Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
File:                     3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa (raw, json)
Hash identifier:          ma3G2nTdiQlDtyaQ4d/fq3JwRFI23sq7kNI/ZW782HI=
Subject key identifier:   3A:4B:45:F7:E1:CD:A6:E1:FC:E6:5A:FF:3B:05:1C:F3:2A:89:5D:9D
Certificate issuer:       /CN=F7BE09AF8165E9D220AB178AFD5E7F0E7532F727
Certificate serial:       78BF239FE811D7490E94B53F262ADE059D6DD7E0
Authority key identifier: F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa
Signing time:             Thu 04 Apr 2024 03:24:58 +0000
ROA not before:           Thu 04 Apr 2024 03:19:58 +0000
ROA not after:            Thu 03 Apr 2025 03:24:58 +0000
asID:                     271388
IP address blocks:        200.36.132.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:bf:23:9f:e8:11:d7:49:0e:94:b5:3f:26:2a:de:05:9d:6d:d7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7BE09AF8165E9D220AB178AFD5E7F0E7532F727
        Validity
            Not Before: Apr  4 03:19:58 2024 GMT
            Not After : Apr  3 03:24:58 2025 GMT
        Subject: CN=3A4B45F7E1CDA6E1FCE65AFF3B051CF32A895D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:14:a9:2c:fe:6d:9c:2a:3c:16:33:a8:a2:
                    ba:cb:1c:f2:42:27:3d:e8:c6:66:2b:3c:52:f6:82:
                    ce:b3:f9:c7:5d:ff:e1:00:f7:d4:af:5b:eb:8b:ed:
                    80:9c:47:b7:6c:0e:22:96:65:0b:df:c4:98:b8:5e:
                    fd:37:0e:14:bc:fe:e7:36:cf:ac:b7:9c:87:4e:a0:
                    40:18:e1:e2:72:f8:de:fd:6d:6b:59:42:4f:d5:4e:
                    ff:72:4b:28:2a:52:38:f3:4c:14:d6:8c:ab:67:d3:
                    3b:7a:15:19:c0:3f:a0:5d:7a:cc:a9:58:b7:84:54:
                    93:ac:fe:9e:22:14:9f:f6:19:34:0b:68:de:df:eb:
                    0d:b1:22:c4:aa:a0:12:20:11:26:b3:6e:b6:45:f1:
                    59:98:fc:f4:b0:a7:b3:19:67:6b:d5:1e:e8:80:3d:
                    11:36:4f:fa:2f:04:a9:64:b8:5b:24:7d:55:0a:c4:
                    84:8b:66:ef:6e:d8:63:e5:f2:bc:71:91:5c:fe:fa:
                    17:69:d3:4a:45:71:b7:99:9a:3c:df:f0:c4:a2:0f:
                    be:95:a5:3e:d3:f1:8f:67:a6:1e:21:5b:0c:8d:8f:
                    71:ae:46:67:17:f8:6f:3f:b9:3c:1b:47:c0:53:1c:
                    ae:d0:0b:ce:78:97:1c:7b:c8:99:31:f5:5d:14:68:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:45:F7:E1:CD:A6:E1:FC:E6:5A:FF:3B:05:1C:F3:2A:89:5D:9D
            X509v3 Authority Key Identifier:
                keyid:F7:BE:09:AF:81:65:E9:D2:20:AB:17:8A:FD:5E:7F:0E:75:32:F7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7BE09AF8165E9D220AB178AFD5E7F0E7532F727.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/2/3230302e33362e3133322e302f32322d3234203d3e20323731333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:b3:69:e9:3b:c2:b9:a1:cd:28:e1:46:8b:ad:dc:e7:91:ed:
         40:e2:f5:1f:33:5c:21:fa:62:d2:dd:4b:87:4a:2e:a3:69:dc:
         be:e2:f5:3a:4f:f9:51:b6:30:09:a1:82:25:3a:56:8a:5f:43:
         b0:60:92:6e:ec:9c:9b:0a:de:c8:09:51:68:fe:8e:c8:8c:24:
         34:ff:bd:ac:44:e3:96:ca:4e:40:5f:15:32:de:75:52:28:ba:
         50:86:4d:82:24:61:cd:c6:a7:4e:9e:5f:3a:54:8b:25:81:7e:
         ee:40:a8:7b:e4:69:32:36:14:c9:41:51:d7:6f:42:9d:14:5b:
         31:fe:48:8a:be:dc:e7:9e:b4:45:b0:79:40:21:68:4f:74:eb:
         b5:67:53:c7:9b:de:75:87:b6:72:75:1d:12:a7:ee:dc:da:64:
         9e:1b:90:8a:e0:d1:63:23:c9:c3:cd:79:74:80:89:68:50:31:
         bc:31:47:e6:6a:9c:63:67:62:ad:c3:63:32:77:0e:77:89:d3:
         6a:98:bb:4c:92:85:c8:5b:6e:00:7a:9c:3e:38:cd:b1:d9:61:
         3d:85:24:fd:4f:7f:f4:19:66:86:24:d2:ed:e4:1e:d6:ff:d1:
         bc:78:89:c4:28:52:20:3c:fd:ac:f0:48:80:fa:42:5d:7e:4b:
         99:28:c4:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeL8jn+gR10kOlLU/JireBZ1t1+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdCRTA5QUY4MTY1RTlEMjIwQUIxNzhBRkQ1RTdGMEU3
NTMyRjcyNzAeFw0yNDA0MDQwMzE5NThaFw0yNTA0MDMwMzI0NThaMDMxMTAvBgNV
BAMTKDNBNEI0NUY3RTFDREE2RTFGQ0U2NUFGRjNCMDUxQ0YzMkE4OTVEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVRSpLP5tnCo8FjOoorrLHPJC
Jz3oxmYrPFL2gs6z+cdd/+EA99SvW+uL7YCcR7dsDiKWZQvfxJi4Xv03DhS8/uc2
z6y3nIdOoEAY4eJy+N79bWtZQk/VTv9ySygqUjjzTBTWjKtn0zt6FRnAP6Bdesyp
WLeEVJOs/p4iFJ/2GTQLaN7f6w2xIsSqoBIgESazbrZF8VmY/PSwp7MZZ2vVHuiA
PRE2T/ovBKlkuFskfVUKxISLZu9u2GPl8rxxkVz++hdp00pFcbeZmjzf8MSiD76V
pT7T8Y9nph4hWwyNj3GuRmcX+G8/uTwbR8BTHK7QC854lxx7yJkx9V0UaOERAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOktF9+HNpuH85lr/OwUc8yqJXZ0wHwYDVR0j
BBgwFoAU974Jr4Fl6dIgqxeK/V5/DnUy9ycwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1lGRXhvY2syRmdoWUFWaFhDaWFYZlRIUVVHY01ONXNjdEZqTUM4SGZn
Q3YvMi9GN0JFMDlBRjgxNjVFOUQyMjBBQjE3OEFGRDVFN0YwRTc1MzJGNzI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3QkUwOUFGODE2NUU5RDIy
MEFCMTc4QUZENUU3RjBFNzUzMkY3MjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dZRkV4b2NrMkZnaFlBVmhYQ2lhWGZUSFFVR2NNTjVzY3RGak1DOEhmZ0N2LzIv
MzIzMDMwMmUzMzM2MmUzMTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIJIQwDQYJKoZIhvcNAQELBQADggEBAGezaek7
wrmhzSjhRout3OeR7UDi9R8zXCH6YtLdS4dKLqNp3L7i9TpP+VG2MAmhgiU6Vopf
Q7Bgkm7snJsK3sgJUWj+jsiMJDT/vaxE45bKTkBfFTLedVIoulCGTYIkYc3Gp06e
XzpUiyWBfu5AqHvkaTI2FMlBUddvQp0UWzH+SIq+3OeetEWweUAhaE9067VnU8eb
3nWHtnJ1HRKn7tzaZJ4bkIrg0WMjycPNeXSAiWhQMbwxR+ZqnGNnYq3DYzJ3DneJ
02qYu0yShchbbgB6nD44zbHZYT2FJP1Pf/QZZoYk0u3kHtb/0bx4icQoUiA8/azw
SID6Ql1+S5koxJ8=
-----END CERTIFICATE-----
Generated at Wed Jun 12 10:55:59 2024 by rpki-client on console-ams.rpki-client.org