Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32332d3233203d3e20323639313735.roa
File:                     34352e3138312e39342e302f32332d3233203d3e20323639313735.roa (raw, json)
Hash identifier:          zgswB40BTLHhH8Cgo7pRz4DKVeSLFtMiS0W1oENUl/A=
Subject key identifier:   0D:DA:F3:E2:00:88:D2:B1:CD:97:33:C4:83:49:F9:80:19:9B:87:22
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       114AC150916450DC039951345F12D40DB5259F11
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32332d3233203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:48 +0000
ROA not before:           Wed 03 Apr 2024 21:05:48 +0000
ROA not after:            Wed 02 Apr 2025 21:10:48 +0000
asID:                     269175
IP address blocks:        45.181.94.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4a:c1:50:91:64:50:dc:03:99:51:34:5f:12:d4:0d:b5:25:9f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:48 2024 GMT
            Not After : Apr  2 21:10:48 2025 GMT
        Subject: CN=0DDAF3E20088D2B1CD9733C48349F980199B8722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:32:f4:69:19:7d:f5:5a:56:5d:03:21:65:
                    1e:8a:d9:6c:5e:ea:eb:4e:dd:d8:18:cf:69:94:b4:
                    5f:7a:d3:29:b8:6d:bd:71:89:61:6a:4d:a4:26:1a:
                    1f:ee:7e:7e:8a:b7:2c:a6:5e:c0:a1:81:f1:a3:71:
                    a2:e5:71:7d:aa:9a:ce:5e:a0:05:09:fd:00:ac:c3:
                    f7:b5:ea:5c:14:69:49:b2:b0:6f:24:91:4c:49:c5:
                    6f:3b:8e:fb:db:3f:08:90:fb:68:77:ea:17:ed:b4:
                    30:44:70:55:fc:4c:6f:93:fe:23:58:1f:66:78:2d:
                    2f:91:47:d4:93:ee:76:88:4c:c8:3d:8b:7e:18:ce:
                    c0:1b:9b:f8:e0:41:58:b4:80:1b:78:79:59:2d:39:
                    8f:f3:9c:d5:d5:90:b8:84:e9:d3:3f:1f:7f:44:78:
                    c8:21:cc:a2:d9:d7:4f:c6:25:f0:6a:93:d0:a1:79:
                    53:36:1a:8c:d3:d0:3a:a4:14:e2:61:8d:a5:18:52:
                    ad:1c:a4:29:22:10:45:79:35:fa:12:99:a4:a8:52:
                    f5:87:9a:38:36:c6:73:76:2d:f1:ba:01:2c:b7:5e:
                    ae:36:be:bf:a7:1b:b2:73:4d:94:ec:60:11:d5:a2:
                    98:dd:5c:d1:2b:6e:fe:f8:9d:1c:1a:5a:4d:44:60:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DA:F3:E2:00:88:D2:B1:CD:97:33:C4:83:49:F9:80:19:9B:87:22
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39342e302f32332d3233203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:0b:b4:a8:4c:87:e0:41:61:03:25:de:cd:0f:9a:20:fc:
         22:3d:fb:ed:f4:ac:90:2a:31:89:c3:e9:df:66:43:01:ac:36:
         e5:cc:69:9d:41:a3:ed:cd:a1:af:aa:13:58:83:a2:32:06:56:
         87:54:0b:9e:f0:9b:ec:da:55:27:0d:25:1c:27:69:73:1e:04:
         30:fb:ce:e6:32:11:f7:19:15:96:c4:a6:89:65:56:1c:f5:93:
         20:3c:63:1f:de:59:0e:8c:22:e2:6c:d6:65:54:94:5a:54:e4:
         80:7f:43:e4:5a:41:29:1b:67:c1:14:ab:81:b8:f4:68:8d:76:
         f5:b5:22:32:4e:b2:22:26:e9:49:eb:c1:27:27:36:a1:db:3d:
         7e:b2:bb:87:84:69:5a:be:e7:40:58:78:69:3f:4a:14:85:28:
         24:d8:c9:53:fe:f7:f1:6d:c6:c6:d4:6b:04:ab:81:4a:37:cc:
         36:4e:4a:85:f2:2a:27:07:dd:2f:e4:bd:ef:70:fb:6b:ee:c6:
         89:7a:fe:0d:e5:0b:99:e3:b6:cf:7b:91:2d:c7:6f:27:14:e8:
         2c:22:06:20:9b:6a:04:86:be:c8:6c:ca:01:75:7f:94:e2:8c:
         08:27:a9:85:c3:47:6c:b3:dd:dd:ad:5b:f6:1d:b3:98:5a:6d:
         4e:2c:6e:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEUrBUJFkUNwDmVE0XxLUDbUlnxEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA2QjExRTYzQjlDNzBGN0Y4MTFDNjgwNkM3RkUyOThG
ODEyOTVDQzAeFw0yNDA0MDMyMTA1NDhaFw0yNTA0MDIyMTEwNDhaMDMxMTAvBgNV
BAMTKDBEREFGM0UyMDA4OEQyQjFDRDk3MzNDNDgzNDlGOTgwMTk5Qjg3MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvDL0aRl99VpWXQMhZR6K2Wxe
6utO3dgYz2mUtF960ym4bb1xiWFqTaQmGh/ufn6KtyymXsChgfGjcaLlcX2qms5e
oAUJ/QCsw/e16lwUaUmysG8kkUxJxW87jvvbPwiQ+2h36hfttDBEcFX8TG+T/iNY
H2Z4LS+RR9ST7naITMg9i34YzsAbm/jgQVi0gBt4eVktOY/znNXVkLiE6dM/H39E
eMghzKLZ10/GJfBqk9CheVM2GozT0DqkFOJhjaUYUq0cpCkiEEV5NfoSmaSoUvWH
mjg2xnN2LfG6ASy3Xq42vr+nG7JzTZTsYBHVopjdXNErbv74nRwaWk1EYO2tAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDdrz4gCI0rHNlzPEg0n5gBmbhyIwHwYDVR0j
BBgwFoAU0GsR5juccPf4EcaAbH/imPgSlcwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMS9EMDZCMTFFNjNCOUM3MEY3RjgxMUM2ODA2QzdGRTI5OEY4MTI5NUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwNkIxMUU2M0I5QzcwRjdG
ODExQzY4MDZDN0ZFMjk4RjgxMjk1Q0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzEv
MzQzNTJlMzEzODMxMmUzOTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbVeMA0GCSqGSIb3DQEBCwUAA4IBAQByvAu0qEyH
4EFhAyXezQ+aIPwiPfvt9KyQKjGJw+nfZkMBrDblzGmdQaPtzaGvqhNYg6IyBlaH
VAue8Jvs2lUnDSUcJ2lzHgQw+87mMhH3GRWWxKaJZVYc9ZMgPGMf3lkOjCLibNZl
VJRaVOSAf0PkWkEpG2fBFKuBuPRojXb1tSIyTrIiJulJ68EnJzah2z1+sruHhGla
vudAWHhpP0oUhSgk2MlT/vfxbcbG1GsEq4FKN8w2TkqF8ionB90v5L3vcPtr7saJ
ev4N5QuZ47bPe5Etx28nFOgsIgYgm2oEhr7IbMoBdX+U4owIJ6mFw0dss93drVv2
HbOYWm1OLG6i
-----END CERTIFICATE-----
Generated at Sat Aug 17 09:09:22 2024 by rpki-client on console-fra.rpki-client.org