Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32342d3234203d3e20323635383936.roa
File:                     3132382e3230312e3138382e302f32342d3234203d3e20323635383936.roa (raw, json)
Hash identifier:          vwW1hAAirrhCUD7vraLfPwehSZmb0agjhrFpqt9ftzg=
Subject key identifier:   E6:95:2A:BC:E6:FF:6B:71:E7:66:3C:9C:96:2C:5B:44:18:65:14:BA
Certificate issuer:       /CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
Certificate serial:       55B23BD61A550C676B497E0E9726416DC310AEB0
Authority key identifier: 77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32342d3234203d3e20323635383936.roa
Signing time:             Wed 29 Nov 2023 04:32:46 +0000
ROA not before:           Wed 29 Nov 2023 04:27:46 +0000
ROA not after:            Wed 27 Nov 2024 04:32:46 +0000
asID:                     265896
IP address blocks:        128.201.188.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:b2:3b:d6:1a:55:0c:67:6b:49:7e:0e:97:26:41:6d:c3:10:ae:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584
        Validity
            Not Before: Nov 29 04:27:46 2023 GMT
            Not After : Nov 27 04:32:46 2024 GMT
        Subject: CN=E6952ABCE6FF6B71E7663C9C962C5B44186514BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:07:d5:bb:6a:ff:64:a6:08:86:02:71:bb:
                    30:e3:79:df:5b:a3:5c:0e:6c:15:ff:2e:5f:1d:d4:
                    28:24:2a:1b:b0:a2:35:4f:b6:7e:b0:e9:1d:a9:38:
                    37:24:a4:3b:6a:a0:8d:1a:2e:15:91:33:97:ca:16:
                    40:dd:8c:31:35:46:ad:f8:2b:7b:e9:06:c7:e6:9b:
                    1a:ba:6d:a2:bd:91:31:1a:f0:b7:e5:05:d1:f1:59:
                    21:78:89:af:b7:c6:b3:e5:ac:59:a5:4b:13:3a:83:
                    dc:4a:b5:12:54:6b:76:7c:df:61:87:7d:7a:db:12:
                    b1:32:02:6c:2a:d2:71:89:c6:38:85:29:90:93:76:
                    98:d9:93:c4:f7:40:5d:bb:f6:f1:3b:ce:1c:23:b2:
                    13:12:9e:ad:18:67:85:cb:33:4c:99:ee:85:bf:f1:
                    64:d0:4f:89:fa:41:b0:9f:95:1c:37:fa:37:06:da:
                    b6:f9:76:c5:89:b9:59:4a:34:6a:19:b6:99:74:5b:
                    d4:41:6b:6c:82:59:4c:43:6e:dc:91:82:97:1a:30:
                    b5:f7:45:62:0d:d3:3d:41:49:31:30:ab:cc:a7:f2:
                    80:42:61:e6:56:ac:fa:f3:8b:54:db:09:3f:be:ee:
                    e3:45:95:b5:1d:f2:b6:83:65:0f:7f:ab:24:0b:3e:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:2A:BC:E6:FF:6B:71:E7:66:3C:9C:96:2C:5B:44:18:65:14:BA
            X509v3 Authority Key Identifier:
                keyid:77:C4:A5:DA:4D:D0:85:BD:79:FC:AA:10:1C:5D:8E:57:3F:C9:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77C4A5DA4DD085BD79FCAA101C5D8E573FC9F584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftvvscjv1jMULsQYCar3KW5CqrUr3BgvbvLyfh5ZV9rF/0/3132382e3230312e3138382e302f32342d3234203d3e20323635383936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:58:77:a4:e0:ad:31:e1:92:4a:87:ad:87:10:74:4f:bc:97:
