Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
File:                     3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa (raw, json)
Hash identifier:          JQspxNwaijonzDTVqGIynVtYkIeVWGIfp+b4TJ3SDRs=
Subject key identifier:   BD:05:B5:20:F5:55:91:C3:43:6E:A8:8A:35:E9:DD:13:52:9B:63:F8
Certificate issuer:       /CN=61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778
Certificate serial:       539E7C95AED07B451D62FC94EF46EBECE9DC6A5E
Authority key identifier: 61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa
Signing time:             Thu 04 Apr 2024 19:30:11 +0000
ROA not before:           Thu 04 Apr 2024 19:25:11 +0000
ROA not after:            Thu 03 Apr 2025 19:30:11 +0000
asID:                     53123
IP address blocks:        187.111.192.0/20 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9e:7c:95:ae:d0:7b:45:1d:62:fc:94:ef:46:eb:ec:e9:dc:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778
        Validity
            Not Before: Apr  4 19:25:11 2024 GMT
            Not After : Apr  3 19:30:11 2025 GMT
        Subject: CN=BD05B520F55591C3436EA88A35E9DD13529B63F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:80:5b:20:af:54:f2:9d:9e:fa:c9:fa:08:
                    03:ea:61:b6:fb:86:67:70:c7:48:55:4c:1c:2b:f7:
                    00:c8:a5:46:2f:cb:00:34:b5:da:ec:32:c6:da:69:
                    62:f2:06:92:8c:4a:7e:e0:6f:f8:2e:55:30:ee:d0:
                    2e:7b:e5:a6:40:f0:cf:e8:74:9a:e2:31:d9:14:35:
                    66:de:f9:34:35:b2:a4:f7:13:b4:40:19:12:68:01:
                    7e:05:cc:3b:21:f2:48:5d:a6:51:f3:4a:29:a4:ee:
                    ce:f5:a1:4c:02:cf:4e:d2:d1:45:d8:b1:b7:32:2c:
                    e9:66:69:88:81:8f:e2:3a:6a:8d:ad:03:c8:98:6c:
                    fa:8c:80:1c:20:04:cf:3d:e1:c9:b8:22:0e:0a:f4:
                    1b:70:e8:e2:09:0f:0e:03:20:05:1c:ea:8d:76:ea:
                    73:cf:ee:9d:70:16:2f:de:a0:6a:a6:fa:54:c1:0b:
                    ee:6e:2d:14:ed:1d:2d:b5:0c:41:fd:5a:ac:de:4f:
                    83:c1:4a:ff:39:a4:aa:b9:44:77:65:13:2b:19:af:
                    8c:2a:08:f6:79:fc:2a:f6:3a:19:a8:70:1e:c2:99:
                    b8:d0:7f:c6:8f:62:25:4b:5f:85:9b:c0:b7:02:9a:
                    fd:ba:17:c7:05:b7:c7:84:4e:2b:9b:58:31:e4:99:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:05:B5:20:F5:55:91:C3:43:6E:A8:8A:35:E9:DD:13:52:9B:63:F8
            X509v3 Authority Key Identifier:
                keyid:61:D3:FA:D8:31:4E:F4:2C:B4:E9:E3:1F:8F:D1:2D:9D:6B:66:F7:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61D3FAD8314EF42CB4E9E31F8FD12D9D6B66F778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/1/3138372e3131312e3139322e302f32302d3234203d3e203533313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:cf:cd:e9:49:95:dc:1c:32:47:9d:4f:87:fd:fa:ad:08:57:
