Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/1/3138372e36322e38302e302f32322d3234203d3e20323639373134.roa
File:                     3138372e36322e38302e302f32322d3234203d3e20323639373134.roa (raw, json)
Hash identifier:          ABBeeoDbXp+E4UkXXKePp/oXvrWexNIVh45fa0QwtOE=
Subject key identifier:   A4:86:EF:64:F6:DC:37:36:61:32:7B:18:82:69:2F:2A:D4:4D:A6:FB
Certificate issuer:       /CN=2D9324E3CC3CDE890F2864E1B1DF564959F14616
Certificate serial:       66F3DB8DF3961E4DDFEB0078A32E983F8D38A358
Authority key identifier: 2D:93:24:E3:CC:3C:DE:89:0F:28:64:E1:B1:DF:56:49:59:F1:46:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9324E3CC3CDE890F2864E1B1DF564959F14616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/1/3138372e36322e38302e302f32322d3234203d3e20323639373134.roa
Signing time:             Thu 04 Apr 2024 03:58:35 +0000
ROA not before:           Thu 04 Apr 2024 03:53:35 +0000
ROA not after:            Thu 03 Apr 2025 03:58:35 +0000
asID:                     269714
IP address blocks:        187.62.80.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f3:db:8d:f3:96:1e:4d:df:eb:00:78:a3:2e:98:3f:8d:38:a3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9324E3CC3CDE890F2864E1B1DF564959F14616
        Validity
            Not Before: Apr  4 03:53:35 2024 GMT
            Not After : Apr  3 03:58:35 2025 GMT
        Subject: CN=A486EF64F6DC373661327B1882692F2AD44DA6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:74:2f:03:35:de:01:ee:24:6a:2f:63:50:
                    12:23:1a:c6:c5:f7:e1:27:d1:a5:79:52:7a:a0:e3:
                    97:bd:df:e5:ff:e5:2f:01:4a:21:cf:cb:42:36:33:
                    5c:be:e7:99:f6:3a:a6:2f:b8:f3:16:69:ed:71:d7:
                    8f:02:01:5b:66:21:39:2c:62:ff:69:63:8d:e2:ad:
                    24:22:57:52:08:eb:85:b6:3a:49:17:43:42:c3:a4:
                    08:c9:c8:6b:7c:47:ea:43:64:f0:34:38:84:15:a5:
                    0b:47:90:92:c3:6d:04:f2:b1:21:ef:23:f8:3f:27:
                    65:9a:b7:19:e1:16:1d:45:9f:dc:03:62:88:29:9d:
                    e5:1f:8b:62:06:b8:96:7a:99:33:9b:a1:3b:34:d0:
                    99:2f:2a:df:61:28:a8:e5:af:89:fa:30:49:53:24:
                    39:43:5b:79:90:23:ad:ee:4f:af:2e:79:e3:9d:1b:
                    60:9a:e7:9d:a4:fc:66:17:f7:ee:fa:5c:1f:19:2f:
                    a5:02:d5:6a:09:7c:41:71:5f:fe:3b:2c:d2:d8:39:
                    f3:9a:e9:6a:eb:02:f9:ab:26:73:9f:3a:81:7e:f6:
                    c5:04:d5:54:37:d2:59:0f:29:65:91:d0:c1:42:03:
                    00:b8:dc:1b:86:6e:57:c2:1e:6e:6b:ed:f0:c0:05:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:EF:64:F6:DC:37:36:61:32:7B:18:82:69:2F:2A:D4:4D:A6:FB
            X509v3 Authority Key Identifier:
                keyid:2D:93:24:E3:CC:3C:DE:89:0F:28:64:E1:B1:DF:56:49:59:F1:46:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/1/2D9324E3CC3CDE890F2864E1B1DF564959F14616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9324E3CC3CDE890F2864E1B1DF564959F14616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy4KuR7eVj5gr51fgPmZLQqJoZjcEbJhqZp5dmPV9mnV/1/3138372e36322e38302e302f32322d3234203d3e20323639373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:ab:3b:db:2b:5d:b0:71:c0:42:a4:67:e1:cb:14:a6:ff:b3:
         58:3d:6c:53:8c:83:2e:b7:f1:4b:a8:d4:5b:ee:8d:86:41:9e:
         8c:f4:81:f2:5c:44:7a:00:0a:f9:5e:5c:e9:4c:86:a5:aa:77:
         b1:fc:29:d8:20:bc:ef:51:fe:c2:11:47:23:6f:3c:28:6b:51:
         6a:9c:d5:1e:4e:54:a4:d4:df:5f:a5:2b:01:18:e9:fb:6f:99:
         4d:24:27:39:11:d3:74:c3:33:1f:0c:96:26:e0:d1:99:c7:8f:
         b2:46:6e:e1:47:f9:ca:8d:b2:4a:fe:52:e9:eb:45:5f:51:29:
         1f:a1:d0:20:39:29:2f:ad:61:20:2e:47:01:26:85:08:f6:a6:
         e2:64:35:81:de:5f:b5:e4:6e:46:0d:a5:2f:24:18:97:90:b9:
         1a:da:3e:0c:49:39:07:3e:a5:fc:54:c2:32:5e:c7:9c:83:ff:
         97:8c:ed:10:40:b7:47:e4:f0:68:3d:39:8d:fb:7b:74:f9:e4:
         44:dc:0f:1d:37:4e:9c:d9:15:14:43:eb:2c:3b:7e:09:a9:71:
         d3:84:f0:61:27:8b:85:8e:33:f1:19:e3:18:82:74:22:69:66:
         df:f1:db:78:f5:f0:23:d8:43:32:fa:a1:25:ee:a8:bb:1b:af:
         bd:47:1a:28
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZvPbjfOWHk3f6wB4oy6YP404o1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ5MzI0RTNDQzNDREU4OTBGMjg2NEUxQjFERjU2NDk1
OUYxNDYxNjAeFw0yNDA0MDQwMzUzMzVaFw0yNTA0MDMwMzU4MzVaMDMxMTAvBgNV
BAMTKEE0ODZFRjY0RjZEQzM3MzY2MTMyN0IxODgyNjkyRjJBRDQ0REE2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZHQvAzXeAe4kai9jUBIjGsbF
9+En0aV5Unqg45e93+X/5S8BSiHPy0I2M1y+55n2OqYvuPMWae1x148CAVtmITks
Yv9pY43irSQiV1II64W2OkkXQ0LDpAjJyGt8R+pDZPA0OIQVpQtHkJLDbQTysSHv
I/g/J2WatxnhFh1Fn9wDYogpneUfi2IGuJZ6mTOboTs00JkvKt9hKKjlr4n6MElT
JDlDW3mQI63uT68ueeOdG2Ca552k/GYX9+76XB8ZL6UC1WoJfEFxX/47LNLYOfOa
6WrrAvmrJnOfOoF+9sUE1VQ30lkPKWWR0MFCAwC43BuGblfCHm5r7fDABUPnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpIbvZPbcNzZhMnsYgmkvKtRNpvswHwYDVR0j
BBgwFoAULZMk48w83okPKGThsd9WSVnxRhYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHk0S3VSN2VWajVncjUxZmdQbVpMUXFKb1pqY0ViSmhxWnA1ZG1QVjlt
blYvMS8yRDkzMjRFM0NDM0NERTg5MEYyODY0RTFCMURGNTY0OTU5RjE0NjE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJEOTMyNEUzQ0MzQ0RFODkw
RjI4NjRFMUIxREY1NjQ5NTlGMTQ2MTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h5NEt1UjdlVmo1Z3I1MWZnUG1aTFFxSm9aamNFYkpocVpwNWRtUFY5bW5WLzEv
MzEzODM3MmUzNjMyMmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzczMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuz5QMA0GCSqGSIb3DQEBCwUAA4IBAQCjqzvbK12w
ccBCpGfhyxSm/7NYPWxTjIMut/FLqNRb7o2GQZ6M9IHyXER6AAr5XlzpTIalqnex
/CnYILzvUf7CEUcjbzwoa1FqnNUeTlSk1N9fpSsBGOn7b5lNJCc5EdN0wzMfDJYm
4NGZx4+yRm7hR/nKjbJK/lLp60VfUSkfodAgOSkvrWEgLkcBJoUI9qbiZDWB3l+1
5G5GDaUvJBiXkLka2j4MSTkHPqX8VMIyXsecg/+XjO0QQLdH5PBoPTmN+3t0+eRE
3A8dN06c2RUUQ+ssO34JqXHThPBhJ4uFjjPxGeMYgnQiaWbf8dt49fAj2EMy+qEl
7qi7G6+9Rxoo
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:48:34 2024 by rpki-client on console-fra.rpki-client.org