Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32342d3234203d3e203631373337.roa
File:                     3133312e37322e3138322e302f32342d3234203d3e203631373337.roa (raw, json)
Hash identifier:          IvRAd7bxcPTpqMzNU1jo/5b84snIZ5e7MFRI1CNutx8=
Subject key identifier:   C4:D8:DC:21:47:65:F5:16:4C:14:8B:A9:9F:04:79:1A:64:9D:0B:8F
Certificate issuer:       /CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
Certificate serial:       53E1880D481AD8D7C8F1253FA6508B240105C47D
Authority key identifier: D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32342d3234203d3e203631373337.roa
Signing time:             Wed 14 Aug 2024 19:45:38 +0000
ROA not before:           Wed 14 Aug 2024 19:40:38 +0000
ROA not after:            Wed 13 Aug 2025 19:45:38 +0000
asID:                     61737
IP address blocks:        131.72.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e1:88:0d:48:1a:d8:d7:c8:f1:25:3f:a6:50:8b:24:01:05:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7855CC722E0F5F3FCF29986C87BE11E762A96B7
        Validity
            Not Before: Aug 14 19:40:38 2024 GMT
            Not After : Aug 13 19:45:38 2025 GMT
        Subject: CN=C4D8DC214765F5164C148BA99F04791A649D0B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ea:3c:98:27:65:71:65:5b:e0:6c:b1:05:17:
                    2b:85:ff:12:89:4e:0c:68:05:bd:b9:29:c5:0a:75:
                    09:e3:1a:69:90:b7:04:35:e7:0b:84:2b:fd:ea:ac:
                    58:c3:18:3b:68:8d:a3:05:e0:1e:95:4a:09:c0:d8:
                    20:14:d8:86:ae:a3:7e:0e:6e:80:02:9d:72:c5:b7:
                    21:49:e4:dd:03:6c:fd:15:07:62:d5:fb:9b:c9:41:
                    a9:38:45:cf:74:28:25:42:e9:0b:7e:98:69:3e:91:
                    c1:9c:b4:de:38:0a:f5:8e:42:42:16:40:02:06:ab:
                    e2:de:ed:9a:0c:09:d7:0c:97:90:07:d1:48:07:c9:
                    c8:85:bc:b3:88:52:81:98:56:c5:3b:b3:5e:1f:51:
                    a3:07:b1:d3:32:65:46:eb:e0:f7:b4:67:e5:29:2a:
                    80:8c:b6:f9:33:4f:d4:ca:5e:b6:26:38:64:b3:4a:
                    e3:9e:70:d7:a7:81:b7:74:af:b6:5e:64:8e:50:c5:
                    86:3c:5f:14:e4:3c:93:1d:31:df:db:ca:e3:2f:14:
                    b6:10:8f:39:26:12:c3:c0:43:95:75:ac:47:5e:9e:
                    04:00:41:49:d4:24:e2:c6:05:a5:c6:ee:df:4e:e0:
                    61:1f:51:46:63:0f:0b:ca:ed:57:db:f1:21:6c:ef:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D8:DC:21:47:65:F5:16:4C:14:8B:A9:9F:04:79:1A:64:9D:0B:8F
            X509v3 Authority Key Identifier:
                keyid:D7:85:5C:C7:22:E0:F5:F3:FC:F2:99:86:C8:7B:E1:1E:76:2A:96:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7855CC722E0F5F3FCF29986C87BE11E762A96B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fm9Zp2vc53noJTQoT5FzP3EbxoBdXn9cdqV1HvE7RSbu/0/3133312e37322e3138322e302f32342d3234203d3e203631373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ee:e3:bf:64:3b:7b:85:61:95:f2:ea:3b:96:42:5f:89:95:
