Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32332d3233203d3e20323633353138.roa
File:                     3136382e3139372e38342e302f32332d3233203d3e20323633353138.roa (raw, json)
Hash identifier:          9UXclkqOOcbhJeKfUUXb54WgZvKtuitB5TzYGn3fCz0=
Subject key identifier:   16:2A:AE:6D:90:66:B8:EA:83:BD:6B:9E:FD:89:7B:48:8C:C4:F0:0C
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       5199372C6C4CFE2502C536697D07595D1C9C1DD2
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32332d3233203d3e20323633353138.roa
Signing time:             Mon 14 Oct 2024 15:21:17 +0000
ROA not before:           Mon 14 Oct 2024 15:16:17 +0000
ROA not after:            Mon 13 Oct 2025 15:21:17 +0000
asID:                     263518
IP address blocks:        168.197.84.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:99:37:2c:6c:4c:fe:25:02:c5:36:69:7d:07:59:5d:1c:9c:1d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: Oct 14 15:16:17 2024 GMT
            Not After : Oct 13 15:21:17 2025 GMT
        Subject: CN=162AAE6D9066B8EA83BD6B9EFD897B488CC4F00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:8d:4d:83:1e:8d:d0:42:9e:a2:1d:c1:d2:
                    71:5c:e7:54:bf:f4:3a:76:3c:1b:99:5c:fc:63:b4:
                    a9:c0:13:6f:fa:48:48:d5:c7:e3:23:56:fb:a4:30:
                    8c:a6:a9:8f:59:da:aa:80:f5:e4:16:1f:95:c4:bb:
                    c7:e1:7d:b3:64:67:0d:60:46:5c:18:57:fe:0d:88:
                    64:9a:5a:39:21:dc:3e:6b:62:ee:f7:12:af:7e:11:
                    66:13:47:51:c3:b1:71:9e:50:d0:17:3f:c0:6b:ce:
                    61:a9:73:a0:0b:36:52:75:a4:64:04:b7:2c:df:92:
                    98:16:ae:c9:bf:50:18:66:b3:30:27:60:7e:5e:98:
                    99:1f:e9:a9:01:69:de:98:ba:75:d6:c4:27:e6:89:
                    cd:76:0d:b4:b7:94:c1:e1:e2:09:fa:dc:b6:4a:04:
                    57:79:d8:ba:a8:ac:7c:e9:e9:de:46:65:ee:b8:63:
                    a8:c4:0e:ad:3d:52:a5:7e:4e:8d:23:8d:e7:57:e7:
                    7f:c4:8d:c9:f2:33:1f:6c:82:4a:11:78:e5:24:d2:
                    7d:3b:62:b2:f5:bd:c5:1b:e1:98:72:ea:e3:e9:6a:
                    88:02:e7:25:a8:5d:1f:ea:6f:97:94:69:f1:9f:e5:
                    b0:b6:81:fc:c5:c9:ea:c3:04:77:bf:f8:43:2a:55:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:AE:6D:90:66:B8:EA:83:BD:6B:9E:FD:89:7B:48:8C:C4:F0:0C
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/3136382e3139372e38342e302f32332d3233203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:c6:62:55:75:3a:fa:6f:b0:81:ab:d8:c3:69:c7:b5:4d:
         5f:1a:92:c4:c0:c4:46:b5:33:99:d0:57:f4:0f:d4:45:7f:84:
         3d:85:b0:b1:86:e1:1a:2e:68:c5:cd:ec:47:0e:f1:02:2d:c1:
         dc:f4:67:41:4d:16:d0:5a:9a:5d:a5:82:13:94:d2:99:33:90:
         4a:b8:3f:a6:ce:dc:ac:5b:8f:43:0a:0b:a4:33:f8:30:5c:64:
         c9:25:4d:0c:55:fa:26:4a:91:88:a7:94:29:27:42:61:42:42:
         50:88:d9:60:e1:63:92:98:32:61:69:34:19:39:88:1b:eb:58:
         25:91:53:a1:a0:87:14:18:7b:2f:95:37:ca:8b:08:c8:50:22:
         36:b7:19:33:56:bb:a5:f8:86:72:d3:a8:c5:45:42:a8:95:79:
         c0:2d:2f:c1:27:3a:56:b2:fd:f9:51:2d:5f:c0:67:26:ef:a1:
         97:50:03:d5:a6:ec:1b:50:33:63:7a:a0:7a:56:dd:77:6f:c9:
         23:20:06:be:1a:a4:1a:2b:71:4f:47:74:02:ea:10:e3:dc:58:
         21:35:50:05:86:ed:0b:c7:4b:e3:89:b2:0b:fc:9a:b4:db:78:
         8c:f1:b0:60:d4:64:7b:26:1d:51:7e:70:56:d5:00:9d:2e:e3:
         b2:2e:74:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUZk3LGxM/iUCxTZpfQdZXRycHdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY0OTE2QzBFQzVGMUU2QkZGMUE2NERDOTYwNDQ1NDcz
ODc3NUUyNzAeFw0yNDEwMTQxNTE2MTdaFw0yNTEwMTMxNTIxMTdaMDMxMTAvBgNV
BAMTKDE2MkFBRTZEOTA2NkI4RUE4M0JENkI5RUZEODk3QjQ4OENDNEYwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ho1Ngx6N0EKeoh3B0nFc51S/
9Dp2PBuZXPxjtKnAE2/6SEjVx+MjVvukMIymqY9Z2qqA9eQWH5XEu8fhfbNkZw1g
RlwYV/4NiGSaWjkh3D5rYu73Eq9+EWYTR1HDsXGeUNAXP8BrzmGpc6ALNlJ1pGQE
tyzfkpgWrsm/UBhmszAnYH5emJkf6akBad6YunXWxCfmic12DbS3lMHh4gn63LZK
BFd52LqorHzp6d5GZe64Y6jEDq09UqV+To0jjedX53/EjcnyMx9sgkoReOUk0n07
YrL1vcUb4Zhy6uPpaogC5yWoXR/qb5eUafGf5bC2gfzFyerDBHe/+EMqVcmfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFiqubZBmuOqDvWue/Yl7SIzE8AwwHwYDVR0j
BBgwFoAUL0kWwOxfHmv/GmTclgRFRzh3XicwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG05OU1MVmVtZ0pac2VVZkdrTTZHb0xCYmZ2TVhwcGhwdldlOFU1VTZp
VG4vMC8yRjQ5MTZDMEVDNUYxRTZCRkYxQTY0REM5NjA0NDU0NzM4Nzc1RTI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNDkxNkMwRUM1RjFFNkJG
RjFBNjREQzk2MDQ0NTQ3Mzg3NzVFMjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htOTlNTFZlbWdKWnNlVWZHa002R29MQmJmdk1YcHBocHZXZThVNVU2aVRuLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoxVQwDQYJKoZIhvcNAQELBQADggEBAKX7xmJV
dTr6b7CBq9jDace1TV8aksTAxEa1M5nQV/QP1EV/hD2FsLGG4RouaMXN7EcO8QIt
wdz0Z0FNFtBaml2lghOU0pkzkEq4P6bO3Kxbj0MKC6Qz+DBcZMklTQxV+iZKkYin
lCknQmFCQlCI2WDhY5KYMmFpNBk5iBvrWCWRU6GghxQYey+VN8qLCMhQIja3GTNW
u6X4hnLTqMVFQqiVecAtL8EnOlay/flRLV/AZybvoZdQA9Wm7BtQM2N6oHpW3Xdv
ySMgBr4apBorcU9HdALqEOPcWCE1UAWG7QvHS+OJsgv8mrTbeIzxsGDUZHsmHVF+
cFbVAJ0u47IudIk=
-----END CERTIFICATE-----
Generated at Fri Nov 1 05:02:42 2024 by rpki-client on console-ams.rpki-client.org