Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa
File:                     3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa (raw, json)
Hash identifier:          lR+QZTBxlwkCBGPZm/Do8VaKb83LytS4wpB9Cdhoa/A=
Subject key identifier:   F9:4B:B2:78:BE:1C:DD:34:30:2C:76:DD:69:43:5B:49:92:CB:E9:1E
Certificate issuer:       /CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
Certificate serial:       1146D68E25BA781D80A39F0440EAD5BD5C6E416B
Authority key identifier: 25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa
Signing time:             Thu 04 Apr 2024 12:58:03 +0000
ROA not before:           Thu 04 Apr 2024 12:53:03 +0000
ROA not after:            Thu 03 Apr 2025 12:58:03 +0000
asID:                     264998
IP address blocks:        170.84.156.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:d6:8e:25:ba:78:1d:80:a3:9f:04:40:ea:d5:bd:5c:6e:41:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EDB6C3E464C5AB7F8A83569425555FE9A89E2C
        Validity
            Not Before: Apr  4 12:53:03 2024 GMT
            Not After : Apr  3 12:58:03 2025 GMT
        Subject: CN=F94BB278BE1CDD34302C76DD69435B4992CBE91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:ff:bd:43:d8:cc:68:f3:33:a1:3c:b3:5a:
                    62:b5:44:20:02:f9:d3:da:8f:0c:f1:6c:42:d4:fd:
                    2b:06:0a:ec:ab:53:88:a4:f6:55:25:a1:ec:a0:0d:
                    80:67:93:d0:a9:5f:35:9a:22:8c:8e:4f:6b:71:5a:
                    1e:7a:d2:e5:65:88:23:d5:b0:7e:b6:d1:c0:af:63:
                    33:5a:9e:bd:48:26:bb:5e:75:80:24:89:27:b3:06:
                    ce:d2:2d:06:88:b8:66:30:27:d3:32:1a:27:a7:a5:
                    06:a6:b6:8c:33:5d:cf:13:ae:d6:e3:da:1e:f3:9c:
                    01:1a:53:01:b9:bd:f8:69:54:3f:1b:d8:22:a1:34:
                    41:8f:81:2a:b0:dc:05:23:40:9a:3f:5c:84:fd:66:
                    9a:8d:6b:94:5e:dc:f1:1e:50:40:e8:cc:15:88:3e:
                    b5:8f:89:eb:22:80:98:63:8e:34:2d:3f:78:4d:71:
                    25:91:34:47:a5:d4:f7:83:2d:72:df:95:9e:f5:77:
                    b6:ce:31:84:cb:b0:94:7d:62:d8:c9:d0:19:e7:0e:
                    2c:d8:da:c9:4a:dd:ed:1d:3c:57:59:be:c1:6a:73:
                    99:3a:79:8b:7c:76:b0:d4:ed:3c:b4:7b:76:54:3b:
                    13:2d:cc:b2:63:bd:7f:9b:e0:4a:7c:65:32:9b:a1:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:B2:78:BE:1C:DD:34:30:2C:76:DD:69:43:5B:49:92:CB:E9:1E
            X509v3 Authority Key Identifier:
                keyid:25:ED:B6:C3:E4:64:C5:AB:7F:8A:83:56:94:25:55:5F:E9:A8:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EDB6C3E464C5AB7F8A83569425555FE9A89E2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GtLxBFtBHjMJYLUYPaN4WK9AUbCsfKdSke6vFP4YrWxY/1/3137302e38342e3135362e302f32322d3232203d3e20323634393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:ca:24:27:40:c0:5c:64:02:92:b7:1f:3b:5e:4b:78:13:
