Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
File:                     34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa (raw, json)
Hash identifier:          lOBRo9Qd6+4Q4TCpmn3+BSxz/g06OQY/XYgFqi2Ksc4=
Subject key identifier:   60:FF:85:62:A9:46:50:E5:BE:5E:A0:51:D6:3F:7D:90:09:43:F1:18
Certificate issuer:       /CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
Certificate serial:       64A4175DE78B434B055920FEFFF95DE229E86172
Authority key identifier: D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa
Signing time:             Thu 08 Aug 2024 19:18:00 +0000
ROA not before:           Thu 08 Aug 2024 19:13:00 +0000
ROA not after:            Thu 07 Aug 2025 19:18:00 +0000
asID:                     267093
IP address blocks:        45.228.192.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:17:5d:e7:8b:43:4b:05:59:20:fe:ff:f9:5d:e2:29:e8:61:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
        Validity
            Not Before: Aug  8 19:13:00 2024 GMT
            Not After : Aug  7 19:18:00 2025 GMT
        Subject: CN=60FF8562A94650E5BE5EA051D63F7D900943F118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:b7:f7:63:5d:a5:f4:a9:45:c2:61:1b:df:
                    cf:b8:af:51:9d:20:90:82:60:28:d4:28:e8:16:c9:
                    0b:cc:08:77:e1:bb:20:ad:25:47:f7:58:7e:55:e4:
                    f7:bf:87:0b:16:75:f1:1e:03:a5:ac:aa:a6:25:94:
                    da:de:6f:31:07:72:a0:1c:f4:39:09:40:99:a7:25:
                    8e:39:b5:8b:60:8b:d4:46:4a:60:18:6b:63:4b:f7:
                    29:c3:c1:1e:b8:f2:9c:4a:d6:34:14:da:f8:6b:42:
                    a9:af:a9:8a:d1:88:93:a9:7d:27:70:03:80:42:0e:
                    3d:3b:19:06:43:8c:1d:49:56:f3:f8:e7:08:c1:14:
                    e4:24:fe:66:60:87:77:6d:a6:44:92:84:cf:66:42:
                    45:18:ef:9e:13:3c:10:c7:8f:a3:bf:af:4a:de:34:
                    74:ba:c4:f0:35:02:50:d8:d5:01:d4:34:1d:a6:05:
                    10:df:e7:bb:3f:06:98:1a:4f:55:d2:21:dc:c8:3f:
                    f4:da:06:dd:9f:fd:c4:31:a0:1f:2a:d4:7c:a3:99:
                    da:17:9a:7e:71:9d:20:b1:40:44:02:3a:62:38:37:
                    a1:41:c1:55:78:8d:88:0a:c7:cd:9c:49:33:cf:e5:
                    19:7b:44:a9:d6:37:2b:ba:2e:1f:12:35:90:e4:f0:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:85:62:A9:46:50:E5:BE:5E:A0:51:D6:3F:7D:90:09:43:F1:18
            X509v3 Authority Key Identifier:
                keyid:D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139322e302f32332d3233203d3e20323637303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:75:83:cb:89:70:b5:05:b3:93:a8:41:7e:51:e9:58:0e:96:
         16:6b:35:d8:e3:f5:ff:6d:09:14:ab:80:96:65:ce:b5:4f:0a:
         49:c3:a9:4b:32:c9:39:58:9c:0c:fd:18:0b:13:6c:3a:55:ab:
         44:74:f0:7d:cd:cd:56:cb:cf:50:8d:f7:a0:19:cb:62:ce:4d:
         ee:57:e8:a7:69:cd:e3:8c:26:23:e1:03:4d:3d:b3:2f:f2:48:
         29:03:bf:63:57:87:13:2c:e9:75:7f:9b:3d:d8:60:8a:25:d7:
         28:dd:c3:c7:99:f7:6b:6d:d8:bb:4c:f0:1e:47:51:8e:66:ad:
         0a:d6:03:fb:fe:86:fc:55:9a:cc:be:27:f5:df:a1:06:2f:b5:
         d7:9b:10:2c:14:33:bf:bb:31:fa:7a:80:9e:71:80:6f:82:dc:
         f9:b0:45:62:22:05:76:af:b2:bb:ad:7a:a2:b7:c5:f6:67:b2:
         1c:f7:1b:8c:08:28:cc:39:0e:2f:54:7c:54:4f:be:8b:39:0a:
         97:87:5e:68:89:6c:58:39:50:f7:f2:0e:4c:06:8a:7e:bf:05:
         85:33:28:2b:9b:37:f1:2a:72:81:e4:cb:9b:cf:d4:69:10:55:
         92:ea:e4:0d:68:6e:ea:7f:00:e2:4d:03:d9:5a:4b:56:dd:fb:
         48:6a:ac:39
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZKQXXeeLQ0sFWSD+//ld4inoYXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk4QkI0QjkzMTVCN0IxREMyQjNGNDE2QjE5QUM3ODhC
NkNBODk3NzAeFw0yNDA4MDgxOTEzMDBaFw0yNTA4MDcxOTE4MDBaMDMxMTAvBgNV
BAMTKDYwRkY4NTYyQTk0NjUwRTVCRTVFQTA1MUQ2M0Y3RDkwMDk0M0YxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC53bf3Y12l9KlFwmEb38+4r1Gd
IJCCYCjUKOgWyQvMCHfhuyCtJUf3WH5V5Pe/hwsWdfEeA6WsqqYllNrebzEHcqAc
9DkJQJmnJY45tYtgi9RGSmAYa2NL9ynDwR648pxK1jQU2vhrQqmvqYrRiJOpfSdw
A4BCDj07GQZDjB1JVvP45wjBFOQk/mZgh3dtpkSShM9mQkUY754TPBDHj6O/r0re
NHS6xPA1AlDY1QHUNB2mBRDf57s/BpgaT1XSIdzIP/TaBt2f/cQxoB8q1HyjmdoX
mn5xnSCxQEQCOmI4N6FBwVV4jYgKx82cSTPP5Rl7RKnWNyu6Lh8SNZDk8NQRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYP+FYqlGUOW+XqBR1j99kAlD8RgwHwYDVR0j
BBgwFoAU2Yu0uTFbex3Cs/QWsZrHiLbKiXcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pqQ0JkdWtWQjNkS3M4QnI5U3d3Zk5LcUtkWTc4SmpOMjNyNW9XZGlu
dGkvMC9EOThCQjRCOTMxNUI3QjFEQzJCM0Y0MTZCMTlBQzc4OEI2Q0E4OTc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q5OEJCNEI5MzE1QjdCMURD
MkIzRjQxNkIxOUFDNzg4QjZDQTg5NzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKakNCZHVrVkIzZEtzOEJyOVN3d2ZOS3FLZFk3OEpqTjIzcjVvV2RpbnRpLzAv
MzQzNTJlMzIzMjM4MmUzMTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMDM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt5MAwDQYJKoZIhvcNAQELBQADggEBAMh1g8uJ
cLUFs5OoQX5R6VgOlhZrNdjj9f9tCRSrgJZlzrVPCknDqUsyyTlYnAz9GAsTbDpV
q0R08H3NzVbLz1CN96AZy2LOTe5X6KdpzeOMJiPhA009sy/ySCkDv2NXhxMs6XV/
mz3YYIol1yjdw8eZ92tt2LtM8B5HUY5mrQrWA/v+hvxVmsy+J/XfoQYvtdebECwU
M7+7Mfp6gJ5xgG+C3PmwRWIiBXavsruteqK3xfZnshz3G4wIKMw5Di9UfFRPvos5
CpeHXmiJbFg5UPfyDkwGin6/BYUzKCubN/EqcoHky5vP1GkQVZLq5A1obup/AOJN
A9laS1bd+0hqrDk=
-----END CERTIFICATE-----
Generated at Fri Nov 29 03:38:45 2024 by rpki-client on console-fra.rpki-client.org