         c4:b0:46:3f:a1:d0:be:42:1b:5c:1b:c6:07:e7:53:8f:b5:ed:
         7c:c5:c1:1b:be:f4:57:8f:1e:62:3f:82:83:8b:bd:80:6f:fa:
         d0:69:3b:86:cc:aa:7b:13:d8:ca:42:7d:3d:9a:ea:7b:1e:86:
         23:c7:36:74:f8:b4:59:c5:4d:38:ea:c2:c1:5b:cb:b5:a0:9a:
         11:e6:0e:37:90:73:cf:6d:28:00:8e:4e:06:65:6a:2f:25:89:
         f6:70:ae:63:b4:15:41:bb:90:45:ac:bd:0a:75:ee:a2:96:c1:
         48:47:ca:74:10:83:6f:31:09:da:85:e3:72:18:ca:26:47:7c:
         50:f3:87:4d:dd:fc:8b:39:69:0b:07:9e:fe:fd:f0:ec:44:90:
         b3:8b:b8:67:dc:c0:89:fd:74:12:92:e4:b1:e0:27:20:0d:f6:
         5f:d2:0a:ea:15:c4:50:50:9a:df:36:c2:c0:12:5b:eb:0a:5a:
         98:33:ad:94:05:00:ca:64:9d:96:f0:ac:b3:d4:aa:1e:9c:0a:
         a2:e9:a5:fc:07:2f:ce:8b:78:3d:0b:48:ed:52:8f:b7:c8:62:
         46:02:1b:ae:e7:86:41:dd:4c:7d:59:6c:b9:eb:7d:0c:87:23:
         27:73:5e:97
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVbI71hpVDGdrSX4OlyZBbcMQrrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdDNEE1REE0REQwODVCRDc5RkNBQTEwMUM1RDhFNTcz
RkM5RjU4NDAeFw0yMzExMjkwNDI3NDZaFw0yNDExMjcwNDMyNDZaMDMxMTAvBgNV
BAMTKEU2OTUyQUJDRTZGRjZCNzFFNzY2M0M5Qzk2MkM1QjQ0MTg2NTE0QkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIAfVu2r/ZKYIhgJxuzDjed9b
o1wObBX/Ll8d1CgkKhuwojVPtn6w6R2pODckpDtqoI0aLhWRM5fKFkDdjDE1Rq34
K3vpBsfmmxq6baK9kTEa8LflBdHxWSF4ia+3xrPlrFmlSxM6g9xKtRJUa3Z832GH
fXrbErEyAmwq0nGJxjiFKZCTdpjZk8T3QF279vE7zhwjshMSnq0YZ4XLM0yZ7oW/
8WTQT4n6QbCflRw3+jcG2rb5dsWJuVlKNGoZtpl0W9RBa2yCWUxDbtyRgpcaMLX3
RWIN0z1BSTEwq8yn8oBCYeZWrPrzi1TbCT++7uNFlbUd8raDZQ9/qyQLPntpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5pUqvOb/a3HnZjyclixbRBhlFLowHwYDVR0j
BBgwFoAUd8Sl2k3Qhb15/KoQHF2OVz/J9YQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnR2dnNjanYxak1VTHNRWUNhcjNLVzVDcXJVcjNCZ3Zidkx5Zmg1WlY5
ckYvMC83N0M0QTVEQTRERDA4NUJENzlGQ0FBMTAxQzVEOEU1NzNGQzlGNTg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QzRBNURBNEREMDg1QkQ3
OUZDQUExMDFDNUQ4RTU3M0ZDOUY1ODQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z0dnZzY2p2MWpNVUxzUVlDYXIzS1c1Q3FyVXIzQmd2YnZMeWZoNVpWOXJGLzAv
MzEzMjM4MmUzMjMwMzEyZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM4MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIDJvDANBgkqhkiG9w0BAQsFAAOCAQEAOFh3
pOCtMeGSSoethxB0T7yXxLBGP6HQvkIbXBvGB+dTj7XtfMXBG770V48eYj+Cg4u9
gG/60Gk7hsyqexPYykJ9PZrqex6GI8c2dPi0WcVNOOrCwVvLtaCaEeYON5Bzz20o
AI5OBmVqLyWJ9nCuY7QVQbuQRay9CnXuopbBSEfKdBCDbzEJ2oXjchjKJkd8UPOH
Td38izlpCwee/v3w7ESQs4u4Z9zAif10EpLkseAnIA32X9IK6hXEUFCa3zbCwBJb
6wpamDOtlAUAymSdlvCss9SqHpwKouml/Acvzot4PQtI7VKPt8hiRgIbrueGQd1M
fVlsuet9DIcjJ3Nelw==
-----END CERTIFICATE-----
Generated at Sun Mar 24 12:17:51 2024 by rpki-client on console-fra.rpki-client.org