Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa
File:                     3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa (raw, json)
Hash identifier:          bH0yCpXnj862NlzcKCkT9DZZZM76A+5/v3+BFqrOHLg=
Subject key identifier:   36:A1:E6:F6:4E:66:BF:D5:B2:6B:5B:DA:FF:2C:02:B8:E8:61:D2:20
Certificate issuer:       /CN=2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018
Certificate serial:       187B589E327E5A80F7AD6BA183A9307AD9607516
Authority key identifier: 2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa
Signing time:             Fri 08 Nov 2024 01:33:56 +0000
ROA not before:           Fri 08 Nov 2024 01:28:56 +0000
ROA not after:            Fri 07 Nov 2025 01:33:56 +0000
asID:                     266616
IP address blocks:        128.201.44.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7b:58:9e:32:7e:5a:80:f7:ad:6b:a1:83:a9:30:7a:d9:60:75:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018
        Validity
            Not Before: Nov  8 01:28:56 2024 GMT
            Not After : Nov  7 01:33:56 2025 GMT
        Subject: CN=36A1E6F64E66BFD5B26B5BDAFF2C02B8E861D220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9c:2d:3a:be:fd:9a:b2:2c:fd:89:2d:ac:c4:
                    c1:0d:22:93:f9:ff:b1:7c:0e:5e:89:f6:13:f7:b6:
                    f1:f9:ab:bf:a1:44:d8:4f:c9:81:d3:72:de:f7:62:
                    c6:71:b3:2d:b8:00:a2:5f:4a:41:d8:5f:e9:55:d3:
                    73:55:f0:ee:51:ee:61:2d:9b:cb:f4:43:32:39:03:
                    88:e2:96:be:11:6b:a9:1e:6a:71:4e:98:59:4d:92:
                    aa:d0:26:3d:60:d6:3c:04:67:78:2e:22:05:fd:ae:
                    95:11:78:ae:01:ea:c1:84:76:b4:4a:41:20:dd:db:
                    16:96:12:f5:e6:54:e5:39:b0:21:d0:a4:10:de:95:
                    49:5f:57:fa:c7:71:aa:fc:6c:f9:34:13:58:5b:2f:
                    1f:66:85:0c:e6:35:04:a8:82:07:6b:99:9f:d9:05:
                    cf:6a:24:76:fc:8c:7b:48:a4:f4:2e:90:de:e2:61:
                    8a:e8:38:5f:ae:fb:69:84:b8:97:94:37:dd:22:9a:
                    3e:61:5f:ad:03:32:b6:fe:fa:26:dd:41:4f:a5:86:
                    c5:4d:bc:ca:9c:af:f3:dd:74:35:25:d6:fe:f5:fc:
                    b9:cd:d8:a0:03:f0:ec:39:bc:e5:e2:01:32:2f:56:
                    b9:65:89:6d:ee:26:8f:b8:d7:b5:b4:94:04:1c:14:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A1:E6:F6:4E:66:BF:D5:B2:6B:5B:DA:FF:2C:02:B8:E8:61:D2:20
            X509v3 Authority Key Identifier:
                keyid:2D:AF:A5:37:AE:3F:C9:D5:F3:2D:D3:B8:2D:AA:BE:64:8A:2C:70:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DAFA537AE3FC9D5F32DD3B82DAABE648A2C7018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:d6:eb:fc:e4:50:e4:4d:c1:86:cb:df:74:67:2d:dd:e6:c0:
         dc:a9:18:37:6b:00:09:fd:a6:60:c7:04:d2:6d:cc:5b:9b:b5:
         29:30:a9:25:a4:0d:58:87:f4:78:82:33:15:f4:c0:70:8e:76:
         3e:33:03:b0:d6:8d:f8:35:f8:a4:d8:cd:fc:04:3c:1b:68:8d:
         10:88:fc:cb:2a:7c:b5:97:d3:72:08:b4:e9:9f:80:bd:1a:81:
         98:19:90:8f:0a:fa:0a:62:e3:34:be:4b:ad:3b:89:7a:5c:a7:
         ef:1e:a3:33:33:f9:4f:23:50:2a:51:09:5a:9d:2f:88:94:8d:
         c3:d8:2a:bb:cc:b5:74:6a:e5:14:2c:eb:f1:1f:a2:91:9a:23:
         93:0b:81:d2:18:ec:e1:04:63:42:98:2c:85:cf:6a:b0:8e:3b:
         91:c1:16:7f:6e:fd:fe:38:62:92:7b:d9:05:b0:2b:16:9b:35:
         a7:3f:54:b8:5b:56:45:b8:4d:7e:b0:79:74:a1:83:32:5a:66:
         55:07:56:32:26:00:bd:04:0f:c6:f3:3a:89:b4:70:64:b7:7b:
         2a:c1:27:98:6b:63:be:76:5c:bc:c5:98:2e:75:1e:8d:12:be:
         43:90:c0:01:93:d5:85:5d:18:06:91:f1:1d:cd:09:c2:f6:50:
         93:b4:2c:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGHtYnjJ+WoD3rWuhg6kwetlgdRYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRBRkE1MzdBRTNGQzlENUYzMkREM0I4MkRBQUJFNjQ4
QTJDNzAxODAeFw0yNDExMDgwMTI4NTZaFw0yNTExMDcwMTMzNTZaMDMxMTAvBgNV
BAMTKDM2QTFFNkY2NEU2NkJGRDVCMjZCNUJEQUZGMkMwMkI4RTg2MUQyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynC06vv2asiz9iS2sxMENIpP5
/7F8Dl6J9hP3tvH5q7+hRNhPyYHTct73YsZxsy24AKJfSkHYX+lV03NV8O5R7mEt
m8v0QzI5A4jilr4Ra6keanFOmFlNkqrQJj1g1jwEZ3guIgX9rpUReK4B6sGEdrRK
QSDd2xaWEvXmVOU5sCHQpBDelUlfV/rHcar8bPk0E1hbLx9mhQzmNQSoggdrmZ/Z
Bc9qJHb8jHtIpPQukN7iYYroOF+u+2mEuJeUN90imj5hX60DMrb++ibdQU+lhsVN
vMqcr/PddDUl1v71/LnN2KAD8Ow5vOXiATIvVrlliW3uJo+417W0lAQcFEwVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNqHm9k5mv9Wya1va/ywCuOhh0iAwHwYDVR0j
BBgwFoAULa+lN64/ydXzLdO4Laq+ZIoscBgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR015S200aWRwZHVKRUxiWXFIdTZxZ1l1dmJHSG5WV1VvVWhWbzFiQmZR
TDQvMC8yREFGQTUzN0FFM0ZDOUQ1RjMyREQzQjgyREFBQkU2NDhBMkM3MDE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEQUZBNTM3QUUzRkM5RDVG
MzJERDNCODJEQUFCRTY0OEEyQzcwMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNeUttNGlkcGR1SkVMYllxSHU2cWdZdXZiR0huVldVb1VoVm8xYkJmUUw0LzAv
MzEzMjM4MmUzMjMwMzEyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKAySwwDQYJKoZIhvcNAQELBQADggEBADjW6/zk
UORNwYbL33RnLd3mwNypGDdrAAn9pmDHBNJtzFubtSkwqSWkDViH9HiCMxX0wHCO
dj4zA7DWjfg1+KTYzfwEPBtojRCI/MsqfLWX03IItOmfgL0agZgZkI8K+gpi4zS+
S607iXpcp+8eozMz+U8jUCpRCVqdL4iUjcPYKrvMtXRq5RQs6/EfopGaI5MLgdIY
7OEEY0KYLIXParCOO5HBFn9u/f44YpJ72QWwKxabNac/VLhbVkW4TX6weXShgzJa
ZlUHVjImAL0ED8bzOom0cGS3eyrBJ5hrY752XLzFmC51Ho0SvkOQwAGT1YVdGAaR
8R3NCcL2UJO0LMs=
-----END CERTIFICATE-----
Generated at Sun Nov 10 02:19:46 2024 by rpki-client on console-fra.rpki-client.org