Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32322d3232203d3e20323635383936.roa
File:                     3132382e3230312e3138382e302f32322d3232203d3e20323635383936.roa (raw, json)
Hash identifier:          c9wNUlwu1egVM/XUr+2/wwWea0bZcLlOLo9rXpk/Nq0=
Subject key identifier:   86:07:36:DB:29:F1:43:4C:98:BB:29:5C:F6:5C:CF:BD:E9:F1:92:DC
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       2E21AB39C9361F66AC5FA8748BD9BA0484B6E2FE
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32322d3232203d3e20323635383936.roa
Signing time:             Thu 30 Nov 2023 19:25:06 +0000
ROA not before:           Thu 30 Nov 2023 19:20:06 +0000
ROA not after:            Thu 28 Nov 2024 19:25:06 +0000
asID:                     265896
IP address blocks:        128.201.188.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:21:ab:39:c9:36:1f:66:ac:5f:a8:74:8b:d9:ba:04:84:b6:e2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Nov 30 19:20:06 2023 GMT
            Not After : Nov 28 19:25:06 2024 GMT
        Subject: CN=860736DB29F1434C98BB295CF65CCFBDE9F192DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:60:e1:03:65:5f:bc:a5:f8:89:f4:ed:66:
                    a9:0a:ca:f5:fc:62:32:5a:60:2d:0f:e8:62:2b:82:
                    0f:94:32:19:79:95:20:04:6b:83:0d:6a:40:78:bc:
                    54:05:5c:15:65:93:7b:5a:35:a9:22:fd:32:64:31:
                    00:3b:32:05:fc:05:b1:3f:dd:13:03:e8:98:d1:f5:
                    9c:c2:02:38:05:83:2d:6c:ab:8f:5e:7b:03:ca:da:
                    d0:0a:fe:6c:bb:e4:4e:ff:45:a2:d8:ed:4e:2c:b6:
                    7d:47:20:48:23:ea:9b:d5:93:c5:9f:db:b8:d6:db:
                    ca:dc:31:bc:07:32:49:6f:3d:b4:1f:0b:9c:29:01:
                    cc:ba:1f:7d:4a:20:11:1f:aa:08:73:be:ae:8f:81:
                    00:f1:33:1a:1e:81:57:21:f6:d0:94:f4:ea:a1:ae:
                    4c:b7:3f:fa:3d:ad:fc:02:e6:0e:88:c7:34:c9:33:
                    60:47:a1:b3:52:d1:1e:fc:f3:55:71:0a:39:81:3e:
                    e2:c2:23:78:ab:1d:b2:57:f2:47:90:fe:56:aa:29:
                    5c:ba:d2:10:19:ed:21:8e:de:4e:29:1a:db:ea:34:
                    5b:d1:93:2c:76:1d:47:d9:19:c8:03:59:91:dc:7f:
                    b1:c0:2e:d9:2a:14:df:fd:fd:f6:85:ec:b7:f7:e5:
                    94:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:07:36:DB:29:F1:43:4C:98:BB:29:5C:F6:5C:CF:BD:E9:F1:92:DC
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32322d3232203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:65:8e:cb:a9:1d:32:a2:eb:4d:5a:d3:39:2e:2e:04:2b:
         24:74:15:ce:83:56:ba:8c:ef:4c:1e:ef:43:c6:7c:4c:b3:0a:
         ae:52:6f:b4:19:d9:58:2a:eb:0b:7f:85:ca:23:76:57:f5:fe:
         4e:35:f9:bc:ae:da:13:dd:c6:7b:7a:75:82:ca:67:8c:bd:fa:
         80:03:e6:a4:31:71:68:79:0c:b2:4f:94:42:9b:84:f9:e0:01:
         a7:28:18:0f:23:ff:ef:00:2c:00:6b:61:a2:e7:ab:b6:45:e4:
         ce:fd:ba:c1:7e:0f:a0:31:97:8c:15:fa:0a:d9:4a:43:8f:41:
         a6:f4:2c:8e:df:00:c0:f3:c0:c0:bb:75:5a:ca:02:4c:81:6d:
         4c:fd:c9:b7:ac:9c:10:2f:fe:1d:e8:aa:e6:6b:38:1e:de:2e:
         c2:ee:e6:cf:0f:93:cb:a9:fd:6b:8d:d6:6f:a0:ce:ae:3b:b7:
         09:2f:b5:1f:82:3a:9e:95:0a:fd:7f:c6:6b:1f:6d:1d:bf:bb:
         ed:2e:31:3e:b6:dd:c2:25:55:42:6e:09:4a:bd:84:88:c1:e4:
         7a:e6:29:c6:c0:55:9d:ec:e4:5b:0e:07:8e:da:75:e7:bf:77:
         1f:e3:95:d2:f1:5f:76:44:3c:92:29:2a:d6:11:b0:18:46:4c:
         0c:6c:ac:d0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULiGrOck2H2asX6h0i9m6BIS24v4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdDNEE1REE0REQwODVCRDc5RkNBQTEwMUM1RDhFNTcz
RkM5RjU4NDAeFw0yMzExMzAxOTIwMDZaFw0yNDExMjgxOTI1MDZaMDMxMTAvBgNV
BAMTKDg2MDczNkRCMjlGMTQzNEM5OEJCMjk1Q0Y2NUNDRkJERTlGMTkyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHK2DhA2VfvKX4ifTtZqkKyvX8
YjJaYC0P6GIrgg+UMhl5lSAEa4MNakB4vFQFXBVlk3taNaki/TJkMQA7MgX8BbE/
3RMD6JjR9ZzCAjgFgy1sq49eewPK2tAK/my75E7/RaLY7U4stn1HIEgj6pvVk8Wf
27jW28rcMbwHMklvPbQfC5wpAcy6H31KIBEfqghzvq6PgQDxMxoegVch9tCU9Oqh
rky3P/o9rfwC5g6IxzTJM2BHobNS0R7881VxCjmBPuLCI3irHbJX8keQ/laqKVy6
0hAZ7SGO3k4pGtvqNFvRkyx2HUfZGcgDWZHcf7HALtkqFN/9/faF7Lf35ZSBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhgc22ynxQ0yYuylc9lzPvenxktwwHwYDVR0j
BBgwFoAUd8Sl2k3Qhb15/KoQHF2OVz/J9YQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR2dnNjanYxak1VTHNRWUNhcjNLVzVDcXJVcjNCZ3Zidkx5Zmg1WlY5
ckYvMC83N0M0QTVEQTRERDA4NUJENzlGQ0FBMTAxQzVEOEU1NzNGQzlGNTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QzRBNURBNEREMDg1QkQ3
OUZDQUExMDFDNUQ4RTU3M0ZDOUY1ODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0dnZzY2p2MWpNVUxzUVlDYXIzS1c1Q3FyVXIzQmd2YnZMeWZoNVpWOXJGLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM4MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoDJvDANBgkqhkiG9w0BAQsFAAOCAQEAgDpl
jsupHTKi601a0zkuLgQrJHQVzoNWuozvTB7vQ8Z8TLMKrlJvtBnZWCrrC3+FyiN2
V/X+TjX5vK7aE93Ge3p1gspnjL36gAPmpDFxaHkMsk+UQpuE+eABpygYDyP/7wAs
AGthouertkXkzv26wX4PoDGXjBX6CtlKQ49BpvQsjt8AwPPAwLt1WsoCTIFtTP3J
t6ycEC/+Heiq5ms4Ht4uwu7mzw+Ty6n9a43Wb6DOrju3CS+1H4I6npUK/X/Gax9t
Hb+77S4xPrbdwiVVQm4JSr2EiMHkeuYpxsBVnezkWw4Hjtp15793H+OV0vFfdkQ8
kikq1hGwGEZMDGys0A==
-----END CERTIFICATE-----
Generated at Sun Mar 24 12:17:51 2024 by rpki-client on console-fra.rpki-client.org