Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
File:                     34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          gGQpGOatNADML6B4m/19OOCHKPwsJKtvx5U8F9Eoc+Q=
Subject key identifier:   83:A9:D4:01:FF:51:49:A7:72:1A:2A:EF:4A:9F:CE:73:AF:B1:25:0A
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       6C527575A1F464586E75690C1806681BAFB54BE4
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa
Signing time:             Fri 30 Aug 2024 18:34:09 +0000
ROA not before:           Fri 30 Aug 2024 18:29:09 +0000
ROA not after:            Fri 29 Aug 2025 18:34:09 +0000
asID:                     268257
IP address blocks:        45.236.241.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:52:75:75:a1:f4:64:58:6e:75:69:0c:18:06:68:1b:af:b5:4b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 18:29:09 2024 GMT
            Not After : Aug 29 18:34:09 2025 GMT
        Subject: CN=83A9D401FF5149A7721A2AEF4A9FCE73AFB1250A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:c6:22:94:61:23:f0:ea:0b:b8:38:d2:d8:
                    89:15:41:e0:65:6c:59:cf:b1:87:a4:89:eb:c9:32:
                    ca:8f:86:f9:b1:8d:e0:47:2c:90:91:ff:17:71:d2:
                    af:37:bb:0e:65:d4:5c:c0:9f:ed:82:49:ef:aa:40:
                    02:13:95:9e:35:ae:3e:dc:83:44:1d:7e:93:a5:f0:
                    03:19:10:c7:b0:0c:06:6e:39:ef:15:f5:3f:0d:4e:
                    ae:b1:53:16:40:da:44:ca:a3:d3:67:e7:b9:c0:c4:
                    ca:85:1e:38:6b:37:6e:dc:9d:33:60:18:c2:34:2a:
                    e3:6a:36:a6:9a:26:c3:eb:48:32:3b:74:6e:15:d8:
                    a0:26:7a:8f:0e:4c:9a:18:86:cf:ac:ba:ef:01:1e:
                    73:48:c4:81:d6:c8:ae:0a:c1:fa:ed:58:de:d1:4e:
                    f5:18:50:20:24:ba:67:7f:79:99:43:b1:25:5a:3a:
                    39:54:d9:2b:d2:f7:25:1e:7a:8c:fc:d7:14:4e:41:
                    6c:d8:d4:6f:40:f7:ca:76:47:a9:7f:5d:19:9a:a3:
                    5d:fc:3a:37:1d:c1:b4:f4:79:95:13:a9:70:c8:be:
                    91:e3:09:bb:86:e2:03:f5:5c:fe:74:db:aa:1d:8f:
                    58:d0:8e:a4:38:4d:12:68:6c:42:82:41:a8:0e:21:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:D4:01:FF:51:49:A7:72:1A:2A:EF:4A:9F:CE:73:AF:B1:25:0A
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234312e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:eb:20:e8:b9:48:64:62:63:df:89:9c:93:e4:42:32:04:74:
         37:0c:91:48:9d:e0:47:a4:b2:0d:3b:cb:59:d8:d1:a1:66:53:
         c2:ac:ac:68:76:63:e1:19:87:0f:93:98:aa:c9:08:4c:2a:ec:
         11:1b:c9:f5:4a:02:a5:fc:e2:8d:43:25:26:ca:3e:9d:90:11:
         12:95:09:e6:98:3a:e4:57:9b:d9:0c:14:ab:74:15:a9:3c:fc:
         60:d9:6f:69:38:cc:d8:c7:87:55:60:d4:8b:35:97:04:bb:9c:
         c8:b6:9e:43:9c:28:0a:fe:e0:e1:b4:ec:40:d3:ee:33:f9:cc:
         e4:9b:18:99:69:97:25:92:7f:ea:84:3b:fb:cc:34:b6:b0:58:
         77:5d:ad:e1:d5:0c:f1:6d:3a:8c:2a:35:3f:30:e1:15:ce:3b:
         c4:8f:56:fa:d8:9f:a3:5f:84:28:21:e6:44:71:36:10:c3:00:
         70:36:14:e9:20:cb:96:b4:04:f4:15:4f:f1:bd:9b:43:3c:48:
         33:ae:fe:46:3c:0d:8c:93:b6:57:87:7e:f0:d3:03:5a:56:7f:
         9f:83:dc:a8:4c:8d:c9:23:d1:20:05:2a:2c:98:e2:2b:25:26:
         c0:ae:06:be:89:3c:d3:68:82:53:99:6b:d4:8d:f5:01:7e:65:
         bf:ef:1f:a1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbFJ1daH0ZFhudWkMGAZoG6+1S+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc2NzgwNTcwODBFNTIwNjFBMUNBNkU0NTRBREVCOTM0
NUI0NjQ2QjAeFw0yNDA4MzAxODI5MDlaFw0yNTA4MjkxODM0MDlaMDMxMTAvBgNV
BAMTKDgzQTlENDAxRkY1MTQ5QTc3MjFBMkFFRjRBOUZDRTczQUZCMTI1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+8YilGEj8OoLuDjS2IkVQeBl
bFnPsYekievJMsqPhvmxjeBHLJCR/xdx0q83uw5l1FzAn+2CSe+qQAITlZ41rj7c
g0QdfpOl8AMZEMewDAZuOe8V9T8NTq6xUxZA2kTKo9Nn57nAxMqFHjhrN27cnTNg
GMI0KuNqNqaaJsPrSDI7dG4V2KAmeo8OTJoYhs+suu8BHnNIxIHWyK4KwfrtWN7R
TvUYUCAkumd/eZlDsSVaOjlU2SvS9yUeeoz81xROQWzY1G9A98p2R6l/XRmao138
OjcdwbT0eZUTqXDIvpHjCbuG4gP1XP5026odj1jQjqQ4TRJobEKCQagOIU3/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg6nUAf9RSadyGirvSp/Oc6+xJQowHwYDVR0j
BBgwFoAUV2eAVwgOUgYaHKbkVK3rk0W0ZGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTFlNEtiRmJtVHpwRTNkNEhWU0sxRjloVzlwOXpTMjhTd2ppVGd1MkxR
blgvMC81NzY3ODA1NzA4MEU1MjA2MUExQ0E2RTQ1NEFERUI5MzQ1QjQ2NDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3Njc4MDU3MDgwRTUyMDYx
QTFDQTZFNDU0QURFQjkzNDVCNDY0NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUxZTRLYkZibVR6cEUzZDRIVlNLMUY5aFc5cDl6UzI4U3dqaVRndTJMUW5YLzAv
MzQzNTJlMzIzMzM2MmUzMjM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7PEwDQYJKoZIhvcNAQELBQADggEBAHPrIOi5
SGRiY9+JnJPkQjIEdDcMkUid4Eeksg07y1nY0aFmU8KsrGh2Y+EZhw+TmKrJCEwq
7BEbyfVKAqX84o1DJSbKPp2QERKVCeaYOuRXm9kMFKt0Fak8/GDZb2k4zNjHh1Vg
1Is1lwS7nMi2nkOcKAr+4OG07EDT7jP5zOSbGJlplyWSf+qEO/vMNLawWHddreHV
DPFtOowqNT8w4RXOO8SPVvrYn6NfhCgh5kRxNhDDAHA2FOkgy5a0BPQVT/G9m0M8
SDOu/kY8DYyTtleHfvDTA1pWf5+D3KhMjckj0SAFKiyY4islJsCuBr6JPNNoglOZ
a9SN9QF+Zb/vH6E=
-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org