Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/3139302e3131322e3137322e302f32322d3234203d3e20323730323431.roa
File:                     3139302e3131322e3137322e302f32322d3234203d3e20323730323431.roa (raw, json)
Hash identifier:          fbR3E4lPc6kDUYyVQ02Y5l9agOXwCwmgJMdFBNw+x7w=
Subject key identifier:   1C:21:FD:52:04:34:FC:49:61:8B:29:9F:9B:63:E7:4D:39:34:D6:B6
Certificate issuer:       /CN=19F044868A58985E9D4E89662B0D777CF6EBABB7
Certificate serial:       36B64350CA97B60352F29786E253DBECD369C3BF
Authority key identifier: 19:F0:44:86:8A:58:98:5E:9D:4E:89:66:2B:0D:77:7C:F6:EB:AB:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F044868A58985E9D4E89662B0D777CF6EBABB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/3139302e3131322e3137322e302f32322d3234203d3e20323730323431.roa
Signing time:             Fri 16 Aug 2024 18:25:14 +0000
ROA not before:           Fri 16 Aug 2024 18:20:14 +0000
ROA not after:            Fri 15 Aug 2025 18:25:14 +0000
asID:                     270241
IP address blocks:        190.112.172.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b6:43:50:ca:97:b6:03:52:f2:97:86:e2:53:db:ec:d3:69:c3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19F044868A58985E9D4E89662B0D777CF6EBABB7
        Validity
            Not Before: Aug 16 18:20:14 2024 GMT
            Not After : Aug 15 18:25:14 2025 GMT
        Subject: CN=1C21FD520434FC49618B299F9B63E74D3934D6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:d7:39:af:a8:cd:02:a7:92:fc:89:2f:c8:
                    6a:8d:d2:ce:c8:51:85:cc:40:28:92:88:12:50:36:
                    31:62:3b:65:09:fa:ac:ca:12:c3:66:b2:33:08:b4:
                    fb:84:e3:87:ea:58:a7:ba:33:68:fb:e3:e3:9e:db:
                    d8:89:30:88:0e:4a:c7:b9:5f:c2:6f:e5:80:f7:3a:
                    37:cd:0b:ec:cf:6a:66:24:79:19:87:fd:cc:7d:99:
                    0c:81:c4:b7:e2:e2:dd:41:f0:37:dc:2c:7c:3a:6d:
                    60:5c:c5:9e:e7:b2:c8:17:76:c4:2e:3a:b0:03:2b:
                    8d:88:04:b3:91:fb:4d:47:5f:d5:dc:b3:a2:05:10:
                    78:c8:e1:33:2e:5c:c5:b2:0f:c8:1e:7e:62:e9:73:
                    fd:f7:e3:a3:a8:aa:5e:5e:64:ce:98:a4:4e:6e:43:
                    92:dd:89:34:11:d2:b2:c3:76:62:19:77:7a:bc:d2:
                    75:55:ba:9a:b5:99:25:3e:fb:73:83:43:9a:d9:81:
                    91:86:f4:54:43:42:54:7b:2a:01:52:44:41:01:1c:
                    72:fe:3d:dd:b5:18:db:a2:6b:bb:88:45:9b:8d:a9:
                    7e:bf:0a:bb:c2:f6:a9:ba:51:33:67:1f:1a:62:3a:
                    54:8b:27:ed:37:5d:4a:44:a0:f8:69:84:01:2d:62:
                    2b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:FD:52:04:34:FC:49:61:8B:29:9F:9B:63:E7:4D:39:34:D6:B6
            X509v3 Authority Key Identifier:
