Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/34352e352e34322e302f32332d3233203d3e20323636303933.roa
File:                     34352e352e34322e302f32332d3233203d3e20323636303933.roa (raw, json)
Hash identifier:          1c4JTZMcPYN1OMqvPAj8xtFNoJSsEZpP7MVUdr8wXA8=
Subject key identifier:   D4:5B:2A:EE:D6:33:E6:29:3F:3F:EE:94:78:B8:6C:02:E8:F8:C4:9D
Certificate issuer:       /CN=2BA1450423003652CC20FD36A2AAD056FDA40D08
Certificate serial:       0A22557BCB65577B80C9DD84B557A652FC7A3648
Authority key identifier: 2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BA1450423003652CC20FD36A2AAD056FDA40D08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/34352e352e34322e302f32332d3233203d3e20323636303933.roa
Signing time:             Fri 05 Apr 2024 13:41:54 +0000
ROA not before:           Fri 05 Apr 2024 13:36:54 +0000
ROA not after:            Fri 04 Apr 2025 13:41:54 +0000
asID:                     266093
IP address blocks:        45.5.42.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:22:55:7b:cb:65:57:7b:80:c9:dd:84:b5:57:a6:52:fc:7a:36:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA1450423003652CC20FD36A2AAD056FDA40D08
        Validity
            Not Before: Apr  5 13:36:54 2024 GMT
            Not After : Apr  4 13:41:54 2025 GMT
        Subject: CN=D45B2AEED633E6293F3FEE9478B86C02E8F8C49D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:10:96:dd:c1:38:f9:5c:36:07:2b:3f:88:
                    b1:50:0a:29:5f:2a:16:2e:1a:f1:f7:75:15:3b:1b:
                    c3:39:bc:dd:08:6c:b0:de:6a:b4:66:e1:d0:81:fd:
                    88:15:f4:aa:31:77:bc:dc:7c:7d:70:cd:e8:17:17:
                    eb:28:fb:5d:89:e2:ef:3c:2c:c4:31:b2:72:3e:d5:
                    b0:a5:e2:9c:ab:d3:3e:14:8d:20:de:05:50:ce:41:
                    a0:24:02:6e:5f:56:81:67:42:d6:9d:dd:8b:b6:30:
                    b2:11:db:e1:65:bd:0b:36:05:b2:49:4c:b7:2d:f5:
                    c0:7e:68:b2:44:5b:1c:e0:02:af:e4:a1:9a:e8:0b:
                    53:21:9c:c5:52:87:6f:75:2e:75:61:47:f1:30:65:
                    10:44:c0:eb:54:d4:99:7f:df:ab:ed:d7:dc:2a:4f:
                    a8:16:a2:93:e1:7f:43:54:b3:fc:5a:db:73:7f:a2:
                    c1:4c:8b:fa:a6:bd:1d:13:a3:da:6c:77:62:1f:19:
                    4c:4b:72:8d:ae:2b:0e:76:d2:de:09:eb:fb:5d:c7:
                    fa:74:73:86:eb:8f:50:b1:4b:0b:0d:55:41:46:fe:
                    96:ab:a1:8e:6e:50:ae:88:e0:80:6f:59:39:4c:79:
                    53:ef:85:bc:7f:0d:a5:5c:c7:f7:fa:dc:31:90:a0:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5B:2A:EE:D6:33:E6:29:3F:3F:EE:94:78:B8:6C:02:E8:F8:C4:9D
            X509v3 Authority Key Identifier:
                keyid:2B:A1:45:04:23:00:36:52:CC:20:FD:36:A2:AA:D0:56:FD:A4:0D:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/2BA1450423003652CC20FD36A2AAD056FDA40D08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BA1450423003652CC20FD36A2AAD056FDA40D08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FMNxuydgtnPAM56nvpwdRdiWbAvx2PTqGLVjmGiBTYQ/1/34352e352e34322e302f32332d3233203d3e20323636303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:32:a3:51:01:46:55:6b:df:4c:be:3e:f6:7a:42:e1:74:5b:
