Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
File:                     34352e3233342e342e302f32322d3332203d3e20323637333531.roa (raw, json)
Hash identifier:          gFyPyPltD4sxdlatjyAmhmaSDyTJBwrOQg7wORGm9Jc=
Subject key identifier:   DA:16:F9:75:78:6A:95:86:4B:71:17:CA:2B:86:3B:33:AF:0C:86:0F
Certificate issuer:       /CN=C9BCE7ED5329B2924BB6ED82F5127100E496B51E
Certificate serial:       209C1BFD854BB47DE994CC95636A2D3B163D73DA
Authority key identifier: C9:BC:E7:ED:53:29:B2:92:4B:B6:ED:82:F5:12:71:00:E4:96:B5:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
Signing time:             Wed 06 Dec 2023 10:30:45 +0000
ROA not before:           Wed 06 Dec 2023 10:25:45 +0000
ROA not after:            Wed 04 Dec 2024 10:30:45 +0000
asID:                     267351
IP address blocks:        45.234.4.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9c:1b:fd:85:4b:b4:7d:e9:94:cc:95:63:6a:2d:3b:16:3d:73:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9BCE7ED5329B2924BB6ED82F5127100E496B51E
        Validity
            Not Before: Dec  6 10:25:45 2023 GMT
            Not After : Dec  4 10:30:45 2024 GMT
        Subject: CN=DA16F975786A95864B7117CA2B863B33AF0C860F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:95:5c:ac:a3:42:1e:25:1b:4f:52:93:02:0a:
                    32:8e:42:27:16:22:23:30:b0:d2:ae:c2:9a:e7:12:
                    51:45:5b:f6:01:78:6f:d0:fb:16:1b:d0:76:7b:61:
                    95:27:1e:c3:d1:fd:6f:3e:36:f0:85:40:ac:8e:26:
                    79:5e:0d:fd:04:24:6a:8d:43:b1:fc:04:90:53:65:
                    b8:6e:dd:5d:c4:68:64:81:1d:c6:e2:62:68:93:1b:
                    19:70:a9:2a:01:73:62:a7:e0:2f:8e:ed:4f:1f:35:
                    2d:91:f4:85:24:b6:a6:56:86:ec:ed:07:7c:dd:c8:
                    6a:67:5d:8b:c2:90:1f:33:b6:28:37:81:45:54:66:
                    68:a0:81:cb:b4:4d:f9:30:a5:cf:7a:89:9a:4a:ca:
                    5f:1a:61:78:18:6a:08:0c:d1:c3:80:a7:bd:b9:3d:
                    09:a1:95:f0:45:d1:b2:d2:40:10:34:93:26:94:d3:
                    00:fd:81:b1:7f:02:10:7e:fe:d0:1d:f0:f8:e4:ce:
                    22:76:96:dc:65:84:40:0b:7a:ef:c9:67:3d:79:4e:
                    c1:0f:6a:81:7c:68:e7:97:9b:b5:13:83:74:00:ed:
                    3b:fa:01:71:8b:d8:86:17:23:a6:a3:56:3b:8f:7e:
                    2d:8e:27:83:a5:ee:e0:63:d3:65:b8:2e:15:24:5d:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:16:F9:75:78:6A:95:86:4B:71:17:CA:2B:86:3B:33:AF:0C:86:0F
            X509v3 Authority Key Identifier:
                keyid:C9:BC:E7:ED:53:29:B2:92:4B:B6:ED:82:F5:12:71:00:E4:96:B5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9BCE7ED5329B2924BB6ED82F5127100E496B51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:31:e2:78:d9:ce:26:12:b8:20:12:87:a2:f7:2e:ec:2a:
         b3:da:9d:48:0e:d0:a4:1f:cd:87:04:2c:09:a5:29:b5:03:d5:
         f9:13:f4:bb:57:cf:df:db:aa:11:b9:c5:20:dc:1b:b9:99:cf:
         dd:9d:0d:2c:91:e0:73:af:ae:b4:a2:3c:d8:37:23:40:48:b2:
         ea:40:18:6f:fd:ca:b8:cd:5d:9b:87:ba:ff:9c:52:a7:66:11:
         cf:fb:2d:57:56:b8:c3:8b:2b:01:28:4e:11:c8:cf:f0:44:6a:
         99:76:e6:c5:1e:eb:53:1c:66:c0:7c:69:7d:15:30:7b:92:6d:
         73:b2:87:f4:7f:b4:79:86:2d:3a:0e:3a:44:91:d6:a2:79:3c:
         0c:b7:97:0e:13:17:6b:1b:04:2a:9f:40:f5:ed:d1:2a:67:a2:
         64:86:8d:10:b4:a7:b2:8d:56:4d:ce:d2:1d:6a:d2:ad:4e:40:
         b4:e7:31:85:28:ac:f9:9b:95:ce:b0:3d:63:dd:c4:41:40:cd:
         4b:58:95:77:ac:54:2c:0c:19:82:0b:ce:44:79:04:c5:46:18:
         ef:26:59:ad:f3:96:3f:e1:ee:e9:46:96:cf:0e:49:98:47:2e:
         c0:76:dd:64:d7:7c:9c:d7:bc:85:cb:e6:da:b7:27:f0:73:2c:
         10:d3:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----