Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa
File:                     3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa (raw, json)
Hash identifier:          lOiTuT2hlwZZQHcXkxGL5bAus9cqPojl1nBjwsna8BA=
Subject key identifier:   4F:4A:99:16:AC:F9:C0:9E:9E:12:42:CF:7D:32:C4:6E:5C:EA:ED:AA
Certificate issuer:       /CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
Certificate serial:       6A5BCB6F2196AC5329AB574B5A8882959AE126E9
Authority key identifier: 04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa
Signing time:             Mon 29 Apr 2024 02:37:46 +0000
ROA not before:           Mon 29 Apr 2024 02:32:46 +0000
ROA not after:            Mon 28 Apr 2025 02:37:46 +0000
asID:                     265943
IP address blocks:        131.196.161.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5b:cb:6f:21:96:ac:53:29:ab:57:4b:5a:88:82:95:9a:e1:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CB40BCE51610478D7DBEE2C208A3BBFCA716CB
        Validity
            Not Before: Apr 29 02:32:46 2024 GMT
            Not After : Apr 28 02:37:46 2025 GMT
        Subject: CN=4F4A9916ACF9C09E9E1242CF7D32C46E5CEAEDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:a1:36:0c:59:9c:f0:ef:7a:3d:cd:8d:94:
                    73:c3:8a:d8:52:f6:20:02:17:4a:bb:bf:a5:99:8d:
                    b8:46:48:de:8d:b5:fb:22:92:a0:42:e8:c8:6e:70:
                    f1:f2:e1:41:fd:95:81:ea:76:a6:80:a1:8c:56:e9:
                    fa:eb:a5:0c:cc:3c:e5:ec:46:89:9c:97:5f:45:79:
                    9a:c6:85:a4:f7:b9:e8:fc:de:13:0f:66:37:8e:9f:
                    27:cb:01:52:d1:71:31:69:c1:17:ac:a2:8e:11:b9:
                    d1:05:47:49:82:c6:67:07:45:67:d0:c2:ec:13:b1:
                    5e:68:6e:f7:5e:cd:bb:ab:fb:bf:22:1c:c4:69:75:
                    bf:69:dc:74:20:76:68:bd:de:36:80:dd:5e:83:f6:
                    c4:a0:e9:6a:c2:b4:79:ac:80:8c:5c:30:ed:fa:b3:
                    e7:d1:62:d9:f3:b7:43:3c:b8:12:e8:91:cd:50:69:
                    0c:84:1c:a9:e8:b8:2e:87:0b:bb:e9:fe:67:d2:18:
                    3a:bf:6a:d2:26:d6:c2:1b:19:59:30:e8:0b:c7:0a:
                    62:6c:d0:cc:3b:22:2a:a2:58:03:ad:a5:78:74:c4:
                    b7:26:a9:3a:0f:86:b8:e5:92:0c:48:3a:8c:8a:1f:
                    01:95:d2:4d:ba:ee:ff:53:a2:b8:c5:52:84:a9:e0:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4A:99:16:AC:F9:C0:9E:9E:12:42:CF:7D:32:C4:6E:5C:EA:ED:AA
            X509v3 Authority Key Identifier:
                keyid:04:CB:40:BC:E5:16:10:47:8D:7D:BE:E2:C2:08:A3:BB:FC:A7:16:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CB40BCE51610478D7DBEE2C208A3BBFCA716CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/1/3133312e3139362e3136312e302f32342d3234203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e5:9a:99:6c:86:bd:b1:9b:3a:a3:65:2c:cc:01:8e:40:08:
         f7:dc:d5:91:05:99:70:11:79:bc:9a:6c:f5:1a:4a:d7:11:f6:
         f6:29:90:ef:d5:da:f8:35:66:c7:89:fd:e7:1f:09:72:ac:10:
         96:f3:ac:76:a8:76:ed:d8:b4:03:bb:f0:a3:c8:58:61:70:48:
         8a:b3:3f:f4:4c:bf:e4:b8:e8:05:d6:d2:9d:9a:b0:3f:3d:18:
         59:51:35:b6:df:a7:eb:44:8f:ea:95:fa:9b:77:14:37:b5:12:
         c0:9a:a5:61:a4:84:35:81:9f:15:07:3d:fe:2a:5c:45:a8:e2:
         3e:6d:25:71:85:64:da:c2:f0:fd:7e:89:30:87:30:cd:15:b7:
         dd:a7:b7:fb:d6:23:5f:33:9e:33:f5:c2:fa:87:f0:96:04:6b:
         b9:74:27:30:b2:f2:09:c2:f9:53:a5:4e:45:78:73:0d:cb:55:
         89:2c:21:24:c7:37:2f:e1:29:98:1e:69:20:46:6a:55:de:61:
         84:1c:9a:f1:8d:6c:62:5e:35:a8:e7:7f:1a:dc:f1:dd:f8:60:
         c4:cf:75:3c:98:fd:f0:cf:6c:9b:f2:a0:9e:e8:80:1b:04:f3:
         eb:35:81:f0:ca:6a:d8:2f:56:22:af:a7:3a:01:58:96:07:93:
         66:bb:04:f0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUalvLbyGWrFMpq1dLWoiClZrhJukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDQjQwQkNFNTE2MTA0NzhEN0RCRUUyQzIwOEEzQkJG
Q0E3MTZDQjAeFw0yNDA0MjkwMjMyNDZaFw0yNTA0MjgwMjM3NDZaMDMxMTAvBgNV
BAMTKDRGNEE5OTE2QUNGOUMwOUU5RTEyNDJDRjdEMzJDNDZFNUNFQUVEQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTKE2DFmc8O96Pc2NlHPDithS
9iACF0q7v6WZjbhGSN6NtfsikqBC6MhucPHy4UH9lYHqdqaAoYxW6frrpQzMPOXs
Romcl19FeZrGhaT3uej83hMPZjeOnyfLAVLRcTFpwResoo4RudEFR0mCxmcHRWfQ
wuwTsV5obvdezbur+78iHMRpdb9p3HQgdmi93jaA3V6D9sSg6WrCtHmsgIxcMO36
s+fRYtnzt0M8uBLokc1QaQyEHKnouC6HC7vp/mfSGDq/atIm1sIbGVkw6AvHCmJs
0Mw7IiqiWAOtpXh0xLcmqToPhrjlkgxIOoyKHwGV0k267v9TorjFUoSp4J6RAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUT0qZFqz5wJ6eEkLPfTLEblzq7aowHwYDVR0j
BBgwFoAUBMtAvOUWEEeNfb7iwgiju/ynFsswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1EydFUzOTZESFFlTGVlYlBZNVM3eFY2eUhZV3BaOFJyYjRHZE54aFZQ
ejQvMS8wNENCNDBCQ0U1MTYxMDQ3OEQ3REJFRTJDMjA4QTNCQkZDQTcxNkNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0Q0I0MEJDRTUxNjEwNDc4
RDdEQkVFMkMyMDhBM0JCRkNBNzE2Q0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dRMnRVMzk2REhRZUxlZWJQWTVTN3hWNnlIWVdwWjhScmI0R2ROeGhWUHo0LzEv
MzEzMzMxMmUzMTM5MzYyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM5MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPEoTANBgkqhkiG9w0BAQsFAAOCAQEAk+Wa
mWyGvbGbOqNlLMwBjkAI99zVkQWZcBF5vJps9RpK1xH29imQ79Xa+DVmx4n95x8J
cqwQlvOsdqh27di0A7vwo8hYYXBIirM/9Ey/5LjoBdbSnZqwPz0YWVE1tt+n60SP
6pX6m3cUN7USwJqlYaSENYGfFQc9/ipcRajiPm0lcYVk2sLw/X6JMIcwzRW33ae3
+9YjXzOeM/XC+ofwlgRruXQnMLLyCcL5U6VORXhzDctViSwhJMc3L+EpmB5pIEZq
Vd5hhBya8Y1sYl41qOd/Gtzx3fhgxM91PJj98M9sm/KgnuiAGwTz6zWB8Mpq2C9W
Iq+nOgFYlgeTZrsE8A==
-----END CERTIFICATE-----
Generated at Fri Nov 1 22:32:25 2024 by rpki-client on console-fra.rpki-client.org