Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3332203d3e20323636343239.roa
File:                     3137302e38312e3233362e302f32322d3332203d3e20323636343239.roa (raw, json)
Hash identifier:          wyPH8rDW2mtH3HBiy592pAS66pOF4tLmNIdc10CTDvI=
Subject key identifier:   05:74:80:20:08:2D:C3:EC:8B:08:B9:48:77:E8:FB:C0:C0:4B:A3:CB
Certificate issuer:       /CN=B74E6A510855E6C9EDF83A8806E83DE65F3110D5
Certificate serial:       4AD78DFEB411F9C284B65B4C1A4304E73D88AF9B
Authority key identifier: B7:4E:6A:51:08:55:E6:C9:ED:F8:3A:88:06:E8:3D:E6:5F:31:10:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3332203d3e20323636343239.roa
Signing time:             Wed 14 Aug 2024 19:03:18 +0000
ROA not before:           Wed 14 Aug 2024 18:58:18 +0000
ROA not after:            Wed 13 Aug 2025 19:03:18 +0000
asID:                     266429
IP address blocks:        170.81.236.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d7:8d:fe:b4:11:f9:c2:84:b6:5b:4c:1a:43:04:e7:3d:88:af:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B74E6A510855E6C9EDF83A8806E83DE65F3110D5
        Validity
            Not Before: Aug 14 18:58:18 2024 GMT
            Not After : Aug 13 19:03:18 2025 GMT
        Subject: CN=05748020082DC3EC8B08B94877E8FBC0C04BA3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:a4:50:4a:17:06:88:69:3b:47:05:e0:97:
                    a5:a6:ba:97:3b:e2:4f:09:b0:35:7e:d0:be:fa:41:
                    05:03:24:ba:03:ee:ee:ee:a1:e4:50:3d:a6:68:bb:
                    0f:7a:f0:b3:89:bc:dc:ec:47:91:ed:3f:80:20:31:
                    b3:29:d8:80:35:33:ad:28:2e:aa:70:4a:7a:e2:08:
                    7f:57:f5:5e:ed:23:ca:02:f1:3d:1e:ca:5a:10:41:
                    44:cb:0e:e2:e2:22:ab:ed:92:a2:6d:b7:f6:38:b8:
                    23:4a:ac:e4:aa:a5:39:cb:49:94:ca:d4:f0:08:28:
                    54:7e:95:66:dc:f9:d2:68:d5:da:4f:58:6d:41:3b:
                    42:95:d1:4b:96:ee:5a:9c:9a:8f:10:1c:dc:2e:1b:
                    3d:a0:52:06:26:64:d0:88:5c:cb:54:a2:c6:8b:af:
                    13:08:11:b4:c4:3d:a8:b4:40:e4:29:14:e7:52:d6:
                    17:20:a3:37:75:d2:69:98:a9:f7:f1:3f:c6:12:f1:
                    2d:af:72:06:af:97:68:86:60:77:dd:68:36:45:46:
                    c3:0f:6d:e2:21:e7:a0:8b:d9:83:bc:8a:92:63:44:
                    68:55:cb:c1:65:9c:3b:e8:91:5c:fa:3e:58:e4:be:
                    6d:d0:c5:d6:72:6c:42:27:61:c5:73:50:ef:f0:0f:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:74:80:20:08:2D:C3:EC:8B:08:B9:48:77:E8:FB:C0:C0:4B:A3:CB
            X509v3 Authority Key Identifier:
                keyid:B7:4E:6A:51:08:55:E6:C9:ED:F8:3A:88:06:E8:3D:E6:5F:31:10:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B74E6A510855E6C9EDF83A8806E83DE65F3110D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/t3HPiiWp4j9D88Qcoq8NBGbCJm6awzHR8EJwSoNsPAV/0/3137302e38312e3233362e302f32322d3332203d3e20323636343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:db:ba:53:d6:7d:87:81:bc:b7:5e:c1:4c:ff:a0:ad:f9:
         e9:c9:45:f7:5b:26:51:84:e5:0a:69:3c:d1:96:d8:1b:81:8d:
         30:34:df:fd:4e:81:07:9c:9e:cd:17:9c:39:cd:f6:06:6d:27:
         41:cc:5b:e1:7e:8d:db:04:58:35:45:53:50:a7:97:c3:da:d5:
         32:d5:42:bb:8a:90:4d:bb:d5:95:fa:77:5d:c7:3b:c5:b6:0d:
         20:35:c2:b1:cb:72:62:cb:f3:1b:86:39:8d:61:15:fb:d8:a8:
         a7:a1:7a:cc:8f:b2:e7:cb:5a:63:4a:d8:71:85:45:98:51:63:
         be:d2:af:17:c1:9e:1f:83:ff:d4:b6:b9:dc:35:b3:5a:07:19:
         dd:56:f1:a2:0c:42:a0:81:9b:a1:f6:34:5b:8f:f6:6b:6e:47:
         2a:48:a4:1f:88:0c:3d:49:a0:60:ba:00:b3:b9:1f:16:75:11:
         c8:fb:96:92:32:1f:a4:2c:58:e4:e3:9f:a8:2a:8c:ae:3b:b1:
         e2:4f:6f:25:2b:e7:37:59:dd:5c:ab:4c:0b:69:c3:67:d5:fa:
         06:57:1a:be:c3:5e:c4:d6:18:94:dd:ef:7a:62:6c:86:39:4c:
         9a:98:ee:a0:66:f2:97:ab:2b:d6:4c:f9:e5:e2:ff:73:9b:9c:
         2d:b2:0b:13
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUSteN/rQR+cKEtltMGkME5z2Ir5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc0RTZBNTEwODU1RTZDOUVERjgzQTg4MDZFODNERTY1
RjMxMTBENTAeFw0yNDA4MTQxODU4MThaFw0yNTA4MTMxOTAzMThaMDMxMTAvBgNV
BAMTKDA1NzQ4MDIwMDgyREMzRUM4QjA4Qjk0ODc3RThGQkMwQzA0QkEzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sqRQShcGiGk7RwXgl6Wmupc7
4k8JsDV+0L76QQUDJLoD7u7uoeRQPaZouw968LOJvNzsR5HtP4AgMbMp2IA1M60o
LqpwSnriCH9X9V7tI8oC8T0eyloQQUTLDuLiIqvtkqJtt/Y4uCNKrOSqpTnLSZTK
1PAIKFR+lWbc+dJo1dpPWG1BO0KV0UuW7lqcmo8QHNwuGz2gUgYmZNCIXMtUosaL
rxMIEbTEPai0QOQpFOdS1hcgozd10mmYqffxP8YS8S2vcgavl2iGYHfdaDZFRsMP
beIh56CL2YO8ipJjRGhVy8FlnDvokVz6Pljkvm3QxdZybEInYcVzUO/wD6KtAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUBXSAIAgtw+yLCLlId+j7wMBLo8swHwYDVR0j
BBgwFoAUt05qUQhV5snt+DqIBug95l8xENUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby90M0hQaWlXcDRqOUQ4OFFjb3E4TkJHYkNKbTZhd3pIUjhFSndTb05zUEFW
LzAvQjc0RTZBNTEwODU1RTZDOUVERjgzQTg4MDZFODNERTY1RjMxMTBENS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNzRFNkE1MTA4NTVFNkM5RURG
ODNBODgwNkU4M0RFNjVGMzExMEQ1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby90
M0hQaWlXcDRqOUQ4OFFjb3E4TkJHYkNKbTZhd3pIUjhFSndTb05zUEFWLzAvMzEz
NzMwMmUzODMxMmUzMjMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzYz
NDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKqUewwDQYJKoZIhvcNAQELBQADggEBAJ4f27pT1n2H
gby3XsFM/6Ct+enJRfdbJlGE5QppPNGW2BuBjTA03/1OgQecns0XnDnN9gZtJ0HM
W+F+jdsEWDVFU1Cnl8Pa1TLVQruKkE271ZX6d13HO8W2DSA1wrHLcmLL8xuGOY1h
FfvYqKehesyPsufLWmNK2HGFRZhRY77SrxfBnh+D/9S2udw1s1oHGd1W8aIMQqCB
m6H2NFuP9mtuRypIpB+IDD1JoGC6ALO5HxZ1Ecj7lpIyH6QsWOTjn6gqjK47seJP
byUr5zdZ3VyrTAtpw2fV+gZXGr7DXsTWGJTd73pibIY5TJqY7qBm8perK9ZM+eXi
/3ObnC2yCxM=
-----END CERTIFICATE-----
Generated at Wed Sep 4 07:35:29 2024 by rpki-client on console-fra.rpki-client.org