Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa
File:                     3138392e38342e35362e302f32322d3234203d3e20323731373030.roa (raw, json)
Hash identifier:          UC7Arpj5KJ83nfAN2QgmtUVJp5kD2F2Y+l9QccSctgk=
Subject key identifier:   12:86:16:AC:8D:54:98:FF:69:B5:36:0A:B9:FC:DC:63:EF:D0:EA:B4
Certificate issuer:       /CN=F8A856531D031C268A60E567AA8452F1F7F438A4
Certificate serial:       3D9143CAC3FE497C6B480410EF104F9B4806D8FC
Authority key identifier: F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa
Signing time:             Mon 15 Jul 2024 18:06:26 +0000
ROA not before:           Mon 15 Jul 2024 18:01:26 +0000
ROA not after:            Mon 14 Jul 2025 18:06:26 +0000
asID:                     271700
IP address blocks:        189.84.56.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:91:43:ca:c3:fe:49:7c:6b:48:04:10:ef:10:4f:9b:48:06:d8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8A856531D031C268A60E567AA8452F1F7F438A4
        Validity
            Not Before: Jul 15 18:01:26 2024 GMT
            Not After : Jul 14 18:06:26 2025 GMT
        Subject: CN=128616AC8D5498FF69B5360AB9FCDC63EFD0EAB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:50:b0:f8:c4:19:ee:e8:78:5d:9e:cd:22:
                    5c:ce:1e:22:0d:14:a7:fa:5f:6c:10:d4:0f:5a:ed:
                    51:f2:62:df:8e:e1:ba:31:6b:33:66:c8:2c:ef:60:
                    99:98:8e:ec:76:b1:61:28:c4:b6:4a:2b:c2:9d:74:
                    d3:02:69:46:5c:6e:14:90:cf:fb:77:11:1f:e4:b9:
                    54:b4:59:1d:c8:09:ac:25:f7:c7:8d:5e:41:3d:57:
                    1e:bb:db:46:0b:8e:e8:fa:c3:ab:b3:54:fa:51:96:
                    bf:19:05:81:13:31:ca:e3:b9:a0:2d:f5:18:ba:06:
                    1d:48:0c:dc:3c:96:0e:5b:a5:dd:18:46:5d:32:dc:
                    8a:1b:c0:d4:b3:3f:2c:f6:9e:35:d9:82:7b:d4:ef:
                    ca:b4:df:ce:9e:1b:83:50:70:0b:28:48:ab:d3:ef:
                    42:09:d7:0f:7c:0f:bd:81:a1:32:d3:7d:fb:c8:ec:
                    e3:ea:2b:95:7f:07:69:b1:11:fe:77:14:11:c9:03:
                    86:e0:66:8a:23:2d:70:42:42:a4:66:4d:a6:06:ed:
                    78:f2:73:f2:43:b8:33:eb:33:f9:79:77:3c:83:de:
                    90:19:d7:25:cd:38:ad:5b:05:4d:e6:15:45:e9:6d:
                    75:0e:18:32:5a:b6:93:a8:68:4c:7a:8e:d5:0e:e3:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:16:AC:8D:54:98:FF:69:B5:36:0A:B9:FC:DC:63:EF:D0:EA:B4
            X509v3 Authority Key Identifier:
                keyid:F8:A8:56:53:1D:03:1C:26:8A:60:E5:67:AA:84:52:F1:F7:F4:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/F8A856531D031C268A60E567AA8452F1F7F438A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8A856531D031C268A60E567AA8452F1F7F438A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8zSeiiNLja8b37vBkGwL1bgXZ2EqYZgPrtrNqn5uf7c/1/3138392e38342e35362e302f32322d3234203d3e20323731373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:0d:66:23:ea:b0:9b:e2:cb:74:23:1e:23:99:e0:f5:a1:00:
         34:b0:63:dc:0f:68:92:09:e4:d2:07:4f:be:ab:c5:64:24:93:
         d8:b1:93:3d:56:e0:34:e8:96:fc:2b:c0:44:46:a2:3d:2c:5a:
         ea:5c:61:ee:94:37:72:5e:7c:c5:45:b7:75:39:a8:7c:e4:64:
         a8:5d:20:fd:43:2b:21:53:46:71:99:2c:5d:a6:8e:5c:f8:be:
         9b:63:38:b2:c8:7e:9a:03:e9:16:60:f1:41:07:e4:14:60:c3:
         bb:4a:53:12:06:88:34:34:39:f1:70:f6:11:bd:f7:0c:19:6b:
         c2:4c:e5:4b:d6:8e:be:33:9c:5d:d3:d9:20:21:3f:a9:ea:6b:
         38:fc:8b:e5:a7:2e:b2:3f:b2:f4:71:d5:18:02:0e:c6:59:fd:
         18:cd:ed:8a:00:21:b7:a2:f7:9e:f3:88:96:34:b2:93:9d:75:
         bc:73:24:a0:31:79:e4:6b:0b:d2:f1:ab:df:4a:26:2d:96:17:
         b1:49:88:a4:aa:f1:86:1e:33:d7:03:df:59:14:ea:60:d5:f1:
         35:3f:4b:ce:66:90:61:7a:df:ab:af:db:d6:9c:f3:9d:04:60:
         4c:09:70:11:87:4f:d5:3b:0d:37:aa:32:e7:46:bb:ad:14:46:
         65:ce:20:8a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPZFDysP+SXxrSAQQ7xBPm0gG2PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhBODU2NTMxRDAzMUMyNjhBNjBFNTY3QUE4NDUyRjFG
N0Y0MzhBNDAeFw0yNDA3MTUxODAxMjZaFw0yNTA3MTQxODA2MjZaMDMxMTAvBgNV
BAMTKDEyODYxNkFDOEQ1NDk4RkY2OUI1MzYwQUI5RkNEQzYzRUZEMEVBQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQVCw+MQZ7uh4XZ7NIlzOHiIN
FKf6X2wQ1A9a7VHyYt+O4boxazNmyCzvYJmYjux2sWEoxLZKK8KddNMCaUZcbhSQ
z/t3ER/kuVS0WR3ICawl98eNXkE9Vx6720YLjuj6w6uzVPpRlr8ZBYETMcrjuaAt
9Ri6Bh1IDNw8lg5bpd0YRl0y3IobwNSzPyz2njXZgnvU78q0386eG4NQcAsoSKvT
70IJ1w98D72BoTLTffvI7OPqK5V/B2mxEf53FBHJA4bgZoojLXBCQqRmTaYG7Xjy
c/JDuDPrM/l5dzyD3pAZ1yXNOK1bBU3mFUXpbXUOGDJatpOoaEx6jtUO41M5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEoYWrI1UmP9ptTYKufzcY+/Q6rQwHwYDVR0j
BBgwFoAU+KhWUx0DHCaKYOVnqoRS8ff0OKQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjh6U2VpaU5MamE4YjM3dkJrR3dMMWJnWFoyRXFZWmdQcnRyTnFuNXVm
N2MvMS9GOEE4NTY1MzFEMDMxQzI2OEE2MEU1NjdBQTg0NTJGMUY3RjQzOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y4QTg1NjUzMUQwMzFDMjY4
QTYwRTU2N0FBODQ1MkYxRjdGNDM4QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y4elNlaWlOTGphOGIzN3ZCa0d3TDFiZ1haMkVxWVpnUHJ0ck5xbjV1ZjdjLzEv
MzEzODM5MmUzODM0MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMx
MzczMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvVQ4MA0GCSqGSIb3DQEBCwUAA4IBAQA3DWYj6rCb
4st0Ix4jmeD1oQA0sGPcD2iSCeTSB0++q8VkJJPYsZM9VuA06Jb8K8BERqI9LFrq
XGHulDdyXnzFRbd1Oah85GSoXSD9QyshU0ZxmSxdpo5c+L6bYziyyH6aA+kWYPFB
B+QUYMO7SlMSBog0NDnxcPYRvfcMGWvCTOVL1o6+M5xd09kgIT+p6ms4/Ivlpy6y
P7L0cdUYAg7GWf0Yze2KACG3ovee84iWNLKTnXW8cySgMXnkawvS8avfSiYtlhex
SYikqvGGHjPXA99ZFOpg1fE1P0vOZpBhet+rr9vWnPOdBGBMCXARh0/VOw03qjLn
RrutFEZlziCK
-----END CERTIFICATE-----
Generated at Thu Oct 10 12:45:06 2024 by rpki-client on console-fra.rpki-client.org