Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32342d3234203d3e20323638313335.roa
File:                     34352e3137302e362e302f32342d3234203d3e20323638313335.roa (raw, json)
Hash identifier:          s0tFXxtzb6cEPMnD87qoDXFy3uoFg2yZmwt29IUJPCc=
Subject key identifier:   90:3D:33:3E:D5:6B:CA:F3:CF:4B:C2:37:39:72:02:A8:30:B6:2F:38
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       51FAA13E3C3227FCAC177820A6CE1BAE0BC5901C
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32342d3234203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:17:19 +0000
ROA not before:           Fri 12 May 2023 13:12:19 +0000
ROA not after:            Fri 10 May 2024 13:17:19 +0000
asID:                     268135
IP address blocks:        45.170.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fa:a1:3e:3c:32:27:fc:ac:17:78:20:a6:ce:1b:ae:0b:c5:90:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:12:19 2023 GMT
            Not After : May 10 13:17:19 2024 GMT
        Subject: CN=903D333ED56BCAF3CF4BC237397202A830B62F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:4b:67:75:09:da:a4:b2:85:40:f8:55:80:
                    2d:3c:fc:5f:5a:f8:dc:a5:d8:8c:3b:f8:15:51:ec:
                    35:1f:ee:71:c5:bb:a1:d2:5c:5a:5c:19:59:9b:3e:
                    56:90:b6:e7:8f:8a:a8:5e:02:e1:48:3b:7d:31:f7:
                    ec:6c:74:ae:4a:1b:7d:81:38:65:78:cd:e7:48:a0:
                    30:24:88:7b:09:bd:b9:c0:f1:b0:6f:41:dc:a9:1d:
                    ba:16:6a:c1:b1:94:10:ea:8b:c7:9f:5c:12:54:16:
                    64:1f:60:44:88:3e:2b:27:d0:c0:78:55:e1:c6:44:
                    39:aa:49:69:75:4c:43:92:9a:f2:9a:7c:80:97:21:
                    d0:56:8c:18:ba:5a:4c:a7:7f:42:e9:48:ea:36:a0:
                    1f:31:24:4f:1d:ad:1b:2e:98:9f:0e:da:a8:f7:11:
                    25:73:66:db:54:f3:30:2c:97:02:06:b1:7a:5e:e6:
                    3e:b2:09:2b:c2:df:2d:3f:71:8f:b6:7d:aa:1f:76:
                    52:71:8e:0e:4d:43:ce:f7:79:b5:28:94:b9:41:42:
                    24:25:00:c1:0e:bb:48:68:50:d4:f6:6b:57:f8:a6:
                    e7:d7:ae:27:be:6f:06:ab:a1:34:87:cc:8f:be:f9:
                    58:f7:9e:b3:33:15:0c:a2:71:56:e4:36:23:4e:a5:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3D:33:3E:D5:6B:CA:F3:CF:4B:C2:37:39:72:02:A8:30:B6:2F:38
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32342d3234203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c9:cc:95:99:37:d5:d9:99:57:f3:fd:89:7c:9a:fb:fd:0f:
         13:8a:dd:59:2f:63:5f:3a:56:72:a4:54:f8:56:29:56:11:c3:
         38:92:f7:38:97:30:28:c6:c9:76:fc:53:15:e8:b9:77:b2:fb:
         51:12:63:48:94:8d:ab:aa:3f:ad:92:9a:20:c7:8f:44:93:c2:
         a3:91:80:02:d5:c3:d0:ce:1d:b8:ca:18:e2:d4:de:7f:ad:71:
         13:11:51:24:58:a5:b5:ef:55:f7:45:48:60:08:68:4d:79:7b:
         00:57:f0:ae:50:c3:b7:33:4e:45:9b:89:97:a4:14:b8:fa:a6:
         fc:d2:c4:b6:86:be:3c:0c:35:06:37:4f:42:8c:62:f0:f1:66:
         95:67:43:c2:cb:58:f1:ea:ef:16:f2:5d:80:3b:0f:f2:35:36:
         ac:5d:24:e9:74:0f:69:82:06:af:a1:75:5d:4d:06:23:02:2e:
         a9:1d:1f:b3:40:45:b1:68:81:b1:f3:e9:ca:d9:52:29:65:62:
         f2:85:f0:b4:b6:1b:a9:60:77:47:c3:42:4c:c9:4a:78:28:79:
         0d:31:10:cf:68:c5:04:f4:a3:ef:bd:aa:7d:0c:4d:a9:3e:5f:
         cf:f4:b6:16:15:54:f7:4e:c2:12:dd:8a:af:c0:0d:1e:fa:02:
         62:dc:0e:d3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUfqhPjwyJ/ysF3ggps4brgvFkBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1OTdBQjI4NDBEMEJCNEM3NjZDRjMyNzBEMkUyQTcz
RkM0OTNDRDAeFw0yMzA1MTIxMzEyMTlaFw0yNDA1MTAxMzE3MTlaMDMxMTAvBgNV
BAMTKDkwM0QzMzNFRDU2QkNBRjNDRjRCQzIzNzM5NzIwMkE4MzBCNjJGMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEEtndQnapLKFQPhVgC08/F9a
+Nyl2Iw7+BVR7DUf7nHFu6HSXFpcGVmbPlaQtuePiqheAuFIO30x9+xsdK5KG32B
OGV4zedIoDAkiHsJvbnA8bBvQdypHboWasGxlBDqi8efXBJUFmQfYESIPisn0MB4
VeHGRDmqSWl1TEOSmvKafICXIdBWjBi6Wkynf0LpSOo2oB8xJE8drRsumJ8O2qj3
ESVzZttU8zAslwIGsXpe5j6yCSvC3y0/cY+2faofdlJxjg5NQ873ebUolLlBQiQl
AMEOu0hoUNT2a1f4pufXrie+bwaroTSHzI+++Vj3nrMzFQyicVbkNiNOpbm3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkD0zPtVryvPPS8I3OXICqDC2LzgwHwYDVR0j
BBgwFoAUHFl6soQNC7THZs8ycNLipz/Ek80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMC8xQzU5N0FCMjg0MEQwQkI0Qzc2NkNGMzI3MEQyRTJBNzNGQzQ5M0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNTk3QUIyODQwRDBCQjRD
NzY2Q0YzMjcwRDJFMkE3M0ZDNDkzQ0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvdXM0VU1Yc3BuSFN6NTROTTlDNU5tZ0VMbnlISG11VDFxU3BDRVlnQkw0LzAv
MzQzNTJlMzEzNzMwMmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2qBjANBgkqhkiG9w0BAQsFAAOCAQEAZMnMlZk31dmZ
V/P9iXya+/0PE4rdWS9jXzpWcqRU+FYpVhHDOJL3OJcwKMbJdvxTFei5d7L7URJj
SJSNq6o/rZKaIMePRJPCo5GAAtXD0M4duMoY4tTef61xExFRJFilte9V90VIYAho
TXl7AFfwrlDDtzNORZuJl6QUuPqm/NLEtoa+PAw1BjdPQoxi8PFmlWdDwstY8erv
FvJdgDsP8jU2rF0k6XQPaYIGr6F1XU0GIwIuqR0fs0BFsWiBsfPpytlSKWVi8oXw
tLYbqWB3R8NCTMlKeCh5DTEQz2jFBPSj772qfQxNqT5fz/S2FhVU907CEt2Kr8AN
HvoCYtwO0w==
-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:40 2024 by rpki-client on console-ams.rpki-client.org