         5c:88:ff:c7:47:81:32:67:0c:6e:3f:40:02:a0:a8:46:e2:c0:
         92:5a:f1:b8:9b:9f:2a:85:f7:f0:53:01:1e:d9:cd:f9:e9:41:
         b2:e5:db:c0:02:27:c4:c4:b1:b5:fd:fc:f8:d8:91:48:bb:53:
         22:04:6f:9e:a5:38:eb:b3:18:6b:34:39:de:30:49:fd:58:6d:
         1b:8f:0f:5d:4e:7f:15:ed:38:ac:1e:7b:64:37:d4:d5:f5:11:
         ff:26:6e:dc:be:69:d9:f4:3d:d5:c1:8e:47:78:ea:25:d3:c8:
         d5:45:2b:33:9e:87:c3:33:5f:d8:9d:2b:98:a8:b5:96:5a:f4:
         a6:6e:6f:39:f4:3c:8c:2f:d1:59:25:aa:71:27:b7:86:96:90:
         1e:18:76:8a:95:69:d5:68:83:7a:25:3d:84:db:75:28:0f:8f:
         3b:b9:b9:34:d3:b5:d9:3a:fd:d9:00:56:47:5b:c0:c7:e7:6b:
         c1:3c:61:cb:19:93:ec:10:5e:56:8e:3e:94:dd:b2:66:97:e6:
         fe:6f:0c:f6:a6:df:18:f3:6f:45:af:3f:32:59:c6:a8:87:65:
         2a:0e:fc:72:a5:dd:f0:a6:39:72:72:1c:e7:ae:d1:e3:90:2c:
         cc:f1:62:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU+GIDUga2NfI8SU/plCLJAEFxH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc4NTVDQzcyMkUwRjVGM0ZDRjI5OTg2Qzg3QkUxMUU3
NjJBOTZCNzAeFw0yNDA4MTQxOTQwMzhaFw0yNTA4MTMxOTQ1MzhaMDMxMTAvBgNV
BAMTKEM0RDhEQzIxNDc2NUY1MTY0QzE0OEJBOTlGMDQ3OTFBNjQ5RDBCOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK6jyYJ2VxZVvgbLEFFyuF/xKJ
TgxoBb25KcUKdQnjGmmQtwQ15wuEK/3qrFjDGDtojaMF4B6VSgnA2CAU2Iauo34O
boACnXLFtyFJ5N0DbP0VB2LV+5vJQak4Rc90KCVC6Qt+mGk+kcGctN44CvWOQkIW
QAIGq+Le7ZoMCdcMl5AH0UgHyciFvLOIUoGYVsU7s14fUaMHsdMyZUbr4Pe0Z+Up
KoCMtvkzT9TKXrYmOGSzSuOecNengbd0r7ZeZI5QxYY8XxTkPJMdMd/byuMvFLYQ
jzkmEsPAQ5V1rEdengQAQUnUJOLGBaXG7t9O4GEfUUZjDwvK7Vfb8SFs7wbVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxNjcIUdl9RZMFIupnwR5GmSdC48wHwYDVR0j
BBgwFoAU14VcxyLg9fP88pmGyHvhHnYqlrcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRm05WnAydmM1M25vSlRRb1Q1RnpQM0VieG9CZFhuOWNkcVYxSHZFN1JT
YnUvMC9ENzg1NUNDNzIyRTBGNUYzRkNGMjk5ODZDODdCRTExRTc2MkE5NkI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3ODU1Q0M3MjJFMEY1RjNG
Q0YyOTk4NkM4N0JFMTFFNzYyQTk2QjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZtOVpwMnZjNTNub0pUUW9UNUZ6UDNFYnhvQmRYbjljZHFWMUh2RTdSU2J1LzAv
MzEzMzMxMmUzNzMyMmUzMTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzczMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAg0i2MA0GCSqGSIb3DQEBCwUAA4IBAQA27uO/ZDt7
hWGV8uo7lkJfiZVciP/HR4EyZwxuP0ACoKhG4sCSWvG4m58qhffwUwEe2c356UGy
5dvAAifExLG1/fz42JFIu1MiBG+epTjrsxhrNDneMEn9WG0bjw9dTn8V7TisHntk
N9TV9RH/Jm7cvmnZ9D3VwY5HeOol08jVRSsznofDM1/YnSuYqLWWWvSmbm859DyM
L9FZJapxJ7eGlpAeGHaKlWnVaIN6JT2E23UoD487ubk007XZOv3ZAFZHW8DH52vB
PGHLGZPsEF5Wjj6U3bJml+b+bwz2pt8Y829Frz8yWcaoh2UqDvxypd3wpjlychzn
rtHjkCzM8WI7
-----END CERTIFICATE-----
Generated at Mon Oct 14 21:08:42 2024 by rpki-client on console-fra.rpki-client.org