Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
File:                     3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa (raw, json)
Hash identifier:          ZqfR6j7r7zRkJ82JcZ6K9VS9NfKkj9o+xd+Lw9hr5Mk=
Subject key identifier:   C0:E9:A2:82:B2:A3:F5:BB:EC:66:09:00:26:57:DA:3B:51:33:E1:7C
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       6BE6D175A644FD845B2FA92CC9C34EB9F194AF1E
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:46 +0000
ROA not before:           Mon 29 Apr 2024 02:32:46 +0000
ROA not after:            Mon 28 Apr 2025 02:37:46 +0000
asID:                     265943
IP address blocks:        131.196.160.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:d1:75:a6:44:fd:84:5b:2f:a9:2c:c9:c3:4e:b9:f1:94:af:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:46 2024 GMT
            Not After : Apr 28 02:37:46 2025 GMT
        Subject: CN=C0E9A282B2A3F5BBEC6609002657DA3B5133E17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:70:e8:15:7d:2a:a9:6b:b9:7f:81:72:09:
                    b8:08:38:31:65:67:a0:86:8c:7f:e0:de:70:67:cb:
                    0f:d4:14:9b:89:42:c6:2c:88:72:23:78:2d:3f:e0:
                    cc:2c:26:39:58:4c:d1:1d:11:fd:ea:43:c4:d8:41:
                    aa:e6:80:9a:d5:b1:09:ee:e6:20:52:3a:43:91:a1:
                    b4:c9:fe:dc:cc:e9:15:95:9c:b9:30:74:00:65:5e:
                    50:49:4d:1e:8c:25:c2:57:10:98:45:e9:26:23:a6:
                    c1:b8:19:3d:cd:cd:a9:8f:40:d2:28:fd:e0:d6:6a:
                    47:c1:6d:71:89:b1:d4:f9:d3:57:a7:51:f0:cc:98:
                    ae:a1:ba:62:a9:32:7c:b6:f0:0b:ec:90:c1:55:6a:
                    09:3d:5e:dd:a8:d6:3f:9d:fd:41:27:3c:b3:78:fe:
                    0b:32:eb:1e:26:05:08:44:b7:9e:f4:ee:22:e5:57:
                    24:3e:79:03:82:15:60:49:f2:b6:3c:a8:3c:12:a9:
                    48:cf:8c:2c:b0:24:02:a2:95:c6:b5:05:9f:e3:0d:
                    63:1a:1a:64:2b:44:df:52:bf:fd:4e:cd:90:1f:70:
                    2d:f1:b2:f1:e5:0a:47:dc:ab:5a:01:5c:9d:87:62:
                    a0:c2:e9:52:3d:3c:4d:4b:78:b4:c6:cb:6a:be:1b:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:A2:82:B2:A3:F5:BB:EC:66:09:00:26:57:DA:3B:51:33:E1:7C
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136302e302f32322d3232203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:e1:c9:83:d1:ee:4d:79:63:af:2b:84:a8:df:cc:3c:72:
         92:24:97:61:4a:12:44:d6:e5:58:25:90:bf:af:f2:51:20:95:
         af:c2:9e:35:93:7d:41:52:8c:b8:df:77:a2:f9:23:e0:5f:a3:
         f2:79:a6:0e:c0:b4:84:ed:8f:1a:00:4c:41:b6:99:79:15:c8:
         60:0f:f7:92:da:a5:3f:aa:0e:50:cd:a7:92:ae:b8:9c:8c:b4:
         b0:01:e6:24:12:fe:5a:de:71:c2:2e:03:e4:e6:12:d1:4a:a8:
         2c:a2:c7:cb:41:ea:92:e3:60:00:19:96:18:4d:c6:6b:ed:8d:
         f8:f3:89:4e:2e:fe:7f:49:68:10:5b:22:30:5c:56:bc:5f:51:
         ea:c4:b9:23:af:9f:07:d9:f6:f3:04:22:f1:11:69:ad:37:c9:
         ba:2b:a3:b1:4f:a0:9b:60:11:2b:a2:e5:20:91:8d:42:90:18:
         24:54:87:66:be:06:f2:b8:99:31:cd:a9:ad:a9:44:7d:dd:ab:
         1a:b9:15:f7:bf:10:1e:5d:04:03:6f:6c:ef:7c:da:2e:30:76:
         a1:35:55:97:96:6a:5c:79:b8:e5:8b:d9:49:80:99:e1:0a:15:
         1f:04:80:0d:47:c5:fd:7c:26:ff:97:29:b3:52:ae:47:c8:7d:
         6f:2d:d6:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa+bRdaZE/YRbL6ksycNOufGUrx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDQjQwQkNFNTE2MTA0NzhEN0RCRUUyQzIwOEEzQkJG
Q0E3MTZDQjAeFw0yNDA0MjkwMjMyNDZaFw0yNTA0MjgwMjM3NDZaMDMxMTAvBgNV
BAMTKEMwRTlBMjgyQjJBM0Y1QkJFQzY2MDkwMDI2NTdEQTNCNTEzM0UxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19nDoFX0qqWu5f4FyCbgIODFl
Z6CGjH/g3nBnyw/UFJuJQsYsiHIjeC0/4MwsJjlYTNEdEf3qQ8TYQarmgJrVsQnu
5iBSOkORobTJ/tzM6RWVnLkwdABlXlBJTR6MJcJXEJhF6SYjpsG4GT3NzamPQNIo
/eDWakfBbXGJsdT501enUfDMmK6humKpMny28AvskMFVagk9Xt2o1j+d/UEnPLN4
/gsy6x4mBQhEt5707iLlVyQ+eQOCFWBJ8rY8qDwSqUjPjCywJAKilca1BZ/jDWMa
GmQrRN9Sv/1OzZAfcC3xsvHlCkfcq1oBXJ2HYqDC6VI9PE1LeLTGy2q+G5HjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwOmigrKj9bvsZgkAJlfaO1Ez4XwwHwYDVR0j
BBgwFoAUBMtAvOUWEEeNfb7iwgiju/ynFsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1EydFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQ
ejQvMS8wNENCNDBCQ0U1MTYxMDQ3OEQ3REJFRTJDMjA4QTNCQkZDQTcxNkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Q0I0MEJDRTUxNjEwNDc4
RDdEQkVFMkMyMDhBM0JCRkNBNzE2Q0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dRMnRVMzk2REhRZUxlZWJQWTVTN3hWNnlIWVdwWjhScmI0R2ROeGhWUHo0LzEv
MzEzMzMxMmUzMTM5MzYyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM5MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEoDANBgkqhkiG9w0BAQsFAAOCAQEALh7h
yYPR7k15Y68rhKjfzDxykiSXYUoSRNblWCWQv6/yUSCVr8KeNZN9QVKMuN93ovkj
4F+j8nmmDsC0hO2PGgBMQbaZeRXIYA/3ktqlP6oOUM2nkq64nIy0sAHmJBL+Wt5x
wi4D5OYS0UqoLKLHy0HqkuNgABmWGE3Ga+2N+POJTi7+f0loEFsiMFxWvF9R6sS5
I6+fB9n28wQi8RFprTfJuiujsU+gm2ARK6LlIJGNQpAYJFSHZr4G8riZMc2pralE
fd2rGrkV978QHl0EA29s73zaLjB2oTVVl5ZqXHm45YvZSYCZ4QoVHwSADUfF/Xwm
/5cps1KuR8h9by3WoA==
-----END CERTIFICATE-----
Generated at Fri Nov 1 22:33:00 2024 by rpki-client on console-ams.rpki-client.org