Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32342d3234203d3e20323638343038.roa
File:                     34352e3136302e3132362e302f32342d3234203d3e20323638343038.roa (raw, json)
Hash identifier:          AxseEoQ1H3KnaHmo/5pM7lbzh+6r4YhulAsSZYGOdrQ=
Subject key identifier:   5C:E9:30:81:73:2B:52:BE:90:C1:42:57:82:CB:65:6E:8F:A3:24:44
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       73487BEE5AD69B5A044B8E0D4F6FD46BB2ABF736
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32342d3234203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        45.160.126.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:48:7b:ee:5a:d6:9b:5a:04:4b:8e:0d:4f:6f:d4:6b:b2:ab:f7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=5CE93081732B52BE90C1425782CB656E8FA32444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:6d:56:d4:7d:a9:e9:2f:bf:9a:67:f9:e4:
                    39:58:2f:60:13:ba:2a:63:2a:3d:00:14:a3:b3:3f:
                    49:d8:84:1e:5e:6a:e2:67:7c:8c:ca:d1:e0:31:80:
                    60:16:f5:e7:57:66:22:30:ee:3f:89:0a:ab:87:36:
                    fc:10:09:80:62:21:36:16:c0:a1:1f:c1:fe:12:9f:
                    63:09:a8:f8:77:2e:d5:66:cc:f6:af:e6:61:34:51:
                    e0:67:cc:b7:4f:cb:a8:c7:50:dc:40:ce:b7:a0:cd:
                    c3:aa:0b:f1:79:c6:40:b0:18:89:5f:ac:eb:64:34:
                    6d:cb:06:20:83:36:e6:4c:19:a3:55:05:6a:d7:46:
                    0b:ca:4c:63:24:61:64:dd:dd:47:cd:ee:71:12:5b:
                    3d:90:ce:7a:ba:ce:49:08:9a:1a:4e:e5:3d:88:e8:
                    ca:e4:a0:34:eb:e0:49:7c:24:dc:86:63:ff:01:fc:
                    bf:9c:63:39:f2:32:53:73:dd:f3:f0:e5:22:07:0f:
                    d2:e1:fa:6b:9f:4d:bf:c7:ef:4c:bf:29:4f:ed:4e:
                    14:f7:17:fc:5e:98:da:ec:c2:ac:3e:84:bd:35:f8:
                    c7:e3:cd:eb:14:b1:3f:39:f3:47:a4:c3:fa:a6:51:
                    4f:b1:09:cc:63:3a:cc:0c:6d:2d:56:f0:4e:e2:af:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:30:81:73:2B:52:BE:90:C1:42:57:82:CB:65:6E:8F:A3:24:44
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132362e302f32342d3234203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:ec:21:df:e2:5b:e0:03:97:44:e3:ef:79:50:a4:35:98:
         4a:8a:21:f7:0f:7d:bc:b9:1a:d4:f4:1f:49:04:ca:7e:e2:0a:
         99:d4:da:b0:b0:f6:44:e8:45:9f:16:cb:79:61:fb:08:ab:78:
         a2:aa:04:a8:47:30:1c:57:21:cb:97:a8:5f:e3:64:1b:14:2b:
         a4:38:b8:af:3a:9e:1d:36:08:01:85:11:ec:d7:92:7f:c5:50:
         f4:c8:12:06:73:89:62:be:1d:63:4a:26:1c:84:bd:f4:65:49:
         6a:7c:52:91:40:00:7e:29:cb:25:d6:d6:58:ab:ad:da:ce:39:
         ad:63:4c:c3:58:16:a6:75:1b:43:b7:7f:30:23:e0:48:c4:a1:
         b7:da:88:c9:a3:a5:d3:91:06:52:e1:fb:23:3f:1b:20:9e:e9:
         9d:ae:db:03:d4:09:dc:3a:28:43:14:19:ba:7a:99:32:ca:46:
         a9:f2:75:1b:d8:dd:d5:8c:e0:31:4d:69:34:52:6b:03:7e:c4:
         44:b1:92:be:b3:bd:e4:fe:13:a8:f7:52:75:33:0f:47:19:2d:
         28:1b:da:ac:5e:cf:99:11:66:44:06:12:5e:e5:a6:5a:a1:2c:
         19:15:19:98:fa:05:79:c0:1e:d3:9e:f4:2f:3f:d7:ab:16:8e:
         4e:10:8e:2c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUc0h77lrWm1oES44NT2/Ua7Kr9zYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMzJDMTAwRjZENzdEMDAwNEJDQTk0MzI4M0ZDQUVG
MjQ2MzM1QTAeFw0yNDA0MDQyMjM3MTZaFw0yNTA0MDMyMjQyMTZaMDMxMTAvBgNV
BAMTKDVDRTkzMDgxNzMyQjUyQkU5MEMxNDI1NzgyQ0I2NTZFOEZBMzI0NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDG1W1H2p6S+/mmf55DlYL2AT
uipjKj0AFKOzP0nYhB5eauJnfIzK0eAxgGAW9edXZiIw7j+JCquHNvwQCYBiITYW
wKEfwf4Sn2MJqPh3LtVmzPav5mE0UeBnzLdPy6jHUNxAzregzcOqC/F5xkCwGIlf
rOtkNG3LBiCDNuZMGaNVBWrXRgvKTGMkYWTd3UfN7nESWz2Qznq6zkkImhpO5T2I
6MrkoDTr4El8JNyGY/8B/L+cYznyMlNz3fPw5SIHD9Lh+mufTb/H70y/KU/tThT3
F/xemNrswqw+hL01+MfjzesUsT8580ekw/qmUU+xCcxjOswMbS1W8E7ir6plAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXOkwgXMrUr6QwUJXgstlbo+jJEQwHwYDVR0j
BBgwFoAUNQMsEA9td9AAS8qUMoP8rvJGM1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNld2t2NkJWSlVGelhIOWsyNVg1alczaWFYRHRaQVF4Z1V0dUd5RGlQ
UWsvMS8zNTAzMkMxMDBGNkQ3N0QwMDA0QkNBOTQzMjgzRkNBRUYyNDYzMzVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MDMyQzEwMEY2RDc3RDAw
MDRCQ0E5NDMyODNGQ0FFRjI0NjMzNUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZXdrdjZCVkpVRnpYSDlrMjVYNWpXM2lhWER0WkFReGdVdHVHeURpUFFrLzEv
MzQzNTJlMzEzNjMwMmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoH4wDQYJKoZIhvcNAQELBQADggEBAAtc7CHf
4lvgA5dE4+95UKQ1mEqKIfcPfby5GtT0H0kEyn7iCpnU2rCw9kToRZ8Wy3lh+wir
eKKqBKhHMBxXIcuXqF/jZBsUK6Q4uK86nh02CAGFEezXkn/FUPTIEgZziWK+HWNK
JhyEvfRlSWp8UpFAAH4pyyXW1lirrdrOOa1jTMNYFqZ1G0O3fzAj4EjEobfaiMmj
pdORBlLh+yM/GyCe6Z2u2wPUCdw6KEMUGbp6mTLKRqnydRvY3dWM4DFNaTRSawN+
xESxkr6zveT+E6j3UnUzD0cZLSgb2qxez5kRZkQGEl7lplqhLBkVGZj6BXnAHtOe
9C8/16sWjk4Qjiw=
-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:39 2024 by rpki-client on console-fra.rpki-client.org