                keyid:19:F0:44:86:8A:58:98:5E:9D:4E:89:66:2B:0D:77:7C:F6:EB:AB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/19F044868A58985E9D4E89662B0D777CF6EBABB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19F044868A58985E9D4E89662B0D777CF6EBABB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWvvvEzZ8giEcyXSRACabcUKnufSm6n5oKJfbyy8vh2J/0/3139302e3131322e3137322e302f32322d3234203d3e20323730323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:ec:19:7b:00:7c:0c:ad:36:f0:80:44:f7:cc:c7:c3:7d:04:
         24:ad:8b:9e:75:57:f1:78:68:42:ce:a6:28:57:f0:b9:e9:17:
         10:3a:d7:c6:f8:0c:f5:98:fa:9b:fa:62:b1:c1:71:38:ce:0d:
         f0:48:6b:51:88:dc:c8:9a:75:92:98:41:00:dc:fd:39:d6:3b:
         8e:e0:ae:6b:10:43:45:eb:fc:e9:80:c1:f9:c2:14:16:35:3e:
         a2:38:21:6a:be:87:fa:66:84:25:83:b8:19:9b:e0:31:80:99:
         da:7c:92:a9:5b:b1:70:f3:60:c5:5a:17:db:83:19:69:48:ce:
         05:bb:ee:97:5b:04:20:33:18:62:5a:d5:6b:63:27:d9:6a:89:
         f9:b7:2b:db:e3:7a:a4:a0:5a:51:99:88:23:e8:7b:35:e4:4e:
         f3:41:2a:b1:39:2e:7f:dc:fb:6f:17:09:6e:51:23:98:a9:b6:
         a1:9f:cc:cd:0f:d1:a1:48:6b:7e:fa:39:ce:63:7c:06:23:a5:
         b8:9a:3b:45:bc:e8:a8:70:59:98:54:b9:fb:49:60:50:d8:73:
         0e:4e:77:47:23:f9:44:a5:b2:2e:93:d1:c6:64:30:1b:d5:2e:
         48:4e:19:8b:64:0c:35:cd:b2:2d:f9:fd:97:bb:a3:bf:8c:90:
         0b:12:c2:9a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNrZDUMqXtgNS8peG4lPb7NNpw78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlGMDQ0ODY4QTU4OTg1RTlENEU4OTY2MkIwRDc3N0NG
NkVCQUJCNzAeFw0yNDA4MTYxODIwMTRaFw0yNTA4MTUxODI1MTRaMDMxMTAvBgNV
BAMTKDFDMjFGRDUyMDQzNEZDNDk2MThCMjk5RjlCNjNFNzREMzkzNEQ2QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEdc5r6jNAqeS/IkvyGqN0s7I
UYXMQCiSiBJQNjFiO2UJ+qzKEsNmsjMItPuE44fqWKe6M2j74+Oe29iJMIgOSse5
X8Jv5YD3OjfNC+zPamYkeRmH/cx9mQyBxLfi4t1B8DfcLHw6bWBcxZ7nssgXdsQu
OrADK42IBLOR+01HX9Xcs6IFEHjI4TMuXMWyD8gefmLpc/3346Ooql5eZM6YpE5u
Q5LdiTQR0rLDdmIZd3q80nVVupq1mSU++3ODQ5rZgZGG9FRDQlR7KgFSREEBHHL+
Pd21GNuia7uIRZuNqX6/CrvC9qm6UTNnHxpiOlSLJ+03XUpEoPhphAEtYisdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHCH9UgQ0/Elhiymfm2PnTTk01rYwHwYDVR0j
BBgwFoAUGfBEhopYmF6dTolmKw13fPbrq7cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRld2dnZFelo4Z2lFY3lYU1JBQ2FiY1VLbnVmU202bjVvS0pmYnl5OHZo
MkovMC8xOUYwNDQ4NjhBNTg5ODVFOUQ0RTg5NjYyQjBENzc3Q0Y2RUJBQkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE5RjA0NDg2OEE1ODk4NUU5
RDRFODk2NjJCMEQ3NzdDRjZFQkFCQjcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZXdnZ2RXpaOGdpRWN5WFNSQUNhYmNVS251ZlNtNm41b0tKZmJ5eTh2aDJKLzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wrDANBgkqhkiG9w0BAQsFAAOCAQEAR+wZ
ewB8DK028IBE98zHw30EJK2LnnVX8XhoQs6mKFfwuekXEDrXxvgM9Zj6m/piscFx
OM4N8EhrUYjcyJp1kphBANz9OdY7juCuaxBDRev86YDB+cIUFjU+ojghar6H+maE
JYO4GZvgMYCZ2nySqVuxcPNgxVoX24MZaUjOBbvul1sEIDMYYlrVa2Mn2WqJ+bcr
2+N6pKBaUZmII+h7NeRO80EqsTkuf9z7bxcJblEjmKm2oZ/MzQ/RoUhrfvo5zmN8
BiOluJo7RbzoqHBZmFS5+0lgUNhzDk53RyP5RKWyLpPRxmQwG9UuSE4Zi2QMNc2y
Lfn9l7ujv4yQCxLCmg==
-----END CERTIFICATE-----
Generated at Sat Sep 7 18:14:42 2024 by rpki-client on console-ams.rpki-client.org