         ab:99:14:e6:46:aa:98:e8:f8:75:a5:a0:50:24:15:18:54:80:
         5e:af:35:f5:d2:0a:9d:12:d7:74:fc:31:29:a3:6a:f2:fe:ab:
         48:9b:58:9d:10:1a:6e:08:d7:03:fe:6e:84:b4:b9:7c:f1:e3:
         32:91:5d:9a:60:1c:05:b9:03:30:d8:38:34:81:fe:e4:8c:3a:
         c6:5a:58:d5:f7:74:69:88:b0:3b:9c:2d:59:73:f8:e8:a1:26:
         aa:38:70:b2:ab:0f:d9:12:c4:e9:50:65:2a:d8:bb:b7:59:63:
         31:ff:a9:c3:f8:cd:71:0a:0a:68:ab:f7:a4:ab:18:b2:b3:99:
         83:a1:ec:94:cc:44:cb:1f:7a:28:4b:ae:27:49:c2:41:8c:a3:
         78:b2:99:47:cf:06:85:13:61:3b:09:cc:b4:bc:21:68:bd:0f:
         3a:9f:a3:78:ce:65:71:40:3a:21:6f:c5:4e:32:8b:94:57:e7:
         83:ec:0b:e7:3e:26:8f:11:08:86:db:09:bf:0d:16:23:6b:c9:
         ba:4b:fd:9b:b8:06:db:57:86:03:e9:bd:ae:a0:30:73:35:a7:
         44:12:c1:56:34:bb:9e:d3:2d:95:95:50:59:67:c1:11:9b:de:
         ea:e1:84:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU558la7Qe0UdYvyU70br7Oncal4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFEM0ZBRDgzMTRFRjQyQ0I0RTlFMzFGOEZEMTJEOUQ2
QjY2Rjc3ODAeFw0yNDA0MDQxOTI1MTFaFw0yNTA0MDMxOTMwMTFaMDMxMTAvBgNV
BAMTKEJEMDVCNTIwRjU1NTkxQzM0MzZFQTg4QTM1RTlERDEzNTI5QjYzRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNP4BbIK9U8p2e+sn6CAPqYbb7
hmdwx0hVTBwr9wDIpUYvywA0tdrsMsbaaWLyBpKMSn7gb/guVTDu0C575aZA8M/o
dJriMdkUNWbe+TQ1sqT3E7RAGRJoAX4FzDsh8khdplHzSimk7s71oUwCz07S0UXY
sbcyLOlmaYiBj+I6ao2tA8iYbPqMgBwgBM894cm4Ig4K9Btw6OIJDw4DIAUc6o12
6nPP7p1wFi/eoGqm+lTBC+5uLRTtHS21DEH9WqzeT4PBSv85pKq5RHdlEysZr4wq
CPZ5/Cr2OhmocB7CmbjQf8aPYiVLX4WbwLcCmv26F8cFt8eETiubWDHkmYZHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvQW1IPVVkcNDbqiKNendE1KbY/gwHwYDVR0j
BBgwFoAUYdP62DFO9Cy06eMfj9EtnWtm93gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1VhQjJYcjduWFBSckhZRUZ1NXd3QlZuWDJ0d0M4a2RYVDg2aHVVZmRV
Z3gvMS82MUQzRkFEODMxNEVGNDJDQjRFOUUzMUY4RkQxMkQ5RDZCNjZGNzc4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxRDNGQUQ4MzE0RUY0MkNC
NEU5RTMxRjhGRDEyRDlENkI2NkY3NzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dVYUIyWHI3blhQUnJIWUVGdTV3d0JWblgydHdDOGtkWFQ4Nmh1VWZkVWd4LzEv
MzEzODM3MmUzMTMxMzEyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMTMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7b8AwDQYJKoZIhvcNAQELBQADggEBACjPzelJ
ldwcMkedT4f9+q0IV6uZFOZGqpjo+HWloFAkFRhUgF6vNfXSCp0S13T8MSmjavL+
q0ibWJ0QGm4I1wP+boS0uXzx4zKRXZpgHAW5AzDYODSB/uSMOsZaWNX3dGmIsDuc
LVlz+OihJqo4cLKrD9kSxOlQZSrYu7dZYzH/qcP4zXEKCmir96SrGLKzmYOh7JTM
RMsfeihLridJwkGMo3iymUfPBoUTYTsJzLS8IWi9Dzqfo3jOZXFAOiFvxU4yi5RX
54PsC+c+Jo8RCIbbCb8NFiNrybpL/Zu4BttXhgPpva6gMHM1p0QSwVY0u57TLZWV
UFlnwRGb3urhhCw=
-----END CERTIFICATE-----
Generated at Sat Jul 6 23:02:19 2024 by rpki-client on console-fra.rpki-client.org