         d2:d8:3c:1a:ae:65:ab:35:8d:9c:79:2d:a7:59:fe:90:e2:0b:
         17:63:22:1e:f1:5a:a2:9e:81:6e:81:5c:d4:87:51:91:be:8e:
         c6:ec:a6:ce:d4:da:dc:9e:c4:ae:3d:b1:02:72:f6:1b:c9:3d:
         e7:ca:81:bd:96:76:5e:04:3f:a8:61:63:dc:db:e3:0f:31:14:
         28:ff:d5:df:d6:50:6e:cd:f6:dc:9a:5c:72:2f:67:21:77:6b:
         63:2e:97:90:a1:1e:e5:0b:76:38:1f:86:06:28:bc:5e:f0:70:
         92:5d:a7:cd:91:d7:a4:b5:b8:fb:c9:0c:5d:33:e2:40:ea:de:
         0a:00:f8:70:21:14:66:3e:dd:a4:71:dd:c1:a2:3e:55:9a:10:
         0a:8d:7c:9a:87:19:34:d1:c0:54:fd:bc:f8:05:66:6c:e0:6d:
         69:30:e8:70:67:02:58:15:18:f6:4b:2f:98:90:c3:d6:50:20:
         c8:30:1b:e1:be:39:31:db:ba:e7:ea:7c:d7:8b:e2:a4:7d:d2:
         c2:66:45:75:0b:56:47:8d:a6:d7:02:d5:d8:73:7c:c2:d1:da:
         1e:be:97:a8:a0:e5:7d:29:84:57:17:22:85:f4:4e:ec:e4:08:
         a2:74:33:51
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUCiJVe8tlV3uAyd2EtVemUvx6NkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJBMTQ1MDQyMzAwMzY1MkNDMjBGRDM2QTJBQUQwNTZG
REE0MEQwODAeFw0yNDA0MDUxMzM2NTRaFw0yNTA0MDQxMzQxNTRaMDMxMTAvBgNV
BAMTKEQ0NUIyQUVFRDYzM0U2MjkzRjNGRUU5NDc4Qjg2QzAyRThGOEM0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYChCW3cE4+Vw2Bys/iLFQCilf
KhYuGvH3dRU7G8M5vN0IbLDearRm4dCB/YgV9Koxd7zcfH1wzegXF+so+12J4u88
LMQxsnI+1bCl4pyr0z4UjSDeBVDOQaAkAm5fVoFnQtad3Yu2MLIR2+FlvQs2BbJJ
TLct9cB+aLJEWxzgAq/koZroC1MhnMVSh291LnVhR/EwZRBEwOtU1Jl/36vt19wq
T6gWopPhf0NUs/xa23N/osFMi/qmvR0To9psd2IfGUxLco2uKw520t4J6/tdx/p0
c4brj1CxSwsNVUFG/paroY5uUK6I4IBvWTlMeVPvhbx/DaVcx/f63DGQoLRpAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU1Fsq7tYz5ik/P+6UeLhsAuj4xJ0wHwYDVR0j
BBgwFoAUK6FFBCMANlLMIP02oqrQVv2kDQgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEZNTnh1eWRndG5QQU01Nm52cHdkUmRpV2JBdngyUFRxR0xWam1HaUJU
WVEvMS8yQkExNDUwNDIzMDAzNjUyQ0MyMEZEMzZBMkFBRDA1NkZEQTQwRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCQTE0NTA0MjMwMDM2NTJD
QzIwRkQzNkEyQUFEMDU2RkRBNDBEMDguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRGTU54dXlkZ3RuUEFNNTZudnB3ZFJkaVdiQXZ4MlBUcUdMVmptR2lCVFlRLzEv
MzQzNTJlMzUyZTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzYzMDM5
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAEtBSowDQYJKoZIhvcNAQELBQADggEBAJYyo1EBRlVr30y+
PvZ6QuF0W9LYPBquZas1jZx5LadZ/pDiCxdjIh7xWqKegW6BXNSHUZG+jsbsps7U
2tyexK49sQJy9hvJPefKgb2Wdl4EP6hhY9zb4w8xFCj/1d/WUG7N9tyaXHIvZyF3
a2Mul5ChHuULdjgfhgYovF7wcJJdp82R16S1uPvJDF0z4kDq3goA+HAhFGY+3aRx
3cGiPlWaEAqNfJqHGTTRwFT9vPgFZmzgbWkw6HBnAlgVGPZLL5iQw9ZQIMgwG+G+
OTHbuufqfNeL4qR90sJmRXULVkeNptcC1dhzfMLR2h6+l6ig5X0phFcXIoX0Tuzk
CKJ0M1E=
-----END CERTIFICATE-----
Generated at Sat Apr 13 17:14:33 2024 by rpki-client on console-ams.rpki-client.org