Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36362e302f32342d3234203d3e20323638343434.roa
File:                     34352e3136312e36362e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier:          VfysK3CNi+idQ864aiJi/k33vq6z9QHo+q+NBeUFTFE=
Subject key identifier:   9C:4E:50:8F:B8:4E:9D:B4:ED:D5:A4:7C:0A:50:FC:08:EC:5B:27:7C
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       27F608EC8764E0B693B3D3EC573BE7E312A8A980
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36362e302f32342d3234203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:02 +0000
ROA not before:           Thu 04 Apr 2024 18:45:02 +0000
ROA not after:            Thu 03 Apr 2025 18:50:02 +0000
asID:                     268444
IP address blocks:        45.161.66.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f6:08:ec:87:64:e0:b6:93:b3:d3:ec:57:3b:e7:e3:12:a8:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:02 2024 GMT
            Not After : Apr  3 18:50:02 2025 GMT
        Subject: CN=9C4E508FB84E9DB4EDD5A47C0A50FC08EC5B277C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:97:5b:2f:c5:f5:0d:f1:3f:c6:d3:7c:46:
                    24:27:35:9b:28:87:1c:b5:10:87:bb:72:92:84:05:
                    58:7d:66:29:dd:b3:82:4f:68:57:ff:a6:ef:f9:ad:
                    d5:b7:aa:ea:ed:73:a4:3f:1c:a6:c8:46:a3:59:12:
                    24:5c:12:3d:d9:34:c8:74:b0:6f:d8:88:e1:bd:de:
                    9a:bb:f5:44:48:01:93:a8:d5:85:2d:bf:0b:e9:5d:
                    c2:3a:2d:15:80:7e:ad:70:15:d3:91:20:9f:1b:25:
                    f5:28:80:18:61:96:a6:90:1f:71:68:c0:6b:ac:2b:
                    c9:ec:50:66:91:99:5e:7a:0d:b7:2f:6c:d3:e3:cc:
                    92:c8:bf:90:03:a4:4e:78:2a:23:15:8f:af:c0:f1:
                    bc:b2:ca:d4:8c:d0:38:64:c2:a1:80:18:30:26:fc:
                    49:98:15:ab:4c:9f:0e:14:24:47:f9:e5:08:f4:a4:
                    3b:79:fb:ae:9d:e5:5c:f0:ec:02:69:ea:e1:2c:0a:
                    b2:d3:50:a8:5e:8e:63:04:39:ab:47:f1:e7:01:a3:
                    be:c8:a3:ba:55:7c:3a:e9:d1:0e:7e:58:4b:06:a0:
                    ca:85:7c:72:39:5f:c4:df:97:25:b4:50:04:c3:34:
                    df:80:53:66:18:a7:c3:fc:ea:1b:b5:31:84:4b:60:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:50:8F:B8:4E:9D:B4:ED:D5:A4:7C:0A:50:FC:08:EC:5B:27:7C
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36362e302f32342d3234203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e5:16:f4:02:08:08:0e:43:b8:e4:cf:8f:a0:83:7b:b3:75:
         28:6d:97:d4:4e:bf:00:1c:6b:c0:11:8b:06:4e:f6:7c:8e:33:
         21:63:3d:56:d1:fe:50:bc:5f:93:3e:d7:8a:59:0f:c3:b9:8e:
         ed:8a:75:14:ec:61:76:61:ea:c7:c9:2f:64:f6:26:b3:65:b4:
         24:24:a1:41:f3:ac:d2:02:49:ae:55:80:d5:15:b3:b6:c4:e8:
         3f:77:2f:0c:f8:8d:7b:de:06:b6:3c:ac:0d:a3:93:11:4b:85:
         a8:87:19:71:bf:40:eb:51:c2:e8:0f:80:cf:3a:5d:db:47:10:
         9a:14:c3:73:5b:d1:15:2a:b6:57:ca:7c:67:cd:05:99:34:7f:
         b0:51:75:84:39:54:f4:29:a4:8f:26:ff:0b:ec:21:05:ea:3a:
         7d:44:d1:14:0b:7e:5c:e8:32:c7:74:9d:7e:88:50:c6:a8:49:
         13:dd:df:8e:8f:44:d9:38:a1:c1:fd:c1:6d:16:db:7d:86:11:
         9a:d4:33:93:4a:86:6b:98:ce:71:63:86:48:2c:75:d3:55:74:
         98:03:77:7e:7e:5f:fc:c1:36:79:d8:e5:22:3a:20:4a:c7:53:
         da:6d:5a:ba:bd:0f:38:3d:38:ca:d3:94:10:3d:8f:10:4c:9e:
         be:30:2c:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJ/YI7Idk4LaTs9PsVzvn4xKoqYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCMzE5QjE0NTBGNDRFNERBM0UzMDgwQzFCRDM0MTQ1
MTY1NjIwMjAeFw0yNDA0MDQxODQ1MDJaFw0yNTA0MDMxODUwMDJaMDMxMTAvBgNV
BAMTKDlDNEU1MDhGQjg0RTlEQjRFREQ1QTQ3QzBBNTBGQzA4RUM1QjI3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OJdbL8X1DfE/xtN8RiQnNZso
hxy1EIe7cpKEBVh9Zinds4JPaFf/pu/5rdW3qurtc6Q/HKbIRqNZEiRcEj3ZNMh0
sG/YiOG93pq79URIAZOo1YUtvwvpXcI6LRWAfq1wFdORIJ8bJfUogBhhlqaQH3Fo
wGusK8nsUGaRmV56DbcvbNPjzJLIv5ADpE54KiMVj6/A8byyytSM0DhkwqGAGDAm
/EmYFatMnw4UJEf55Qj0pDt5+66d5Vzw7AJp6uEsCrLTUKhejmMEOatH8ecBo77I
o7pVfDrp0Q5+WEsGoMqFfHI5X8TflyW0UATDNN+AU2YYp8P86hu1MYRLYDGLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnE5Qj7hOnbTt1aR8ClD8COxbJ3wwHwYDVR0j
BBgwFoAU0rMZsUUPROTaPjCAwb00FFFlYgIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw
NW4vMS9EMkIzMTlCMTQ1MEY0NEU0REEzRTMwODBDMUJEMzQxNDUxNjU2MjAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyQjMxOUIxNDUwRjQ0RTRE
QTNFMzA4MEMxQkQzNDE0NTE2NTYyMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzEv
MzQzNTJlMzEzNjMxMmUzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaFCMA0GCSqGSIb3DQEBCwUAA4IBAQA+5Rb0AggI
DkO45M+PoIN7s3UobZfUTr8AHGvAEYsGTvZ8jjMhYz1W0f5QvF+TPteKWQ/DuY7t
inUU7GF2YerHyS9k9iazZbQkJKFB86zSAkmuVYDVFbO2xOg/dy8M+I173ga2PKwN
o5MRS4Wohxlxv0DrUcLoD4DPOl3bRxCaFMNzW9EVKrZXynxnzQWZNH+wUXWEOVT0
KaSPJv8L7CEF6jp9RNEUC35c6DLHdJ1+iFDGqEkT3d+Oj0TZOKHB/cFtFtt9hhGa
1DOTSoZrmM5xY4ZILHXTVXSYA3d+fl/8wTZ52OUiOiBKx1PabVq6vQ84PTjK05QQ
PY8QTJ6+MCz1
-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:03 2024 by rpki-client on console-ams.rpki-client.org