Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          /q+prFqxGbHu9sHOoiBAP+Rn681rB1FNzSCPe7ISCIo=
Subject key identifier:   94:0F:57:B2:8F:44:CC:EC:73:13:F5:BA:33:28:13:BF:E2:2C:09:20
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       947BB4AC353E231455AB251AC9E36462A61E43
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:24:10 +0000
ROA not before:           Tue 30 Jul 2024 12:19:10 +0000
ROA not after:            Tue 29 Jul 2025 12:24:10 +0000
asID:                     268678
IP address blocks:        45.165.150.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            94:7b:b4:ac:35:3e:23:14:55:ab:25:1a:c9:e3:64:62:a6:1e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:19:10 2024 GMT
            Not After : Jul 29 12:24:10 2025 GMT
        Subject: CN=940F57B28F44CCEC7313F5BA332813BFE22C0920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:83:7c:a7:20:ab:85:7f:d1:c3:d5:47:10:b4:
                    65:26:82:23:17:ca:6b:7d:7f:01:65:25:3f:fc:4f:
                    ca:e1:9e:ff:bd:cc:f1:97:1c:b6:0f:36:bd:54:88:
                    f5:3d:c2:1b:10:4d:17:38:dd:25:ba:22:2c:ce:9f:
                    28:29:2a:fe:70:7d:2e:0d:ea:ef:8f:da:17:77:3f:
                    25:ff:e1:64:45:18:c6:4b:ed:d4:e2:a2:67:d7:6d:
                    3f:8c:a0:e9:6f:ec:92:74:00:07:7b:2f:01:20:fb:
                    15:ee:46:42:e3:a8:2d:df:ec:f9:15:4c:f9:e3:f3:
                    d9:cd:07:47:df:6f:0e:89:d4:c5:e0:fe:45:a5:d7:
                    b7:3e:9f:e8:f4:d3:d7:a9:16:21:74:83:1f:dd:9e:
                    12:0e:7d:7b:13:ca:b9:5e:47:fe:2d:23:5d:a3:cb:
                    0c:eb:e8:e5:db:cd:31:cd:69:66:8b:c1:7b:a1:75:
                    92:2c:71:5d:cf:e5:af:76:64:cc:b0:e3:1f:e2:4b:
                    d1:2a:43:75:36:87:8a:da:a4:32:18:36:27:1b:99:
                    2f:20:4f:b8:8e:a6:bd:ab:c8:ba:2a:20:53:22:b3:
                    4f:66:9e:af:d7:4e:7b:a9:ff:67:fd:56:f9:f6:30:
                    ef:c5:3c:be:79:a7:0f:30:55:f6:d8:b3:2a:cc:a8:
                    34:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0F:57:B2:8F:44:CC:EC:73:13:F5:BA:33:28:13:BF:E2:2C:09:20
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3135302e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:be:8e:19:87:f0:72:9c:e9:c1:c3:a2:ef:74:92:24:96:66:
         83:33:79:b2:4d:e4:5d:9d:b6:ee:fb:ee:1a:d1:86:f4:e1:0e:
         7b:6e:d2:7b:c6:fb:79:c8:56:20:d0:66:fa:c7:50:52:d3:09:
         76:cc:e4:ad:7d:7f:f0:66:4c:44:32:65:88:2b:f3:94:aa:67:
         34:d8:99:c7:86:35:df:98:f0:75:e7:41:56:d3:b8:2b:ea:94:
         76:48:31:9c:de:8f:11:d7:f4:80:e5:0d:ed:12:26:b1:67:81:
         62:96:21:55:ad:5a:b0:f0:ac:bf:4d:a5:e6:a1:68:c5:5f:56:
         10:be:78:98:3f:b1:b0:9f:77:01:db:d1:7e:e6:a8:a6:91:6e:
         bd:86:92:9c:80:6b:24:f2:7b:bd:52:bf:4e:aa:65:2f:07:70:
         bf:47:6e:34:fb:82:3f:cd:d9:f8:02:9a:d2:4a:a6:60:20:de:
         5a:15:78:02:71:26:fd:77:a0:99:75:18:27:33:52:5b:39:dd:
         3d:88:8d:1e:fe:51:14:cc:ca:ba:4c:de:3b:bd:c5:96:b6:0b:
         a2:fd:c2:df:2e:bf:bf:03:95:77:28:ad:5f:83:30:33:2d:29:
         ec:8e:e5:ec:d3:8c:93:28:0e:44:76:f4:ed:a3:dc:a5:1c:4a:
         8b:1b:b6:3b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAJR7tKw1PiMUVaslGsnjZGKmHkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkwNTVGQkVCRjY3ODVGNzcxQkZGNzAxMjQyRUY5MjBF
MDA0ODJGRDAeFw0yNDA3MzAxMjE5MTBaFw0yNTA3MjkxMjI0MTBaMDMxMTAvBgNV
BAMTKDk0MEY1N0IyOEY0NENDRUM3MzEzRjVCQTMzMjgxM0JGRTIyQzA5MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxg3ynIKuFf9HD1UcQtGUmgiMX
ymt9fwFlJT/8T8rhnv+9zPGXHLYPNr1UiPU9whsQTRc43SW6IizOnygpKv5wfS4N
6u+P2hd3PyX/4WRFGMZL7dTiomfXbT+MoOlv7JJ0AAd7LwEg+xXuRkLjqC3f7PkV
TPnj89nNB0ffbw6J1MXg/kWl17c+n+j009epFiF0gx/dnhIOfXsTyrleR/4tI12j
ywzr6OXbzTHNaWaLwXuhdZIscV3P5a92ZMyw4x/iS9EqQ3U2h4rapDIYNicbmS8g
T7iOpr2ryLoqIFMis09mnq/XTnup/2f9Vvn2MO/FPL55pw8wVfbYsyrMqDSvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlA9Xso9EzOxzE/W6MygTv+IsCSAwHwYDVR0j
BBgwFoAUaQVfvr9nhfdxv/cBJC75IOAEgv0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC82OTA1NUZCRUJGNjc4NUY3NzFCRkY3MDEyNDJFRjkyMEUwMDQ4MkZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5MDU1RkJFQkY2Nzg1Rjc3
MUJGRjcwMTI0MkVGOTIwRTAwNDgyRkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzQzNTJlMzEzNjM1MmUzMTM1MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpZYwDQYJKoZIhvcNAQELBQADggEBAG++jhmH
8HKc6cHDou90kiSWZoMzebJN5F2dtu777hrRhvThDntu0nvG+3nIViDQZvrHUFLT
CXbM5K19f/BmTEQyZYgr85SqZzTYmceGNd+Y8HXnQVbTuCvqlHZIMZzejxHX9IDl
De0SJrFngWKWIVWtWrDwrL9NpeahaMVfVhC+eJg/sbCfdwHb0X7mqKaRbr2GkpyA
ayTye71Sv06qZS8HcL9HbjT7gj/N2fgCmtJKpmAg3loVeAJxJv13oJl1GCczUls5
3T2IjR7+URTMyrpM3ju9xZa2C6L9wt8uv78DlXcorV+DMDMtKeyO5ezTjJMoDkR2
9O2j3KUcSosbtjs=
-----END CERTIFICATE-----
Generated at Wed Oct 30 04:24:37 2024 by rpki-client on console-fra.rpki-client.org