Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          YsXvVYtXpuZRSgn9MfcAiCkvdPuLB/onbhS2mRlMkPw=
Subject key identifier:   2A:C4:8E:6E:1D:C1:B9:F9:5D:C6:D2:EC:05:51:C5:0C:8C:0E:DD:F6
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       61FD6DEF39B03D4FCCCD77F017522153100B7A4A
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:52 +0000
ROA not before:           Thu 04 Apr 2024 13:24:52 +0000
ROA not after:            Thu 03 Apr 2025 13:29:52 +0000
asID:                     263384
IP address blocks:        138.185.40.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fd:6d:ef:39:b0:3d:4f:cc:cd:77:f0:17:52:21:53:10:0b:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:52 2024 GMT
            Not After : Apr  3 13:29:52 2025 GMT
        Subject: CN=2AC48E6E1DC1B9F95DC6D2EC0551C50C8C0EDDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:82:17:29:8b:e9:09:32:a1:39:da:3d:c5:
                    77:47:97:81:12:94:04:c1:e6:36:18:96:94:c3:72:
                    7b:48:00:f7:69:b9:c9:d1:f0:50:3f:6d:d9:4a:fa:
                    1b:f0:15:09:b7:e7:41:b9:83:7e:e6:60:6e:7e:54:
                    77:95:a3:33:9d:16:a2:46:c1:91:31:d7:44:7a:af:
                    87:d8:f3:f4:4a:08:3a:79:03:78:cc:49:2c:55:8c:
                    aa:bf:7f:a7:bd:0a:16:65:5f:3b:ee:db:eb:3a:b7:
                    04:06:59:0f:d5:d5:59:4e:0a:03:a7:cf:fd:f1:2e:
                    57:e5:b2:a3:27:25:67:50:0c:d5:4a:7c:31:1a:6e:
                    6b:9e:23:0b:ba:36:79:f9:d7:db:98:0f:2d:26:71:
                    6a:49:d7:dc:3d:cf:20:d5:95:35:42:63:6a:22:a7:
                    96:69:7c:e3:17:d4:ab:1a:99:13:f3:e8:3c:b3:86:
                    a3:81:d6:bb:26:eb:ae:a1:d7:50:b1:4d:72:d9:95:
                    65:25:85:b7:1e:0d:23:d2:48:76:f3:64:a9:52:52:
                    bb:63:6d:ec:77:87:32:f6:14:8a:14:18:c0:6c:77:
                    5f:38:72:77:18:81:d9:64:06:2c:5f:18:7f:f7:00:
                    99:b7:30:09:8c:78:4e:00:fd:4c:00:97:50:a7:83:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:8E:6E:1D:C1:B9:F9:5D:C6:D2:EC:05:51:C5:0C:8C:0E:DD:F6
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:90:cf:e0:f0:99:bc:a3:20:59:20:af:65:fe:f4:34:38:5f:
         39:f4:b7:fd:27:56:67:be:ba:db:6c:cf:ba:b1:2b:01:30:94:
         d2:c8:c2:c8:39:9d:d7:4e:35:ea:53:08:1d:c7:af:24:dc:d1:
         a8:13:94:5f:05:75:2b:4f:49:f5:c8:a5:f9:24:95:d9:49:78:
         f1:fe:e3:46:6a:cf:96:df:1f:93:5e:db:44:48:15:2c:9b:6f:
         be:3c:1e:b2:00:0a:b3:8c:70:52:21:bc:94:f5:83:18:97:e5:
         ac:0f:97:eb:ce:c3:e4:86:a1:5a:0d:c8:e7:07:9d:56:30:dc:
         41:42:32:07:58:ef:3a:54:2d:d0:c0:16:2b:39:3a:ad:21:6a:
         2b:71:71:da:f0:f4:ca:01:a7:0b:a7:3e:26:46:91:05:06:a8:
         3b:27:ec:49:0d:0f:ef:4c:f2:0d:47:59:c1:4c:f3:29:b9:82:
         1d:60:90:36:5d:39:f7:90:19:aa:4c:f8:4a:5b:3f:13:cc:99:
         c0:9c:77:b4:0e:c7:38:aa:2c:7f:da:b2:39:ba:f4:28:4e:ff:
         dd:ac:74:ec:8c:1f:ef:81:9b:fe:ed:ed:a6:9b:90:37:76:ff:
         22:f7:27:c2:3f:36:bf:5e:2c:35:af:0f:98:0c:1e:1b:c0:56:
         ae:e6:c1:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYf1t7zmwPU/MzXfwF1IhUxALekowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3OUI4QzU1M0U1RTBFREZEMjBCN0I4Q0IzMjNFQUM0
REIxOTJBNzAeFw0yNDA0MDQxMzI0NTJaFw0yNTA0MDMxMzI5NTJaMDMxMTAvBgNV
BAMTKDJBQzQ4RTZFMURDMUI5Rjk1REM2RDJFQzA1NTFDNTBDOEMwRURERjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zIIXKYvpCTKhOdo9xXdHl4ES
lATB5jYYlpTDcntIAPdpucnR8FA/bdlK+hvwFQm350G5g37mYG5+VHeVozOdFqJG
wZEx10R6r4fY8/RKCDp5A3jMSSxVjKq/f6e9ChZlXzvu2+s6twQGWQ/V1VlOCgOn
z/3xLlflsqMnJWdQDNVKfDEabmueIwu6Nnn519uYDy0mcWpJ19w9zyDVlTVCY2oi
p5ZpfOMX1KsamRPz6DyzhqOB1rsm666h11CxTXLZlWUlhbceDSPSSHbzZKlSUrtj
bex3hzL2FIoUGMBsd184cncYgdlkBixfGH/3AJm3MAmMeE4A/UwAl1Cngw69AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKsSObh3BufldxtLsBVHFDIwO3fYwHwYDVR0j
BBgwFoAUmXm4xVPl4O39ILe4yzI+rE2xkqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMS85OTc5QjhDNTUzRTVFMEVERkQyMEI3QjhDQjMyM0VBQzREQjE5MkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NzlCOEM1NTNFNUUwRURG
RDIwQjdCOENCMzIzRUFDNERCMTkyQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzEv
MzEzMzM4MmUzMTM4MzUyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuSgwDQYJKoZIhvcNAQELBQADggEBACKQz+Dw
mbyjIFkgr2X+9DQ4Xzn0t/0nVme+uttsz7qxKwEwlNLIwsg5nddONepTCB3HryTc
0agTlF8FdStPSfXIpfkkldlJePH+40Zqz5bfH5Ne20RIFSybb748HrIACrOMcFIh
vJT1gxiX5awPl+vOw+SGoVoNyOcHnVYw3EFCMgdY7zpULdDAFis5Oq0haitxcdrw
9MoBpwunPiZGkQUGqDsn7EkND+9M8g1HWcFM8ym5gh1gkDZdOfeQGapM+EpbPxPM
mcCcd7QOxziqLH/asjm69ChO/92sdOyMH++Bm/7t7aabkDd2/yL3J8I/Nr9eLDWv
D5gMHhvAVq7mwbg=
-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org