FF:BC:C7:99:46:27:3E:82:AA:FB:C0:52:A9
            X509v3 Authority Key Identifier:
                keyid:C5:CF:0F:FB:94:D7:93:A1:2D:FD:8C:35:BB:92:BB:DB:B1:6F:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5CF0FFB94D793A12DFD8C35BB92BBDBB16F522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3YNLY6pr9HEMZgFR1FagVNhNJzDBbEFuT14S3sZZ9aT/0/3138312e3138392e36382e302f32322d3332203d3e20323731343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:a4:e9:b5:b2:43:06:39:66:04:0d:07:5f:cb:df:ee:3c:
         30:f4:cf:2c:a4:99:32:f5:21:f6:09:fe:2d:4c:a8:9f:71:84:
         82:72:ed:c7:56:a7:0a:ed:2a:96:3a:55:ec:6d:ae:b9:82:c9:
         91:cd:e9:71:41:f6:31:16:ea:1c:a5:36:de:cf:de:37:18:5f:
         e4:61:f3:67:bb:11:9a:27:d6:07:34:f8:a3:c5:ac:86:cf:80:
         e9:29:ec:70:47:a5:58:aa:b7:cd:da:d0:83:fb:d1:5d:66:21:
         fe:55:16:2f:71:92:dc:94:74:47:3e:21:b9:11:b4:f7:52:88:
         24:a2:a6:7a:19:18:6e:38:30:b0:d0:b0:c0:3b:ca:6a:98:dd:
         b7:d8:81:3c:06:1a:60:e5:ba:e7:8c:12:7c:e1:8a:6e:a8:4b:
         84:c1:5b:7a:dd:4f:12:1d:fb:c2:e9:4a:a6:02:8f:35:51:7e:
         bf:1d:fb:c8:97:e9:78:26:d3:a7:b6:d3:4e:3a:7f:6c:20:a3:
         8c:d7:9a:3f:6e:e4:5e:52:5f:e0:fd:92:11:49:cc:a4:d5:95:
         b3:4f:41:c1:f5:f1:6b:97:3d:0c:5d:0b:b1:de:8c:25:78:60:
         4f:8e:ff:67:22:84:83:4a:ef:a9:cc:4d:00:a4:1b:17:02:3a:
         24:3a:08:af
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfGXwVNng33B9TxMpNeHSyEaY8E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDRjBGRkI5NEQ3OTNBMTJERkQ4QzM1QkI5MkJCREJC
MTZGNTIyRTAeFw0yNDEwMjkyMjMyMDVaFw0yNTEwMjgyMjM3MDVaMDMxMTAvBgNV
BAMTKDBDM0JGNzE1RkYyMTQzRkZCQ0M3OTk0NjI3M0U4MkFBRkJDMDUyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0OUwPS6GnkbC1E7brUz1sBc4l
peS5Iks5+bsdXHP8NB8tkyW6I4wevs/vmlIh+hPgwwiZ/tBbIykbBkgtHE506SU9
ygQQ30LB4aE+CYgSCtrS8Y+o6CY7lE8LsehlQO42PNsLwsRGzoUFJRWNN8BsEqNQ
bu3jzkiUfDlxUZzavmOWVEg1zSL4bF6f0d4UEoc3Qmy+RxBE6hDlq9iCm9lGuECd
a6j3ujd3H7G3+G4OKbRGZ6iaamK7uQCyiXkA43c465XFf9xtRrY5BydpTdnvqxur
HeYHV+2wll3A3NItHVMP9DgOBeGjt/121WDJ0cgc63tP6MAQ2LGA/Xb9S3nnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDDv3Ff8hQ/+8x5lGJz6CqvvAUqkwHwYDVR0j
BBgwFoAUxc8P+5TXk6Et/Yw1u5K727FvUi4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjNZTkxZNnByOUhFTVpnRlIxRmFnVk5oTkp6REJiRUZ1VDE0UzNzWlo5
YVQvMC9DNUNGMEZGQjk0RDc5M0ExMkRGRDhDMzVCQjkyQkJEQkIxNkY1MjJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1Q0YwRkZCOTRENzkzQTEy
REZEOEMzNUJCOTJCQkRCQjE2RjUyMkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YzWU5MWTZwcjlIRU1aZ0ZSMUZhZ1ZOaE5KekRCYkVGdVQxNFMzc1paOWFULzAv
MzEzODMxMmUzMTM4MzkyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1vUQwDQYJKoZIhvcNAQELBQADggEBAGe2pOm1
skMGOWYEDQdfy9/uPDD0zyykmTL1IfYJ/i1MqJ9xhIJy7cdWpwrtKpY6VextrrmC
yZHN6XFB9jEW6hylNt7P3jcYX+Rh82e7EZon1gc0+KPFrIbPgOkp7HBHpViqt83a
0IP70V1mIf5VFi9xktyUdEc+IbkRtPdSiCSipnoZGG44MLDQsMA7ymqY3bfYgTwG
GmDluueMEnzhim6oS4TBW3rdTxId+8LpSqYCjzVRfr8d+8iX6Xgm06e20046f2wg
o4zXmj9u5F5SX+D9khFJzKTVlbNPQcH18WuXPQxdC7HejCV4YE+O/2cihINK76nM
TQCkGxcCOiQ6CK8=
-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:09 2024 by rpki-client on console-ams.rpki-client.org