Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa
File:                     3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa (raw, json)
Hash identifier:          k2K3DVjvjMhSi78HxE0VGmYd6RF344vOhHopndjQHv4=
Subject key identifier:   59:1E:7B:11:A7:45:51:A9:F9:9C:45:9A:5C:59:60:05:2E:6F:11:A6
Certificate issuer:       /CN=944E34DEA91B28826835424C55845E9BDF8C78BA
Certificate serial:       5B9E8BA1B86927FDD47C5C53F50711CEE523DA1C
Authority key identifier: 94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa
Signing time:             Thu 04 Apr 2024 02:59:52 +0000
ROA not before:           Thu 04 Apr 2024 02:54:52 +0000
ROA not after:            Thu 03 Apr 2025 02:59:52 +0000
asID:                     263151
IP address blocks:        168.205.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9e:8b:a1:b8:69:27:fd:d4:7c:5c:53:f5:07:11:ce:e5:23:da:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=944E34DEA91B28826835424C55845E9BDF8C78BA
        Validity
            Not Before: Apr  4 02:54:52 2024 GMT
            Not After : Apr  3 02:59:52 2025 GMT
        Subject: CN=591E7B11A74551A9F99C459A5C5960052E6F11A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:46:ff:da:b6:9b:21:f2:29:72:1a:9c:a7:
                    37:aa:73:7c:a0:13:02:af:9e:56:02:21:b6:9c:01:
                    a6:1f:98:02:60:d1:77:81:ae:59:3c:b5:77:74:ef:
                    9b:37:e0:e6:ef:85:f6:70:95:64:1a:0b:0b:5d:46:
                    08:bb:4f:dc:8f:2c:c6:d9:f7:29:b3:2e:70:8e:9b:
                    0f:bf:07:e1:37:5a:68:53:7e:1a:d7:91:a1:5b:4d:
                    45:e2:24:73:4a:67:47:5c:e0:65:d1:c5:9e:94:c9:
                    30:6c:54:8a:d4:03:5c:d9:7b:94:a5:18:8c:46:2e:
                    93:2d:40:a8:52:6c:a3:9e:7f:94:01:6f:25:f4:1f:
                    75:b6:eb:bf:36:d7:98:d8:5b:3b:c0:e0:51:22:85:
                    78:d2:c6:c3:30:63:8d:0c:7f:5d:e9:76:39:3d:fd:
                    55:7b:bb:bf:8d:ea:7a:9a:e0:82:1a:99:ec:26:81:
                    5e:f4:d9:ba:d6:4f:73:c1:4c:28:8b:f3:a5:2c:59:
                    5e:b7:78:51:98:59:19:9b:d1:99:52:a8:64:4d:60:
                    d8:e5:51:14:b2:92:26:97:9f:20:77:cf:cd:86:de:
                    17:21:54:3d:fa:98:69:0f:21:f4:bc:b5:23:f3:8a:
                    39:ee:1e:3d:be:dd:2f:a5:8e:39:67:fd:b2:1a:20:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:7B:11:A7:45:51:A9:F9:9C:45:9A:5C:59:60:05:2E:6F:11:A6
            X509v3 Authority Key Identifier:
                keyid:94:4E:34:DE:A9:1B:28:82:68:35:42:4C:55:84:5E:9B:DF:8C:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/944E34DEA91B28826835424C55845E9BDF8C78BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944E34DEA91B28826835424C55845E9BDF8C78BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/1/3136382e3230352e32342e302f32322d3234203d3e20323633313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:84:e6:21:96:0e:cb:6e:6a:ab:a8:a2:f4:78:41:dc:6e:00:
         3a:95:ca:a4:d4:ab:3e:b0:c9:52:dc:7b:a8:c3:a9:a2:2e:c1:
         7c:e5:45:d1:b5:46:5f:34:a0:aa:17:38:c5:7e:0a:e8:6c:7b:
         dc:01:a3:3a:f4:35:74:fc:c7:51:c4:d9:35:9c:a5:ae:c0:62:
         76:c4:eb:34:15:6c:39:7d:a9:08:e2:4c:f8:d0:74:99:46:f6:
         89:1a:54:8d:41:6b:b5:c1:43:df:0c:24:73:dd:11:e4:26:00:
         8b:d2:c8:27:04:3b:10:28:f3:a1:2b:2a:a9:a3:b7:ee:b1:79:
         04:2e:a0:d3:a1:71:29:64:f0:54:ec:2a:13:bf:9b:2f:76:71:
         40:e9:67:c4:ef:3e:65:73:08:a1:f7:e8:96:30:c9:7f:48:df:
         ed:ec:c8:19:07:5f:30:6f:90:eb:41:9d:7f:43:e6:40:e7:9e:
         d6:eb:21:45:3a:8c:67:36:00:b3:20:6f:33:76:d4:19:a3:e7:
         57:f6:d2:9b:6f:71:ee:e7:61:42:da:1e:62:38:5c:bb:12:a4:
         5d:ad:0f:79:4f:73:d7:8c:0a:49:ef:e0:97:bc:7f:6f:b5:e5:
         bf:e6:22:74:81:59:20:d9:ae:10:9a:2e:6c:60:d2:0a:4c:d1:
         89:2a:7a:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW56LobhpJ/3UfFxT9QcRzuUj2hwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0RTM0REVBOTFCMjg4MjY4MzU0MjRDNTU4NDVFOUJE
RjhDNzhCQTAeFw0yNDA0MDQwMjU0NTJaFw0yNTA0MDMwMjU5NTJaMDMxMTAvBgNV
BAMTKDU5MUU3QjExQTc0NTUxQTlGOTlDNDU5QTVDNTk2MDA1MkU2RjExQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAEb/2rabIfIpchqcpzeqc3yg
EwKvnlYCIbacAaYfmAJg0XeBrlk8tXd075s34ObvhfZwlWQaCwtdRgi7T9yPLMbZ
9ymzLnCOmw+/B+E3WmhTfhrXkaFbTUXiJHNKZ0dc4GXRxZ6UyTBsVIrUA1zZe5Sl
GIxGLpMtQKhSbKOef5QBbyX0H3W2678215jYWzvA4FEihXjSxsMwY40Mf13pdjk9
/VV7u7+N6nqa4IIamewmgV702brWT3PBTCiL86UsWV63eFGYWRmb0ZlSqGRNYNjl
URSykiaXnyB3z82G3hchVD36mGkPIfS8tSPzijnuHj2+3S+ljjln/bIaIEKjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWR57EadFUan5nEWaXFlgBS5vEaYwHwYDVR0j
BBgwFoAUlE403qkbKIJoNUJMVYRem9+MeLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGlMekw0S2hkVnBERm9DSmV5clVuSnBLaDFmcTRBWTVFV2lzY2c4emp6
YXMvMS85NDRFMzRERUE5MUIyODgyNjgzNTQyNEM1NTg0NUU5QkRGOEM3OEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk0NEUzNERFQTkxQjI4ODI2
ODM1NDI0QzU1ODQ1RTlCREY4Qzc4QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hpTHpMNEtoZFZwREZvQ0pleXJVbkpwS2gxZnE0QVk1RVdpc2NnOHpqemFzLzEv
MzEzNjM4MmUzMjMwMzUyZTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKozRgwDQYJKoZIhvcNAQELBQADggEBABCE5iGW
DstuaquoovR4QdxuADqVyqTUqz6wyVLce6jDqaIuwXzlRdG1Rl80oKoXOMV+Cuhs
e9wBozr0NXT8x1HE2TWcpa7AYnbE6zQVbDl9qQjiTPjQdJlG9okaVI1Ba7XBQ98M
JHPdEeQmAIvSyCcEOxAo86ErKqmjt+6xeQQuoNOhcSlk8FTsKhO/my92cUDpZ8Tv
PmVzCKH36JYwyX9I3+3syBkHXzBvkOtBnX9D5kDnntbrIUU6jGc2ALMgbzN21Bmj
51f20ptvce7nYULaHmI4XLsSpF2tD3lPc9eMCknv4Je8f2+15b/mInSBWSDZrhCa
Lmxg0gpM0Ykqer0=
-----END CERTIFICATE-----
Generated at Thu Sep 26 16:48:09 2024 by rpki-client on console-ams.rpki-client.org