Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34322e302f32332d3233203d3e20323633333834.roa
File:                     3133382e3138352e34322e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          UfKG3i8l/Nto9TfCoHeMuTJm56yS2NQMQqQoM1TU4pk=
Subject key identifier:   85:95:EE:25:D7:6B:DA:59:7F:F4:2F:EF:90:A1:AF:73:19:0C:17:8C
Certificate issuer:       /CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
Certificate serial:       2D2895D5C064EBC3BE3A3D827608BAC67B22BC84
Authority key identifier: 99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34322e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 04 Apr 2024 13:29:52 +0000
ROA not before:           Thu 04 Apr 2024 13:24:52 +0000
ROA not after:            Thu 03 Apr 2025 13:29:52 +0000
asID:                     263384
IP address blocks:        138.185.42.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:28:95:d5:c0:64:eb:c3:be:3a:3d:82:76:08:ba:c6:7b:22:bc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7
        Validity
            Not Before: Apr  4 13:24:52 2024 GMT
            Not After : Apr  3 13:29:52 2025 GMT
        Subject: CN=8595EE25D76BDA597FF42FEF90A1AF73190C178C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:a7:d2:08:ce:05:28:ef:c3:42:ab:5e:8d:
                    40:db:60:72:7f:9e:bd:49:eb:df:63:be:5a:68:20:
                    2b:9c:df:20:94:9c:96:59:25:64:0c:74:af:fb:87:
                    43:39:89:21:99:6d:8b:cb:59:7a:c5:1e:95:0f:8b:
                    80:7f:cf:d2:e1:39:43:88:c3:86:e3:cf:5d:90:bc:
                    c9:51:19:f6:74:39:92:de:52:bb:70:48:4f:a5:db:
                    71:82:bb:60:ee:17:de:26:1c:af:82:17:ea:c9:b2:
                    ea:98:2b:4c:5f:6b:87:08:96:6d:23:3d:ca:a9:24:
                    54:0e:b9:46:51:55:9d:29:37:ae:01:9f:9c:a4:a5:
                    bd:b7:13:c8:78:49:6d:5e:b5:fe:f5:9f:7a:65:85:
                    16:1c:7f:e3:ad:05:dc:ed:0b:c5:f8:ef:fb:a5:87:
                    1c:d8:eb:2e:b9:a9:2f:71:2b:98:31:6d:b7:e3:60:
                    3b:ea:d0:81:db:f8:1d:cb:3c:ec:02:43:22:55:be:
                    89:f2:54:f0:5a:85:ad:77:dd:af:98:57:94:fa:9d:
                    87:5f:6c:52:05:38:97:de:ca:b0:22:32:72:74:c4:
                    89:ad:80:eb:23:e6:bf:4c:8c:6b:73:cf:d9:aa:13:
                    74:1d:21:a3:8c:a9:89:84:9e:e7:17:6f:c5:48:56:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:EE:25:D7:6B:DA:59:7F:F4:2F:EF:90:A1:AF:73:19:0C:17:8C
            X509v3 Authority Key Identifier:
                keyid:99:79:B8:C5:53:E5:E0:ED:FD:20:B7:B8:CB:32:3E:AC:4D:B1:92:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9979B8C553E5E0EDFD20B7B8CB323EAC4DB192A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/1/3133382e3138352e34322e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:4d:1a:e4:d7:ff:7a:b1:86:58:0a:8f:1a:ec:04:92:0c:
         bc:e4:5a:be:e0:7c:4f:ec:58:9b:f7:10:e5:20:d6:eb:a3:0e:
         3b:a3:5e:8b:f0:00:73:ba:48:5c:85:ba:28:8d:ea:72:6a:b9:
         4e:04:cb:0f:94:e9:cf:b3:e2:42:a5:aa:9b:67:f2:2f:1d:35:
         0e:47:6a:31:ce:1a:19:fe:da:06:93:e5:25:7d:18:3c:28:cb:
         a9:c8:ae:4d:d0:12:5e:3d:59:c5:ec:f8:70:02:d3:43:bc:05:
         bd:07:bf:14:48:69:55:f5:cc:1b:ef:1d:d3:9c:4f:38:40:17:
         b4:f1:ea:b6:a9:9b:a2:aa:25:8f:7b:c3:9f:cd:fa:c4:43:67:
         2b:c6:e3:b9:1f:97:59:08:0d:cd:5e:ba:5d:a5:b7:81:fa:27:
         2d:b0:c6:fd:fe:cd:dd:3b:ce:2d:a5:b4:29:54:b5:5a:c7:8f:
         b5:4b:bd:da:bd:b0:40:bd:d4:02:ba:45:c6:e4:56:4f:e6:d7:
         9e:e5:a3:5a:e8:ed:3f:69:83:20:1a:0f:b2:7e:93:02:ec:e5:
         7d:5c:97:a8:1d:11:c7:fa:6b:7d:08:0c:3d:72:cf:72:5c:c0:
         f0:8c:91:53:b4:54:8e:d8:66:1c:11:6a:fc:33:bd:bd:57:20:
         36:5c:9e:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULSiV1cBk68O+Oj2Cdgi6xnsivIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3OUI4QzU1M0U1RTBFREZEMjBCN0I4Q0IzMjNFQUM0
REIxOTJBNzAeFw0yNDA0MDQxMzI0NTJaFw0yNTA0MDMxMzI5NTJaMDMxMTAvBgNV
BAMTKDg1OTVFRTI1RDc2QkRBNTk3RkY0MkZFRjkwQTFBRjczMTkwQzE3OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjN6fSCM4FKO/DQqtejUDbYHJ/
nr1J699jvlpoICuc3yCUnJZZJWQMdK/7h0M5iSGZbYvLWXrFHpUPi4B/z9LhOUOI
w4bjz12QvMlRGfZ0OZLeUrtwSE+l23GCu2DuF94mHK+CF+rJsuqYK0xfa4cIlm0j
PcqpJFQOuUZRVZ0pN64Bn5ykpb23E8h4SW1etf71n3plhRYcf+OtBdztC8X47/ul
hxzY6y65qS9xK5gxbbfjYDvq0IHb+B3LPOwCQyJVvonyVPBaha133a+YV5T6nYdf
bFIFOJfeyrAiMnJ0xImtgOsj5r9MjGtzz9mqE3QdIaOMqYmEnucXb8VIVnkNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhZXuJddr2ll/9C/vkKGvcxkMF4wwHwYDVR0j
BBgwFoAUmXm4xVPl4O39ILe4yzI+rE2xkqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMS85OTc5QjhDNTUzRTVFMEVERkQyMEI3QjhDQjMyM0VBQzREQjE5MkE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NzlCOEM1NTNFNUUwRURG
RDIwQjdCOENCMzIzRUFDNERCMTkyQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzEv
MzEzMzM4MmUzMTM4MzUyZTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKuSowDQYJKoZIhvcNAQELBQADggEBAHdrTRrk
1/96sYZYCo8a7ASSDLzkWr7gfE/sWJv3EOUg1uujDjujXovwAHO6SFyFuiiN6nJq
uU4Eyw+U6c+z4kKlqptn8i8dNQ5HajHOGhn+2gaT5SV9GDwoy6nIrk3QEl49WcXs
+HAC00O8Bb0HvxRIaVX1zBvvHdOcTzhAF7Tx6rapm6KqJY97w5/N+sRDZyvG47kf
l1kIDc1eul2lt4H6Jy2wxv3+zd07zi2ltClUtVrHj7VLvdq9sEC91AK6RcbkVk/m
157lo1ro7T9pgyAaD7J+kwLs5X1cl6gdEcf6a30IDD1yz3JcwPCMkVO0VI7YZhwR
avwzvb1XIDZcnnk=
-----END CERTIFICATE-----
Generated at Mon Jul 15 13:08:14 2024 by rpki-client on console-fra.rpki-client.org