Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323936.roa
File:                     3137372e38352e34342e302f32322d3232203d3e20323633323936.roa (raw, json)
Hash identifier:          xanNW2E6oC9Yye7t5+yj6cdBnq0eE1Ywj58VVM0oaqw=
Subject key identifier:   FA:5E:D3:73:B7:9F:C4:8A:BE:DB:6D:49:F9:F3:97:E4:69:6C:91:C0
Certificate issuer:       /CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
Certificate serial:       7FF3DB8AD7C9AB1DF58A46621CC7900AE0350E4C
Authority key identifier: E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323936.roa
Signing time:             Wed 12 Jun 2024 00:54:17 +0000
ROA not before:           Wed 12 Jun 2024 00:49:17 +0000
ROA not after:            Wed 11 Jun 2025 00:54:17 +0000
asID:                     263296
IP address blocks:        177.85.44.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:db:8a:d7:c9:ab:1d:f5:8a:46:62:1c:c7:90:0a:e0:35:0e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B
        Validity
            Not Before: Jun 12 00:49:17 2024 GMT
            Not After : Jun 11 00:54:17 2025 GMT
        Subject: CN=FA5ED373B79FC48ABEDB6D49F9F397E4696C91C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:a8:83:57:b7:5f:44:7b:24:eb:1e:f9:a3:
                    99:28:3d:e5:d4:e0:c6:a0:a9:61:0c:3e:d5:be:94:
                    46:a8:d9:8c:6e:ea:a2:b8:05:8e:23:05:be:e7:f3:
                    fe:c9:8f:78:36:bf:92:eb:c2:87:84:36:78:58:eb:
                    ea:f6:96:2d:32:66:af:ce:02:b5:06:81:2f:6c:6f:
                    f4:55:af:12:48:4b:e6:da:d4:be:8e:6b:6e:d4:af:
                    af:22:08:c9:f3:bd:ed:ee:59:42:7c:f4:4a:9d:3d:
                    9e:6d:26:7f:73:28:03:fa:27:0c:dd:43:b1:6b:8c:
                    bc:16:2c:64:24:00:5e:b6:42:a5:0b:ab:89:30:55:
                    6f:88:2d:a1:cc:a3:a9:1e:ca:b9:aa:ef:71:80:76:
                    f2:32:c6:fe:82:2b:d8:c7:3a:cb:bf:45:1a:36:68:
                    97:66:63:ee:a1:40:17:2c:e4:f1:19:5d:25:a6:ab:
                    ab:0d:4f:17:bb:ce:c5:4b:6d:34:04:26:66:ff:c0:
                    b5:a4:06:13:19:d4:88:65:7e:bc:1d:15:ad:5f:b7:
                    47:84:f0:26:80:70:d3:40:62:1c:66:2e:2d:02:99:
                    09:40:65:0d:0c:ee:c2:c1:3c:12:7a:a4:f5:0a:70:
                    61:cf:9c:e5:7c:c3:bb:de:0b:d3:e3:ce:b2:ce:a0:
                    8f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:D3:73:B7:9F:C4:8A:BE:DB:6D:49:F9:F3:97:E4:69:6C:91:C0
            X509v3 Authority Key Identifier:
                keyid:E1:91:DE:39:00:DF:8B:A2:32:F6:BB:C8:D0:29:D8:0A:32:B4:CB:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E191DE3900DF8BA232F6BBC8D029D80A32B4CB7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3137372e38352e34342e302f32322d3232203d3e20323633323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:50:6d:89:93:4b:fd:f4:d9:e4:f9:49:4c:37:db:b9:53:bb:
         2b:74:a7:39:31:ca:cb:a9:f3:1f:bb:27:4c:24:e5:9f:66:3c:
         87:7f:6d:61:e3:89:3d:f3:ea:f1:1e:fe:fc:7b:55:b4:71:f4:
         63:cb:7f:91:16:5f:6d:4d:25:33:74:21:89:82:6e:bc:38:27:
         1d:1a:fe:ca:b2:99:5c:05:26:8a:b3:ac:d1:f1:68:75:58:55:
         dd:2b:96:24:4c:df:0d:78:31:e6:8e:95:79:7d:62:83:e0:b5:
         3e:aa:75:d9:8a:aa:7d:17:7d:06:73:89:66:54:14:24:d0:d3:
         58:74:29:6f:dc:6b:6f:02:c5:e4:b1:11:af:27:25:56:4d:20:
         02:c5:7b:f8:cd:a1:dc:6c:f5:6b:e3:ed:a3:1e:1c:0c:19:14:
         62:38:8b:c0:ee:85:1c:e7:a1:94:fa:79:a2:4a:01:44:b6:92:
         44:7e:07:f6:75:53:6b:ba:3a:6e:81:74:70:31:5a:5a:d6:33:
         02:bc:ea:bc:58:0c:5a:70:21:7d:e7:6a:75:d4:d0:3a:8d:fb:
         84:ca:e0:49:95:40:6f:6d:1c:11:97:c5:3a:81:10:58:ce:d0:
         fc:3d:56:4a:c2:af:63:88:a4:fd:24:30:6f:c4:5d:be:e5:65:
         2e:ee:33:f7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUf/PbitfJqx31ikZiHMeQCuA1DkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5MURFMzkwMERGOEJBMjMyRjZCQkM4RDAyOUQ4MEEz
MkI0Q0I3QjAeFw0yNDA2MTIwMDQ5MTdaFw0yNTA2MTEwMDU0MTdaMDMxMTAvBgNV
BAMTKEZBNUVEMzczQjc5RkM0OEFCRURCNkQ0OUY5RjM5N0U0Njk2QzkxQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IqiDV7dfRHsk6x75o5koPeXU
4MagqWEMPtW+lEao2Yxu6qK4BY4jBb7n8/7Jj3g2v5LrwoeENnhY6+r2li0yZq/O
ArUGgS9sb/RVrxJIS+ba1L6Oa27Ur68iCMnzve3uWUJ89EqdPZ5tJn9zKAP6Jwzd
Q7FrjLwWLGQkAF62QqULq4kwVW+ILaHMo6keyrmq73GAdvIyxv6CK9jHOsu/RRo2
aJdmY+6hQBcs5PEZXSWmq6sNTxe7zsVLbTQEJmb/wLWkBhMZ1IhlfrwdFa1ft0eE
8CaAcNNAYhxmLi0CmQlAZQ0M7sLBPBJ6pPUKcGHPnOV8w7veC9PjzrLOoI8ZAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU+l7Tc7efxIq+221J+fOX5GlskcAwHwYDVR0j
BBgwFoAU4ZHeOQDfi6Iy9rvI0CnYCjK0y3swDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvRTE5MURFMzkwMERGOEJBMjMyRjZCQkM4RDAyOUQ4MEEzMkI0Q0I3Qi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkxREUzOTAwREY4QkEyMzJG
NkJCQzhEMDI5RDgwQTMyQjRDQjdCLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzEz
NzM3MmUzODM1MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzIz
OTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCsVUsMA0GCSqGSIb3DQEBCwUAA4IBAQCGUG2Jk0v99Nnk
+UlMN9u5U7srdKc5McrLqfMfuydMJOWfZjyHf21h44k98+rxHv78e1W0cfRjy3+R
Fl9tTSUzdCGJgm68OCcdGv7KsplcBSaKs6zR8Wh1WFXdK5YkTN8NeDHmjpV5fWKD
4LU+qnXZiqp9F30Gc4lmVBQk0NNYdClv3GtvAsXksRGvJyVWTSACxXv4zaHcbPVr
4+2jHhwMGRRiOIvA7oUc56GU+nmiSgFEtpJEfgf2dVNrujpugXRwMVpa1jMCvOq8
WAxacCF952p11NA6jfuEyuBJlUBvbRwRl8U6gRBYztD8PVZKwq9jiKT9JDBvxF2+
5WUu7jP3
-----END CERTIFICATE-----
Generated at Sun Aug 11 12:33:45 2024 by rpki-client on console-ams.rpki-client.org