         ba:24:95:12:61:b4:bc:7c:50:37:c0:a0:99:05:0e:04:de:ea:
         ae:50:f3:2a:c8:d9:7d:6d:55:bd:d3:56:c4:8c:0c:7a:a8:4c:
         e9:b2:52:e9:c3:3f:e0:c4:bb:ed:a8:6f:b1:c2:39:6c:e0:91:
         8b:7f:4f:fb:3b:93:ff:ae:03:84:c8:9f:05:90:b7:aa:a1:11:
         5a:52:ee:4f:bc:a2:4a:fe:00:03:22:ab:98:85:0e:ba:b6:a1:
         20:15:78:a2:9b:48:b1:4e:8e:ea:72:1c:06:e2:59:88:86:d4:
         a9:fc:ed:9d:4f:47:ba:4c:57:22:eb:50:8d:be:ec:32:d1:5c:
         8e:6f:a3:b8:b5:da:62:29:64:d4:c1:85:b4:99:46:18:b4:c6:
         bc:b0:56:79:42:40:08:b7:5c:9a:65:cc:99:d3:86:44:1a:34:
         81:26:fb:d6:43:20:2e:86:fc:57:b4:47:96:77:12:87:1e:d9:
         b6:8b:61:9b:8c:fb:5c:ce:d8:38:16:64:c6:33:50:96:5f:c0:
         51:a6:44:7d:9c:16:b0:0a:aa:54:ef:62:56:8b:ed:81:a1:5c:
         c8:66:c9:f8:6b:d3:8a:b8:98:94:ab:f0:1a:fd:6f:92:87:18:
         e8:76:4e:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEUbWjiW6eB2Ao58EQOrVvVxuQWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVFREI2QzNFNDY0QzVBQjdGOEE4MzU2OTQyNTU1NUZF
OUE4OUUyQzAeFw0yNDA0MDQxMjUzMDNaFw0yNTA0MDMxMjU4MDNaMDMxMTAvBgNV
BAMTKEY5NEJCMjc4QkUxQ0REMzQzMDJDNzZERDY5NDM1QjQ5OTJDQkU5MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr/+9Q9jMaPMzoTyzWmK1RCAC
+dPajwzxbELU/SsGCuyrU4ik9lUloeygDYBnk9CpXzWaIoyOT2txWh560uVliCPV
sH620cCvYzNanr1IJrtedYAkiSezBs7SLQaIuGYwJ9MyGienpQamtowzXc8Trtbj
2h7znAEaUwG5vfhpVD8b2CKhNEGPgSqw3AUjQJo/XIT9ZpqNa5Re3PEeUEDozBWI
PrWPiesigJhjjjQtP3hNcSWRNEel1PeDLXLflZ71d7bOMYTLsJR9YtjJ0BnnDizY
2slK3e0dPFdZvsFqc5k6eYt8drDU7Ty0e3ZUOxMtzLJjvX+b4Ep8ZTKbofOFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+UuyeL4c3TQwLHbdaUNbSZLL6R4wHwYDVR0j
BBgwFoAUJe22w+Rkxat/ioNWlCVVX+moniwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3RMeEJGdEJIak1KWUxVWVBhTjRXSzlBVWJDc2ZLZFNrZTZ2RlA0WXJX
eFkvMS8yNUVEQjZDM0U0NjRDNUFCN0Y4QTgzNTY5NDI1NTU1RkU5QTg5RTJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI1RURCNkMzRTQ2NEM1QUI3
RjhBODM1Njk0MjU1NTVGRTlBODlFMkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d0THhCRnRCSGpNSllMVVlQYU40V0s5QVViQ3NmS2RTa2U2dkZQNFlyV3hZLzEv
MzEzNzMwMmUzODM0MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzOTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqVJwwDQYJKoZIhvcNAQELBQADggEBAKSlyiQn
QMBcZAKStx87Xkt4E7oklRJhtLx8UDfAoJkFDgTe6q5Q8yrI2X1tVb3TVsSMDHqo
TOmyUunDP+DEu+2ob7HCOWzgkYt/T/s7k/+uA4TInwWQt6qhEVpS7k+8okr+AAMi
q5iFDrq2oSAVeKKbSLFOjupyHAbiWYiG1Kn87Z1PR7pMVyLrUI2+7DLRXI5vo7i1
2mIpZNTBhbSZRhi0xrywVnlCQAi3XJplzJnThkQaNIEm+9ZDIC6G/Fe0R5Z3Eoce
2baLYZuM+1zO2DgWZMYzUJZfwFGmRH2cFrAKqlTvYlaL7YGhXMhmyfhr04q4mJSr
8Br9b5KHGOh2TnI=
-----END CERTIFICATE-----
Generated at Sun Aug 11 07:07:41 2024 by rpki-client on console-fra.rpki-client.org