Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
File:                     34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa (raw, json)
Hash identifier:          WoFkGwOfYawX9aBWY2I0MVU8uO0BS/QCF71ttkyKguM=
Subject key identifier:   84:D2:A9:A7:9B:6F:6F:A9:0D:17:67:BB:61:1E:BE:DE:17:0F:8F:06
Certificate issuer:       /CN=0AD419187EE22733AD61156D6DE766ECFC0666F0
Certificate serial:       411D78E09DBD4B281C5E6B0150A1A3DBB8BB9CF7
Authority key identifier: 0A:D4:19:18:7E:E2:27:33:AD:61:15:6D:6D:E7:66:EC:FC:06:66:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa
Signing time:             Wed 03 Apr 2024 20:42:05 +0000
ROA not before:           Wed 03 Apr 2024 20:37:05 +0000
ROA not after:            Wed 02 Apr 2025 20:42:05 +0000
asID:                     269288
IP address blocks:        45.183.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:78:e0:9d:bd:4b:28:1c:5e:6b:01:50:a1:a3:db:b8:bb:9c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD419187EE22733AD61156D6DE766ECFC0666F0
        Validity
            Not Before: Apr  3 20:37:05 2024 GMT
            Not After : Apr  2 20:42:05 2025 GMT
        Subject: CN=84D2A9A79B6F6FA90D1767BB611EBEDE170F8F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:c6:20:f9:60:46:1f:1a:38:78:08:ed:ac:
                    8b:d1:66:e1:2b:3b:ff:00:aa:ff:00:83:da:88:97:
                    09:e7:c3:02:17:f5:4f:70:9b:d7:d5:0a:cc:30:c4:
                    fb:68:60:c0:2a:9b:e5:a3:7e:a1:73:10:42:b9:8c:
                    fa:35:04:61:66:e5:b7:e4:3c:06:08:0f:94:63:b2:
                    54:52:67:04:7d:e4:cd:5b:cc:0e:41:1b:3b:5d:e4:
                    4a:4e:81:8e:6a:13:a5:09:d6:ae:e7:0f:b3:41:08:
                    b9:7a:9e:78:88:fe:e9:ae:04:12:1d:a1:c2:76:f3:
                    e7:7c:2e:da:0a:ae:d4:c8:57:89:c7:6e:b7:58:ef:
                    bf:28:66:69:25:91:52:1a:28:9d:84:f3:6e:ef:cf:
                    1f:03:19:df:92:f8:96:22:bc:d6:ef:7e:3e:34:a3:
                    00:8a:39:da:41:f9:e7:e1:da:07:86:5c:02:70:3d:
                    f6:01:89:cb:0a:16:69:51:e8:90:d8:70:05:70:09:
                    67:1f:63:4e:27:65:48:c4:de:a7:70:ac:15:25:06:
                    a2:a0:f0:00:76:87:af:66:9a:10:6f:3d:27:ee:cf:
                    0b:05:dd:d4:8f:e0:5f:3a:d0:47:a7:ed:81:0b:ac:
                    83:63:12:32:26:2a:75:04:24:a7:45:3b:14:bf:63:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D2:A9:A7:9B:6F:6F:A9:0D:17:67:BB:61:1E:BE:DE:17:0F:8F:06
            X509v3 Authority Key Identifier:
                keyid:0A:D4:19:18:7E:E2:27:33:AD:61:15:6D:6D:E7:66:EC:FC:06:66:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AD419187EE22733AD61156D6DE766ECFC0666F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/1/34352e3138332e3136342e302f32322d3234203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:76:71:17:a8:c7:7a:7c:e6:dc:33:dd:c0:69:82:26:5b:
         ea:45:a2:4d:4e:0f:0f:27:19:1e:2c:33:f6:c3:79:e1:4d:b1:
         14:7f:f9:30:57:6a:60:4a:f0:08:31:f7:0c:47:3b:42:01:32:
         9a:a2:f2:52:45:54:7e:ad:a7:80:52:63:93:00:66:17:73:6c:
         cf:f6:ce:52:95:84:7f:b6:69:7d:d7:7a:7b:aa:17:c4:68:d6:
         62:8c:5a:15:3e:64:5d:d3:5f:9f:55:4e:4f:1b:6d:69:18:1f:
         9f:c6:ee:8c:76:68:50:c4:8e:ce:8b:91:cc:20:ce:a5:c9:5c:
         04:46:98:33:a8:83:ef:36:4b:12:43:fa:15:96:3e:54:1c:2b:
         1e:eb:47:0b:18:90:c2:98:41:f2:06:46:0f:57:ad:9e:d3:0a:
         39:b1:8a:a2:d8:3d:24:f4:a9:41:d8:83:8e:ed:6f:e7:46:44:
         64:91:3c:2f:71:20:d2:c8:83:b8:da:08:51:08:e1:58:f6:52:
         c3:5b:06:54:f3:22:3d:00:37:a8:f9:c8:b7:75:c1:47:13:fd:
         5f:1d:36:69:9a:68:ea:f3:24:b1:25:70:85:c5:c4:39:4c:ea:
         f5:b3:35:25:58:03:ae:5a:d3:ae:5c:95:f3:00:5a:9c:05:a8:
         1f:7f:18:2e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQR144J29SygcXmsBUKGj27i7nPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFENDE5MTg3RUUyMjczM0FENjExNTZENkRFNzY2RUNG
QzA2NjZGMDAeFw0yNDA0MDMyMDM3MDVaFw0yNTA0MDIyMDQyMDVaMDMxMTAvBgNV
BAMTKDg0RDJBOUE3OUI2RjZGQTkwRDE3NjdCQjYxMUVCRURFMTcwRjhGMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SMYg+WBGHxo4eAjtrIvRZuEr
O/8Aqv8Ag9qIlwnnwwIX9U9wm9fVCswwxPtoYMAqm+WjfqFzEEK5jPo1BGFm5bfk
PAYID5RjslRSZwR95M1bzA5BGztd5EpOgY5qE6UJ1q7nD7NBCLl6nniI/umuBBId
ocJ28+d8LtoKrtTIV4nHbrdY778oZmklkVIaKJ2E827vzx8DGd+S+JYivNbvfj40
owCKOdpB+efh2geGXAJwPfYBicsKFmlR6JDYcAVwCWcfY04nZUjE3qdwrBUlBqKg
8AB2h69mmhBvPSfuzwsF3dSP4F860Een7YELrINjEjImKnUEJKdFOxS/YwMnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhNKpp5tvb6kNF2e7YR6+3hcPjwYwHwYDVR0j
BBgwFoAUCtQZGH7iJzOtYRVtbedm7PwGZvAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGpDRzJWcVFGNjRlQXlxZXFhbTd5OVNwYmE3NURXZGFyMlprTEN1dEtN
TGEvMS8wQUQ0MTkxODdFRTIyNzMzQUQ2MTE1NkQ2REU3NjZFQ0ZDMDY2NkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBRDQxOTE4N0VFMjI3MzNB
RDYxMTU2RDZERTc2NkVDRkMwNjY2RjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRqQ0cyVnFRRjY0ZUF5cWVxYW03eTlTcGJhNzVEV2RhcjJaa0xDdXRLTUxhLzEv
MzQzNTJlMzEzODMzMmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItt6QwDQYJKoZIhvcNAQELBQADggEBAHd8dnEX
qMd6fObcM93AaYImW+pFok1ODw8nGR4sM/bDeeFNsRR/+TBXamBK8Agx9wxHO0IB
Mpqi8lJFVH6tp4BSY5MAZhdzbM/2zlKVhH+2aX3XenuqF8Ro1mKMWhU+ZF3TX59V
Tk8bbWkYH5/G7ox2aFDEjs6LkcwgzqXJXARGmDOog+82SxJD+hWWPlQcKx7rRwsY
kMKYQfIGRg9XrZ7TCjmxiqLYPST0qUHYg47tb+dGRGSRPC9xINLIg7jaCFEI4Vj2
UsNbBlTzIj0AN6j5yLd1wUcT/V8dNmmaaOrzJLElcIXFxDlM6vWzNSVYA65a065c
lfMAWpwFqB9/GC4=
-----END CERTIFICATE-----
Generated at Tue Jun 18 13:14:06 2024 by rpki-client on console-fra.rpki-client.org