Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32322d3232203d3e20323638363733.roa
File:                     34352e3136352e3130342e302f32322d3232203d3e20323638363733.roa (raw, json)
Hash identifier:          22LjaCL5speyE6/5pT75x/RtGJb4fO3saEOkaEfjOfE=
Subject key identifier:   35:90:4E:67:DE:EB:56:19:1A:75:AB:6B:37:8E:2A:A5:84:C4:99:57
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       21FBC19DCC3DDFE31A67823FAC9C083D2F50D81B
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32322d3232203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:11 +0000
ROA not before:           Wed 03 Apr 2024 23:18:11 +0000
ROA not after:            Wed 02 Apr 2025 23:23:11 +0000
asID:                     268673
IP address blocks:        45.165.104.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fb:c1:9d:cc:3d:df:e3:1a:67:82:3f:ac:9c:08:3d:2f:50:d8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:11 2024 GMT
            Not After : Apr  2 23:23:11 2025 GMT
        Subject: CN=35904E67DEEB56191A75AB6B378E2AA584C49957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:8f:a6:63:ed:4d:43:16:2a:c0:d9:81:4a:
                    65:21:d5:22:ec:ce:fb:0b:33:98:c1:d2:54:bd:79:
                    6f:e1:69:67:15:6c:4d:d2:e2:4e:40:b7:92:10:fe:
                    8e:37:fe:d5:f2:82:b6:cd:68:5f:34:9e:6c:da:d0:
                    86:ac:c4:fa:1c:3e:bc:89:0e:b0:c6:70:54:ef:09:
                    aa:a3:e5:d6:bf:ad:48:a5:0e:26:17:58:b0:b0:52:
                    1e:df:a5:f1:48:ac:6a:18:25:aa:b0:0a:32:45:73:
                    f5:ba:b0:fb:a7:a9:c8:27:a0:c3:4f:6d:c8:f7:44:
                    fa:7e:f1:b3:36:fd:a2:7b:24:3d:4c:36:b9:b9:4c:
                    c5:e8:18:48:7a:74:04:f6:15:b9:07:ff:4d:b6:8d:
                    21:a9:25:70:e4:40:d7:a4:f3:55:ba:45:3a:d9:11:
                    6e:da:08:1c:c3:90:63:14:0c:d9:54:96:16:d7:46:
                    01:61:59:6c:95:57:4a:e2:63:6b:c7:4d:18:6d:b5:
                    d2:f0:1d:81:20:7a:9f:7d:f4:67:5f:c1:86:56:d6:
                    cc:da:d8:48:77:eb:18:76:43:fe:72:15:7e:c2:d3:
                    68:ec:7c:5e:32:fd:15:7e:36:fe:ff:07:a2:8c:c8:
                    1b:0c:04:ae:78:bf:8f:c7:13:95:43:b1:9c:bd:0d:
                    80:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:90:4E:67:DE:EB:56:19:1A:75:AB:6B:37:8E:2A:A5:84:C4:99:57
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32322d3232203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9b:65:ce:76:4c:19:61:56:3c:2e:63:81:00:d0:dd:22:3f:
         32:4d:84:a6:b4:7e:2e:26:a9:78:48:fc:02:ec:1d:85:ae:0c:
         09:66:ba:33:db:f2:96:cf:c7:84:16:4f:37:14:d3:d1:c2:b8:
         18:16:1c:5b:3f:dd:3b:2e:17:f0:9c:f1:ce:dd:69:ae:20:17:
         6a:8c:a0:81:67:27:b3:7a:58:af:b0:c1:b3:14:b7:e1:b6:10:
         09:10:34:2a:c4:37:5f:a3:53:8d:90:1c:80:55:02:0f:bc:17:
         e0:d8:3a:4f:95:bd:52:a8:a8:00:16:3f:1e:88:54:9f:c0:85:
         10:8f:d5:94:58:f8:fb:8f:ab:69:ff:09:23:4f:2d:72:70:1d:
         c2:39:99:18:24:48:ec:5a:46:9e:10:5e:a2:fe:dc:6e:1a:ce:
         28:a1:74:20:f9:36:9b:26:06:6b:73:c6:6b:fe:ee:10:b9:26:
         22:92:0e:1f:86:91:25:85:7d:90:d8:7b:0f:cf:b5:9a:d3:60:
         c4:ac:d7:7d:e3:c2:e0:1c:ab:07:23:fc:b1:a5:cc:bd:bd:a2:
         97:40:40:ac:bb:d6:5d:b6:51:f5:a3:6e:76:63:98:5b:60:ed:
         b5:e7:81:e3:72:66:45:1f:0d:b5:71:c9:45:f3:6b:ed:eb:b7:
         16:01:16:b4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIfvBncw93+MaZ4I/rJwIPS9Q2BswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg1NjY1RkZCNEU2RUFFQkM1QUJDNUREMUE2Qjk5QjAy
NjY4OEYxNTAeFw0yNDA0MDMyMzE4MTFaFw0yNTA0MDIyMzIzMTFaMDMxMTAvBgNV
BAMTKDM1OTA0RTY3REVFQjU2MTkxQTc1QUI2QjM3OEUyQUE1ODRDNDk5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN54+mY+1NQxYqwNmBSmUh1SLs
zvsLM5jB0lS9eW/haWcVbE3S4k5At5IQ/o43/tXygrbNaF80nmza0IasxPocPryJ
DrDGcFTvCaqj5da/rUilDiYXWLCwUh7fpfFIrGoYJaqwCjJFc/W6sPunqcgnoMNP
bcj3RPp+8bM2/aJ7JD1MNrm5TMXoGEh6dAT2FbkH/022jSGpJXDkQNek81W6RTrZ
EW7aCBzDkGMUDNlUlhbXRgFhWWyVV0riY2vHTRhttdLwHYEgep999GdfwYZW1sza
2Eh36xh2Q/5yFX7C02jsfF4y/RV+Nv7/B6KMyBsMBK54v4/HE5VDsZy9DYBRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNZBOZ97rVhkadatrN44qpYTEmVcwHwYDVR0j
BBgwFoAU6FZl/7Tm6uvFq8XdGmuZsCZojxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVh5UHd5c2FoU01iZXppQkNwalN2NjFqak55UjFkVzlqZ3FzYVAyWk1X
Q2EvMS9FODU2NjVGRkI0RTZFQUVCQzVBQkM1REQxQTZCOTlCMDI2Njg4RjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4NTY2NUZGQjRFNkVBRUJD
NUFCQzVERDFBNkI5OUIwMjY2ODhGMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYeVB3eXNhaFNNYmV6aUJDcGpTdjYxampOeVIxZFc5amdxc2FQMlpNV0NhLzEv
MzQzNTJlMzEzNjM1MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpWgwDQYJKoZIhvcNAQELBQADggEBAEibZc52
TBlhVjwuY4EA0N0iPzJNhKa0fi4mqXhI/ALsHYWuDAlmujPb8pbPx4QWTzcU09HC
uBgWHFs/3TsuF/Cc8c7daa4gF2qMoIFnJ7N6WK+wwbMUt+G2EAkQNCrEN1+jU42Q
HIBVAg+8F+DYOk+VvVKoqAAWPx6IVJ/AhRCP1ZRY+PuPq2n/CSNPLXJwHcI5mRgk
SOxaRp4QXqL+3G4aziihdCD5NpsmBmtzxmv+7hC5JiKSDh+GkSWFfZDYew/PtZrT
YMSs133jwuAcqwcj/LGlzL29opdAQKy71l22UfWjbnZjmFtg7bXngeNyZkUfDbVx
yUXza+3rtxYBFrQ=
-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org