Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3332203d3e20323632363434.roa
File:                     3138372e31372e3230382e302f32302d3332203d3e20323632363434.roa (raw, json)
Hash identifier:          iGv7pxr3u5xTvdXRLgARnZjwkvWmDrl4icFFe2Ckg4A=
Subject key identifier:   FF:77:8D:82:19:57:D5:14:88:21:CA:3C:B6:17:14:23:CC:F0:EE:C0
Certificate issuer:       /CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
Certificate serial:       23C1320B4A55E15A7B935F28122753DDC21D8CA1
Authority key identifier: 8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3332203d3e20323632363434.roa
Signing time:             Wed 17 Jul 2024 21:29:18 +0000
ROA not before:           Wed 17 Jul 2024 21:24:18 +0000
ROA not after:            Wed 16 Jul 2025 21:29:18 +0000
asID:                     262644
IP address blocks:        187.17.208.0/20 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:32:0b:4a:55:e1:5a:7b:93:5f:28:12:27:53:dd:c2:1d:8c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA3A7365B156022A19D3103A9AC15C16D55CD75
        Validity
            Not Before: Jul 17 21:24:18 2024 GMT
            Not After : Jul 16 21:29:18 2025 GMT
        Subject: CN=FF778D821957D5148821CA3CB6171423CCF0EEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:db:3f:55:0a:e4:cc:35:f4:2d:06:03:d7:a8:
                    87:a2:b7:e7:d7:7c:f0:cd:12:de:40:99:14:eb:2e:
                    13:f3:32:b2:00:da:81:18:7f:da:cb:67:c4:25:1f:
                    43:b3:37:aa:e7:67:83:69:ff:76:e2:62:d1:f7:d4:
                    3e:42:ae:a2:f2:3f:2a:b2:a6:1c:7e:ca:0c:8b:d6:
                    73:7c:8e:89:25:0f:e8:17:eb:de:32:f6:e5:3d:34:
                    0b:3e:48:99:30:db:0f:ae:4c:4b:21:5f:8c:1c:f9:
                    e1:eb:2a:50:f3:8d:23:2d:60:8c:81:77:0f:c3:35:
                    12:6f:20:c4:f8:17:01:10:6a:0d:35:e3:75:34:cf:
                    56:50:8e:0f:c4:84:cc:c9:47:ac:33:55:83:37:7c:
                    cb:82:f2:74:76:4b:25:17:6d:85:df:59:59:eb:49:
                    09:b5:73:74:bd:89:84:18:98:c8:ba:b0:db:e3:f4:
                    aa:d9:8b:25:fc:93:5f:23:55:3e:fd:72:56:59:be:
                    6a:70:4c:e9:c0:a4:c3:98:2f:52:1b:1d:39:32:19:
                    58:7a:e0:a3:1e:28:6b:03:56:d6:cf:77:bd:54:de:
                    f0:dd:66:02:13:85:31:36:df:de:22:ae:c6:36:7a:
                    6a:e4:fe:cf:37:70:a2:45:66:16:49:a1:b9:3b:24:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:8D:82:19:57:D5:14:88:21:CA:3C:B6:17:14:23:CC:F0:EE:C0
            X509v3 Authority Key Identifier:
                keyid:8C:A3:A7:36:5B:15:60:22:A1:9D:31:03:A9:AC:15:C1:6D:55:CD:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/8CA3A7365B156022A19D3103A9AC15C16D55CD75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CA3A7365B156022A19D3103A9AC15C16D55CD75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3GDofK3TUzseY4XczUnAhWrzW4djwK5zG7t1VvG9jr1/0/3138372e31372e3230382e302f32302d3332203d3e20323632363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:86:3f:4f:4f:ce:e6:f8:7f:bd:35:8f:a9:bc:85:61:6f:
         d7:c4:dc:ca:a8:53:b5:bf:df:62:4c:fa:e4:5a:a7:2b:74:0f:
         3c:06:32:d7:74:03:47:f5:16:09:3e:55:6a:0b:09:4d:e8:c7:
         ef:51:d4:7d:bf:c0:bc:59:be:f9:de:5c:27:ee:4e:c5:c1:8d:
         90:7d:41:aa:f2:b3:14:c7:21:00:3d:95:05:c3:23:db:ad:fa:
         60:51:87:20:14:be:36:a3:be:72:10:d7:c0:7a:e5:15:65:3e:
         ed:01:06:dd:9e:41:69:c2:d5:e6:ef:30:3c:5c:65:9a:44:db:
         08:99:9c:34:5f:a5:0f:5e:e7:9e:4c:48:7b:7e:40:80:93:c4:
         82:d1:3c:7b:a9:6c:0d:84:05:90:c8:07:4c:31:cf:02:40:81:
         90:50:40:bc:d7:a8:1e:4f:3d:de:39:4b:2c:d9:31:43:74:6c:
         48:ac:4f:33:b9:b0:a7:f0:e5:71:b8:6b:f4:da:d1:22:e4:68:
         c5:7d:9e:44:22:46:42:b8:b6:a0:df:15:b5:01:42:77:da:ca:
         b2:cb:e7:13:97:a0:f8:f2:87:c9:40:10:d0:5e:e8:b5:d5:7b:
         33:8a:e2:8a:d9:8c:74:fe:5b:f5:f4:86:c4:36:3a:30:c3:dc:
         65:69:5e:2d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI8EyC0pV4Vp7k18oEidT3cIdjKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENBM0E3MzY1QjE1NjAyMkExOUQzMTAzQTlBQzE1QzE2
RDU1Q0Q3NTAeFw0yNDA3MTcyMTI0MThaFw0yNTA3MTYyMTI5MThaMDMxMTAvBgNV
BAMTKEZGNzc4RDgyMTk1N0Q1MTQ4ODIxQ0EzQ0I2MTcxNDIzQ0NGMEVFQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2z9VCuTMNfQtBgPXqIeit+fX
fPDNEt5AmRTrLhPzMrIA2oEYf9rLZ8QlH0OzN6rnZ4Np/3biYtH31D5CrqLyPyqy
phx+ygyL1nN8joklD+gX694y9uU9NAs+SJkw2w+uTEshX4wc+eHrKlDzjSMtYIyB
dw/DNRJvIMT4FwEQag0143U0z1ZQjg/EhMzJR6wzVYM3fMuC8nR2SyUXbYXfWVnr
SQm1c3S9iYQYmMi6sNvj9KrZiyX8k18jVT79clZZvmpwTOnApMOYL1IbHTkyGVh6
4KMeKGsDVtbPd71U3vDdZgIThTE2394irsY2emrk/s83cKJFZhZJobk7JOAtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/3eNghlX1RSIIco8thcUI8zw7sAwHwYDVR0j
BBgwFoAUjKOnNlsVYCKhnTEDqawVwW1VzXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNHRG9mSzNUVXpzZVk0WGN6VW5BaFdyelc0ZGp3SzV6Rzd0MVZ2Rzlq
cjEvMC84Q0EzQTczNjVCMTU2MDIyQTE5RDMxMDNBOUFDMTVDMTZENTVDRDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQTNBNzM2NUIxNTYwMjJB
MTlEMzEwM0E5QUMxNUMxNkQ1NUNENzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czR0RvZkszVFV6c2VZNFhjelVuQWhXcnpXNGRqd0s1ekc3dDFWdkc5anIxLzAv
MzEzODM3MmUzMTM3MmUzMjMwMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNjM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7EdAwDQYJKoZIhvcNAQELBQADggEBAB+khj9P
T87m+H+9NY+pvIVhb9fE3MqoU7W/32JM+uRapyt0DzwGMtd0A0f1Fgk+VWoLCU3o
x+9R1H2/wLxZvvneXCfuTsXBjZB9QarysxTHIQA9lQXDI9ut+mBRhyAUvjajvnIQ
18B65RVlPu0BBt2eQWnC1ebvMDxcZZpE2wiZnDRfpQ9e555MSHt+QICTxILRPHup
bA2EBZDIB0wxzwJAgZBQQLzXqB5PPd45SyzZMUN0bEisTzO5sKfw5XG4a/Ta0SLk
aMV9nkQiRkK4tqDfFbUBQnfayrLL5xOXoPjyh8lAENBe6LXVezOK4orZjHT+W/X0
hsQ2OjDD3GVpXi0=
-----END CERTIFICATE-----
Generated at Sun Aug 18 20:25:15 2024 by rpki-client on console-ams.rpki-client.org