Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
File:                     3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa (raw, json)
Hash identifier:          Gl/OXE6BsTVz3V1DLSybYHV4FyjkFjbsyUR7WENK34Q=
Subject key identifier:   35:9D:67:1B:08:1D:11:85:5D:EB:2D:12:85:C2:08:9B:97:54:D6:01
Certificate issuer:       /CN=F69AA99C56F931362559734CF519AD71790C2490
Certificate serial:       0EDD3CBE38A55A4BC9E26006881580F29E1B0447
Authority key identifier: F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa
Signing time:             Tue 03 Sep 2024 23:18:10 +0000
ROA not before:           Tue 03 Sep 2024 23:13:10 +0000
ROA not after:            Tue 02 Sep 2025 23:18:10 +0000
asID:                     263292
IP address blocks:        189.126.40.0/21 maxlen: 21

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:dd:3c:be:38:a5:5a:4b:c9:e2:60:06:88:15:80:f2:9e:1b:04:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69AA99C56F931362559734CF519AD71790C2490
        Validity
            Not Before: Sep  3 23:13:10 2024 GMT
            Not After : Sep  2 23:18:10 2025 GMT
        Subject: CN=359D671B081D11855DEB2D1285C2089B9754D601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:61:50:37:5d:1e:f9:6c:a4:6b:36:11:1c:
                    39:88:e8:78:bf:cd:cc:93:57:2d:be:42:fb:90:26:
                    23:8a:8b:9d:45:27:22:fb:00:10:c7:be:0d:e8:44:
                    e7:0b:4a:d9:b7:c0:ec:c9:fa:11:85:62:68:98:72:
                    60:fe:f3:93:e5:63:27:1d:02:48:c4:d1:25:d2:06:
                    f7:fe:72:42:bd:cb:49:de:c0:bc:15:aa:69:86:08:
                    d8:e2:b8:79:5c:df:20:c8:c6:f8:14:29:48:28:98:
                    d1:85:3a:dd:ed:45:37:d8:df:5e:66:20:08:74:98:
                    a7:e1:53:d3:db:ef:19:4a:b0:d5:bf:7c:67:37:29:
                    bc:22:8d:30:f3:4a:32:66:a2:53:23:ed:3a:c8:97:
                    17:4b:52:13:24:97:cf:3d:84:3a:e4:46:4d:5c:63:
                    66:1d:95:bc:43:74:ea:eb:98:22:fd:ac:55:6b:33:
                    cf:f2:a2:b5:98:b3:53:8a:78:0e:5f:ea:02:9b:1a:
                    b5:86:3f:fb:6a:9b:e1:e1:c8:78:da:eb:1e:a0:fc:
                    52:58:be:03:60:3c:a2:6d:11:31:f8:fd:84:f8:6c:
                    34:ef:cf:2f:52:d4:a7:3c:62:3e:bb:7b:e9:90:e8:
                    e5:78:06:8a:0f:4d:50:15:a5:df:2e:32:50:bc:a4:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9D:67:1B:08:1D:11:85:5D:EB:2D:12:85:C2:08:9B:97:54:D6:01
            X509v3 Authority Key Identifier:
                keyid:F6:9A:A9:9C:56:F9:31:36:25:59:73:4C:F5:19:AD:71:79:0C:24:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/F69AA99C56F931362559734CF519AD71790C2490.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F69AA99C56F931362559734CF519AD71790C2490.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/bqipfjTFrVGPSGzm1PqFsetLjr6XXWPEcUXksbdVzwF/0/3138392e3132362e34302e302f32312d3231203d3e20323633323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:9e:b0:4b:99:55:6d:a4:6b:1d:31:cf:26:83:35:d7:5c:
         84:72:a5:88:92:c9:d9:32:68:bf:60:51:ac:73:cc:f9:ac:7d:
         6a:f2:f4:f6:7c:81:6c:45:3a:3f:e8:05:ea:0c:c3:7c:3b:d0:
         7b:95:e7:ac:c8:c3:4a:33:1d:3d:a0:c0:ca:83:0b:ba:32:9a:
         5f:7d:6d:b1:dc:2c:ec:3c:49:04:58:bd:fd:c6:31:dc:cb:23:
         a1:46:f5:18:76:b4:66:8d:fe:f0:bb:db:e4:7f:12:40:57:cc:
         fd:d6:01:12:11:41:65:13:97:31:2f:de:3e:d7:ab:fb:9d:0b:
         b5:30:f2:9c:1a:3a:11:78:1d:85:49:ab:95:eb:e2:3a:00:f3:
         be:66:3d:ee:df:50:83:2c:6a:64:c1:f1:a2:a6:fa:c7:83:34:
         7a:34:32:dd:8f:0b:74:cb:d6:56:31:46:36:9c:38:6c:6e:a3:
         08:ef:1e:da:de:91:24:f4:29:03:5a:ba:3d:be:3f:40:ac:90:
         57:e0:73:d8:2d:76:14:95:44:4a:61:46:a0:d8:82:a0:58:83:
         68:c1:76:cb:b9:36:93:76:58:6d:61:04:43:33:f3:bf:2c:e1:
         98:7a:fb:24:d4:08:dd:53:d3:8f:90:b2:51:a5:26:8c:23:d7:
         10:11:03:f8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDt08vjilWkvJ4mAGiBWA8p4bBEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3
OTBDMjQ5MDAeFw0yNDA5MDMyMzEzMTBaFw0yNTA5MDIyMzE4MTBaMDMxMTAvBgNV
BAMTKDM1OUQ2NzFCMDgxRDExODU1REVCMkQxMjg1QzIwODlCOTc1NEQ2MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNp2FQN10e+WykazYRHDmI6Hi/
zcyTVy2+QvuQJiOKi51FJyL7ABDHvg3oROcLStm3wOzJ+hGFYmiYcmD+85PlYycd
AkjE0SXSBvf+ckK9y0newLwVqmmGCNjiuHlc3yDIxvgUKUgomNGFOt3tRTfY315m
IAh0mKfhU9Pb7xlKsNW/fGc3KbwijTDzSjJmolMj7TrIlxdLUhMkl889hDrkRk1c
Y2YdlbxDdOrrmCL9rFVrM8/yorWYs1OKeA5f6gKbGrWGP/tqm+HhyHja6x6g/FJY
vgNgPKJtETH4/YT4bDTvzy9S1Kc8Yj67e+mQ6OV4BooPTVAVpd8uMlC8pMLDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUNZ1nGwgdEYVd6y0ShcIIm5dU1gEwHwYDVR0j
BBgwFoAU9pqpnFb5MTYlWXNM9RmtcXkMJJAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9icWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendG
LzAvRjY5QUE5OUM1NkY5MzEzNjI1NTk3MzRDRjUxOUFENzE3OTBDMjQ5MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9GNjlBQTk5QzU2RjkzMTM2MjU1
OTczNENGNTE5QUQ3MTc5MEMyNDkwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9i
cWlwZmpURnJWR1BTR3ptMVBxRnNldExqcjZYWFdQRWNVWGtzYmRWendGLzAvMzEz
ODM5MmUzMTMyMzYyZTM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2MzMz
MjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAO9figwDQYJKoZIhvcNAQELBQADggEBAEubnrBLmVVt
pGsdMc8mgzXXXIRypYiSydkyaL9gUaxzzPmsfWry9PZ8gWxFOj/oBeoMw3w70HuV
56zIw0ozHT2gwMqDC7oyml99bbHcLOw8SQRYvf3GMdzLI6FG9Rh2tGaN/vC72+R/
EkBXzP3WARIRQWUTlzEv3j7Xq/udC7Uw8pwaOhF4HYVJq5Xr4joA875mPe7fUIMs
amTB8aKm+seDNHo0Mt2PC3TL1lYxRjacOGxuowjvHtrekST0KQNauj2+P0CskFfg
c9gtdhSVREphRqDYgqBYg2jBdsu5NpN2WG1hBEMz878s4Zh6+yTUCN1T04+QslGl
Jowj1xARA/g=
-----END CERTIFICATE-----
Generated at Wed Sep 11 04:50:14 2024 by rpki-client on console-fra.rpki-client.org