Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3134332e3133372e3135362e302f32322d3234203d3e20323633303939.roa
File:                     3134332e3133372e3135362e302f32322d3234203d3e20323633303939.roa (raw, json)
Hash identifier:          KOYNEK5R1AGhgWfu/psMcYC+/idkimys9ztteAiN9oo=
Subject key identifier:   16:E0:76:88:5F:49:A4:28:6C:58:0F:7C:6A:86:B6:38:68:49:CB:D4
Certificate issuer:       /CN=4F65A56D1069C30B61BC8ED21E21C14D435571D1
Certificate serial:       7679CC70FDE41BA3C17601F019E88BBC5CDB5197
Authority key identifier: 4F:65:A5:6D:10:69:C3:0B:61:BC:8E:D2:1E:21:C1:4D:43:55:71:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65A56D1069C30B61BC8ED21E21C14D435571D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3134332e3133372e3135362e302f32322d3234203d3e20323633303939.roa
Signing time:             Tue 30 Apr 2024 12:16:27 +0000
ROA not before:           Tue 30 Apr 2024 12:11:27 +0000
ROA not after:            Tue 29 Apr 2025 12:16:27 +0000
asID:                     263099
IP address blocks:        143.137.156.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:79:cc:70:fd:e4:1b:a3:c1:76:01:f0:19:e8:8b:bc:5c:db:51:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65A56D1069C30B61BC8ED21E21C14D435571D1
        Validity
            Not Before: Apr 30 12:11:27 2024 GMT
            Not After : Apr 29 12:16:27 2025 GMT
        Subject: CN=16E076885F49A4286C580F7C6A86B6386849CBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:c9:29:30:e9:d4:fe:c6:0e:8d:f8:77:bf:
                    78:f6:64:fc:48:8f:78:d3:95:c6:e3:11:a1:40:a8:
                    f0:85:31:62:b9:a1:49:56:20:13:8c:25:5f:89:cf:
                    08:d1:e2:a6:e9:50:87:e6:6f:ba:a4:25:ad:f4:4f:
                    c0:31:46:29:87:0b:e2:93:f1:86:7a:43:fc:80:f4:
                    13:cf:13:0c:4a:5c:29:52:40:10:47:8b:47:80:38:
                    0c:2a:80:71:f4:b1:4b:0f:2a:bd:0e:bf:87:b0:b1:
                    9b:0b:bc:85:a4:56:89:06:09:d7:62:43:b2:de:70:
                    4d:d0:90:99:b8:72:8c:45:5f:c2:57:82:54:b6:15:
                    64:6e:32:8a:c6:67:cf:09:7d:d2:27:22:0c:47:33:
                    69:1c:0d:b0:98:3c:9d:fa:2a:8a:b9:78:2e:93:d0:
                    fd:b4:a2:e9:90:5f:b2:7e:e4:3a:76:19:b9:55:07:
                    b5:28:64:c5:39:48:5a:99:b3:3f:69:f1:1d:a9:0b:
                    ed:71:d4:1a:fe:15:91:d4:c4:f1:6c:3f:16:27:47:
                    18:c0:25:e8:f8:4a:59:fb:b6:18:6e:02:b4:d3:81:
                    60:49:d3:85:86:04:1e:ba:80:09:55:33:6d:0c:74:
                    4a:37:fd:aa:52:7c:75:f8:84:74:cb:b1:78:e0:89:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:76:88:5F:49:A4:28:6C:58:0F:7C:6A:86:B6:38:68:49:CB:D4
            X509v3 Authority Key Identifier:
                keyid:4F:65:A5:6D:10:69:C3:0B:61:BC:8E:D2:1E:21:C1:4D:43:55:71:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/4F65A56D1069C30B61BC8ED21E21C14D435571D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65A56D1069C30B61BC8ED21E21C14D435571D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HR7ipSpaPa399cYjpGuJyqfZvbJiCjEYRDGxdTHvqkuW/0/3134332e3133372e3135362e302f32322d3234203d3e20323633303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:09:96:9c:27:c3:df:cc:15:fb:60:ef:3a:27:5e:51:ad:
         90:cd:e7:e0:8e:ec:5a:05:6c:0b:76:6a:ad:ff:34:c9:43:38:
         b1:be:48:4d:3b:09:71:05:62:cf:67:e9:63:27:97:b8:fc:89:
         99:27:39:10:18:cc:41:41:35:3e:69:eb:1d:27:6f:03:52:10:
         51:d6:02:66:e1:fc:3d:8e:0b:84:44:ba:4e:bc:6c:4a:97:50:
         a6:63:bf:44:1c:4b:d1:1d:cb:03:ac:93:c8:60:b2:ed:6e:93:
         d2:75:8a:85:32:44:33:a7:21:b1:cc:bc:68:8f:e1:73:b1:e6:
         70:59:ff:0d:8b:91:c8:01:e1:30:56:59:ba:b2:b3:48:ac:35:
         89:98:4c:4a:06:0b:19:61:93:b7:71:02:63:15:10:fa:c1:9c:
         9d:d5:6a:a9:40:37:85:25:7a:bb:a8:89:e4:23:4a:11:18:cc:
         a6:d3:00:51:7f:53:a4:f9:3f:f0:78:52:a2:7f:8e:b9:f4:46:
         e1:ae:99:d4:91:6c:e6:9a:9a:f9:a9:d2:cc:bf:0d:28:1a:06:
         40:d8:f8:94:bb:47:62:a2:27:d3:6d:88:a3:f1:78:9b:24:a2:
         99:db:7b:1f:70:16:ee:0c:54:36:2e:39:a9:15:3b:9c:7b:dd:
         ea:f4:bc:b5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdnnMcP3kG6PBdgHwGeiLvFzbUZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY2NUE1NkQxMDY5QzMwQjYxQkM4RUQyMUUyMUMxNEQ0
MzU1NzFEMTAeFw0yNDA0MzAxMjExMjdaFw0yNTA0MjkxMjE2MjdaMDMxMTAvBgNV
BAMTKDE2RTA3Njg4NUY0OUE0Mjg2QzU4MEY3QzZBODZCNjM4Njg0OUNCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLskpMOnU/sYOjfh3v3j2ZPxI
j3jTlcbjEaFAqPCFMWK5oUlWIBOMJV+JzwjR4qbpUIfmb7qkJa30T8AxRimHC+KT
8YZ6Q/yA9BPPEwxKXClSQBBHi0eAOAwqgHH0sUsPKr0Ov4ewsZsLvIWkVokGCddi
Q7LecE3QkJm4coxFX8JXglS2FWRuMorGZ88JfdInIgxHM2kcDbCYPJ36Koq5eC6T
0P20oumQX7J+5Dp2GblVB7UoZMU5SFqZsz9p8R2pC+1x1Br+FZHUxPFsPxYnRxjA
Jej4Sln7thhuArTTgWBJ04WGBB66gAlVM20MdEo3/apSfHX4hHTLsXjgiRqfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFuB2iF9JpChsWA98aoa2OGhJy9QwHwYDVR0j
BBgwFoAUT2WlbRBpwwthvI7SHiHBTUNVcdEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFI3aXBTcGFQYTM5OWNZanBHdUp5cWZadmJKaUNqRVlSREd4ZFRIdnFr
dVcvMC80RjY1QTU2RDEwNjlDMzBCNjFCQzhFRDIxRTIxQzE0RDQzNTU3MUQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGNjVBNTZEMTA2OUMzMEI2
MUJDOEVEMjFFMjFDMTRENDM1NTcxRDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hSN2lwU3BhUGEzOTljWWpwR3VKeXFmWnZiSmlDakVZUkRHeGRUSHZxa3VXLzAv
MzEzNDMzMmUzMTMzMzcyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAo+JnDANBgkqhkiG9w0BAQsFAAOCAQEAo+UJ
lpwnw9/MFftg7zonXlGtkM3n4I7sWgVsC3Zqrf80yUM4sb5ITTsJcQViz2fpYyeX
uPyJmSc5EBjMQUE1PmnrHSdvA1IQUdYCZuH8PY4LhES6TrxsSpdQpmO/RBxL0R3L
A6yTyGCy7W6T0nWKhTJEM6chscy8aI/hc7HmcFn/DYuRyAHhMFZZurKzSKw1iZhM
SgYLGWGTt3ECYxUQ+sGcndVqqUA3hSV6u6iJ5CNKERjMptMAUX9TpPk/8HhSon+O
ufRG4a6Z1JFs5pqa+anSzL8NKBoGQNj4lLtHYqIn022Io/F4mySimdt7H3AW7gxU
Ni45qRU7nHvd6vS8tQ==
-----END CERTIFICATE-----
Generated at Fri Sep 27 08:13:24 2024 by rpki-client on console-fra.rpki-client.org