Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa
File:                     3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa (raw, json)
Hash identifier:          zKc3v8N6fBjCkJk2vqc4iuWPBgbVzszhKju1gUResg4=
Subject key identifier:   83:8A:14:AA:BF:59:43:C5:D4:86:CA:CA:D2:0D:08:B8:E3:A4:91:52
Certificate issuer:       /CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
Certificate serial:       0D161506E3050EF8BBD0928A801CAA32B7E4E477
Authority key identifier: F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa
Signing time:             Thu 04 Apr 2024 10:29:37 +0000
ROA not before:           Thu 04 Apr 2024 10:24:37 +0000
ROA not after:            Thu 03 Apr 2025 10:29:37 +0000
asID:                     262312
IP address blocks:        177.124.16.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:16:15:06:e3:05:0e:f8:bb:d0:92:8a:80:1c:aa:32:b7:e4:e4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CD5FED741CA6B950C251A988CDCE78F96EDBAB
        Validity
            Not Before: Apr  4 10:24:37 2024 GMT
            Not After : Apr  3 10:29:37 2025 GMT
        Subject: CN=838A14AABF5943C5D486CACAD20D08B8E3A49152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:a0:6f:3f:7f:2f:58:73:53:5b:6b:3c:fc:
                    cb:2a:79:ed:c1:8c:f7:e7:59:98:91:a5:32:fa:31:
                    c0:99:80:65:e3:d5:63:5b:f4:78:03:9f:02:bc:01:
                    5a:16:10:8b:3b:5c:77:9b:99:7b:88:aa:0b:34:d5:
                    45:ba:84:30:47:ec:2b:53:a1:45:4f:a2:b1:54:35:
                    ad:d7:1d:f5:09:a0:2f:13:bc:21:7c:b0:12:17:2f:
                    bd:1f:4e:bc:d4:4e:3d:19:9b:4f:74:92:52:ac:48:
                    a9:a1:f5:ab:a8:df:fd:a1:c1:ac:ad:7a:47:a6:d1:
                    1b:59:04:26:4a:b8:b4:f1:8d:72:30:73:a2:f4:1a:
                    11:ec:ec:d6:09:77:82:86:72:71:0b:d2:f5:ba:17:
                    9a:ce:39:73:4b:80:cd:c5:dd:ab:9f:81:61:ad:02:
                    0f:90:15:31:d8:ef:8d:4d:be:00:6f:97:40:f3:6c:
                    41:bd:7d:54:f2:cd:14:01:84:7b:27:9f:85:1f:4b:
                    3b:ee:36:97:ae:e5:df:73:be:06:bc:2d:71:1c:6b:
                    85:d4:30:68:a7:a3:5b:f8:e4:8f:cf:22:4a:97:ed:
                    f1:60:91:86:e8:09:76:26:52:90:80:81:4a:9f:f4:
                    df:58:69:f5:c8:a1:94:4a:2e:0d:85:41:45:10:8c:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8A:14:AA:BF:59:43:C5:D4:86:CA:CA:D2:0D:08:B8:E3:A4:91:52
            X509v3 Authority Key Identifier:
                keyid:F2:CD:5F:ED:74:1C:A6:B9:50:C2:51:A9:88:CD:CE:78:F9:6E:DB:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2CD5FED741CA6B950C251A988CDCE78F96EDBAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzT3RdrjDWyutr41YKrgGQKGRgEETkWV5hXhNHg1YVCS/1/3137372e3132342e31362e302f32322d3234203d3e20323632333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:65:1d:13:e1:3f:b2:6b:35:5f:12:a1:eb:d9:74:a6:92:6d:
         31:46:3c:08:02:60:3f:1a:90:c0:db:3e:cc:0d:12:27:41:a5:
         8d:75:e4:63:9b:1c:25:2e:c8:ba:8c:b3:5c:ec:74:84:27:1c:
         30:b2:18:95:c3:36:b5:c4:d7:52:21:c0:fe:f7:f4:a4:cc:bd:
         2d:15:65:13:9d:6d:e4:63:48:aa:a6:09:37:4b:df:b0:58:5b:
         67:f9:59:f8:d0:4d:e9:de:9a:df:19:9a:14:b1:47:1f:ee:07:
         ec:2f:9e:50:e1:b6:3d:f6:e5:77:c7:4e:46:de:da:57:80:f1:
         db:9b:56:84:90:23:fe:e6:71:08:38:f9:f7:54:ed:cb:6a:49:
         9e:1e:9c:a1:21:5c:74:66:c4:03:2d:42:ee:fa:9d:26:63:2d:
         90:ff:52:8e:99:09:c8:fc:8f:70:ae:53:e5:7c:cf:6e:20:ff:
         92:2a:07:31:ce:55:bc:3c:e5:16:d7:d4:37:fd:11:f2:13:88:
         34:1f:fb:12:04:43:99:27:96:7b:92:93:30:17:ec:39:d1:2e:
         d3:be:80:72:e7:33:fa:be:fc:f6:32:6c:c1:e0:3b:7a:db:a8:
         8d:11:df:05:95:32:bd:ce:46:ca:c2:32:a9:26:f2:3a:1d:f8:
         51:1f:78:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDRYVBuMFDvi70JKKgByqMrfk5HcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDRDVGRUQ3NDFDQTZCOTUwQzI1MUE5ODhDRENFNzhG
OTZFREJBQjAeFw0yNDA0MDQxMDI0MzdaFw0yNTA0MDMxMDI5MzdaMDMxMTAvBgNV
BAMTKDgzOEExNEFBQkY1OTQzQzVENDg2Q0FDQUQyMEQwOEI4RTNBNDkxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mKBvP38vWHNTW2s8/Msqee3B
jPfnWZiRpTL6McCZgGXj1WNb9HgDnwK8AVoWEIs7XHebmXuIqgs01UW6hDBH7CtT
oUVPorFUNa3XHfUJoC8TvCF8sBIXL70fTrzUTj0Zm090klKsSKmh9auo3/2hwayt
ekem0RtZBCZKuLTxjXIwc6L0GhHs7NYJd4KGcnEL0vW6F5rOOXNLgM3F3aufgWGt
Ag+QFTHY741NvgBvl0DzbEG9fVTyzRQBhHsnn4UfSzvuNpeu5d9zvga8LXEca4XU
MGino1v45I/PIkqX7fFgkYboCXYmUpCAgUqf9N9YafXIoZRKLg2FQUUQjG5FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg4oUqr9ZQ8XUhsrK0g0IuOOkkVIwHwYDVR0j
BBgwFoAU8s1f7XQcprlQwlGpiM3OePlu26swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3pUM1JkcmpEV3l1dHI0MVlLcmdHUUtHUmdFRVRrV1Y1aFhoTkhnMVlW
Q1MvMS9GMkNENUZFRDc0MUNBNkI5NTBDMjUxQTk4OENEQ0U3OEY5NkVEQkFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyQ0Q1RkVENzQxQ0E2Qjk1
MEMyNTFBOTg4Q0RDRTc4Rjk2RURCQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d6VDNSZHJqRFd5dXRyNDFZS3JnR1FLR1JnRUVUa1dWNWhYaE5IZzFZVkNTLzEv
MzEzNzM3MmUzMTMyMzQyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfBAwDQYJKoZIhvcNAQELBQADggEBAD1lHRPh
P7JrNV8SoevZdKaSbTFGPAgCYD8akMDbPswNEidBpY115GObHCUuyLqMs1zsdIQn
HDCyGJXDNrXE11IhwP739KTMvS0VZROdbeRjSKqmCTdL37BYW2f5WfjQTenemt8Z
mhSxRx/uB+wvnlDhtj325XfHTkbe2leA8dubVoSQI/7mcQg4+fdU7ctqSZ4enKEh
XHRmxAMtQu76nSZjLZD/Uo6ZCcj8j3CuU+V8z24g/5IqBzHOVbw85RbX1Df9EfIT
iDQf+xIEQ5knlnuSkzAX7DnRLtO+gHLnM/q+/PYybMHgO3rbqI0R3wWVMr3ORsrC
Mqkm8jod+FEfeCQ=
-----END CERTIFICATE-----
Generated at Wed Jun 26 03:16:44 2024 by rpki-client on console-ams.rpki-client.org