Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32332d3233203d3e20323638363733.roa
File:                     34352e3136352e3130362e302f32332d3233203d3e20323638363733.roa (raw, json)
Hash identifier:          X/d68Euz4c8DDw/M2NYCt84pZnKHRUOxc6KeaLUo3XM=
Subject key identifier:   65:BD:99:EC:B6:F7:7D:3E:6E:08:69:2E:D6:23:C7:06:5B:39:E9:4E
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       0B4397CCF1DED7D8B363319C551DEA9FD0AD1400
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32332d3233203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:11 +0000
ROA not before:           Wed 03 Apr 2024 23:18:11 +0000
ROA not after:            Wed 02 Apr 2025 23:23:11 +0000
asID:                     268673
IP address blocks:        45.165.106.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:97:cc:f1:de:d7:d8:b3:63:31:9c:55:1d:ea:9f:d0:ad:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:11 2024 GMT
            Not After : Apr  2 23:23:11 2025 GMT
        Subject: CN=65BD99ECB6F77D3E6E08692ED623C7065B39E94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ff:62:98:c8:32:ef:1f:fc:0b:70:38:03:03:
                    05:d4:b8:a1:d1:d5:0d:69:0a:a1:41:14:b0:4c:f1:
                    be:6d:5c:f9:16:8e:3f:04:bd:6f:7a:65:65:8b:61:
                    0a:46:6e:54:0c:b6:f0:ab:66:67:63:95:10:47:12:
                    17:16:bb:7b:b1:4d:d8:de:f7:7b:f6:ee:88:9d:5f:
                    ea:88:2d:94:96:6b:b4:eb:b0:cd:37:a1:54:1b:d4:
                    38:4d:92:29:31:ab:1e:f4:c8:8c:c1:ff:c1:61:3d:
                    90:2c:f2:4f:fa:26:be:c3:33:93:6a:54:18:ce:1f:
                    13:c5:e5:c5:22:65:a5:5a:54:6a:87:11:67:62:08:
                    97:77:82:4b:cf:8a:a5:7e:50:c6:a1:6d:7e:a9:06:
                    78:db:2f:08:05:ed:32:b7:f6:c4:d2:48:06:a9:a4:
                    e0:81:5c:81:e3:9a:f5:6a:46:d7:4d:c4:7f:26:1d:
                    67:54:bb:25:65:e1:a6:61:21:c4:e7:04:fd:2f:14:
                    63:2e:b2:e2:87:93:17:e0:47:96:e0:07:28:db:02:
                    83:5a:19:43:13:e8:c9:4c:5a:bf:82:c0:53:91:07:
                    8d:cc:5c:70:8a:4d:cd:52:c1:37:ca:5a:eb:62:4a:
                    48:da:16:84:16:a8:9f:45:97:cd:4f:82:87:04:b4:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BD:99:EC:B6:F7:7D:3E:6E:08:69:2E:D6:23:C7:06:5B:39:E9:4E
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32332d3233203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:21:cb:1f:19:d6:4e:c2:2f:53:b2:92:4c:a7:66:bb:1e:fe:
         5b:c5:33:8e:60:02:d7:5e:30:5f:67:bf:31:d7:9e:7d:97:0d:
         75:5e:62:a1:2d:e8:56:93:6d:c2:44:e5:c0:9d:3a:93:9f:40:
         0b:54:3f:17:5e:42:74:da:46:e6:19:24:1f:1d:f0:09:4b:3d:
         4d:47:da:8f:21:c3:cf:5c:14:5d:5a:b1:a3:11:4f:e6:ae:35:
         53:20:54:fd:7f:f4:8d:50:b7:3e:36:97:6d:34:27:d9:9c:0b:
         2e:17:71:5c:b9:0f:55:c4:68:61:1d:65:06:96:52:e6:9b:01:
         8c:70:9e:ef:0e:27:9e:45:8d:70:8c:3d:6d:18:7d:d3:76:ea:
         7c:0a:fc:43:c1:d6:35:e2:3c:90:2b:47:14:54:42:d7:3d:77:
         a9:76:20:b0:81:c5:29:8c:fe:05:00:06:28:99:46:c4:b7:2e:
         4c:a5:98:ae:0c:31:af:77:63:2f:9b:c8:13:e7:f9:dd:29:e6:
         a9:e0:1d:40:f6:b2:5c:fe:ce:d7:8c:a7:1d:a7:89:14:37:60:
         ca:37:aa:cc:81:3a:f4:7b:c6:ac:04:2d:48:66:34:4f:ea:ad:
         34:ee:1c:ee:71:a2:f3:5e:d2:26:e7:3a:73:6d:df:bf:54:4e:
         ad:b8:d5:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC0OXzPHe19izYzGcVR3qn9CtFAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg1NjY1RkZCNEU2RUFFQkM1QUJDNUREMUE2Qjk5QjAy
NjY4OEYxNTAeFw0yNDA0MDMyMzE4MTFaFw0yNTA0MDIyMzIzMTFaMDMxMTAvBgNV
BAMTKDY1QkQ5OUVDQjZGNzdEM0U2RTA4NjkyRUQ2MjNDNzA2NUIzOUU5NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/2KYyDLvH/wLcDgDAwXUuKHR
1Q1pCqFBFLBM8b5tXPkWjj8EvW96ZWWLYQpGblQMtvCrZmdjlRBHEhcWu3uxTdje
93v27oidX+qILZSWa7TrsM03oVQb1DhNkikxqx70yIzB/8FhPZAs8k/6Jr7DM5Nq
VBjOHxPF5cUiZaVaVGqHEWdiCJd3gkvPiqV+UMahbX6pBnjbLwgF7TK39sTSSAap
pOCBXIHjmvVqRtdNxH8mHWdUuyVl4aZhIcTnBP0vFGMusuKHkxfgR5bgByjbAoNa
GUMT6MlMWr+CwFORB43MXHCKTc1SwTfKWutiSkjaFoQWqJ9Fl81PgocEtMy/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZb2Z7Lb3fT5uCGku1iPHBls56U4wHwYDVR0j
BBgwFoAU6FZl/7Tm6uvFq8XdGmuZsCZojxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVh5UHd5c2FoU01iZXppQkNwalN2NjFqak55UjFkVzlqZ3FzYVAyWk1X
Q2EvMS9FODU2NjVGRkI0RTZFQUVCQzVBQkM1REQxQTZCOTlCMDI2Njg4RjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U4NTY2NUZGQjRFNkVBRUJD
NUFCQzVERDFBNkI5OUIwMjY2ODhGMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYeVB3eXNhaFNNYmV6aUJDcGpTdjYxampOeVIxZFc5amdxc2FQMlpNV0NhLzEv
MzQzNTJlMzEzNjM1MmUzMTMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpWowDQYJKoZIhvcNAQELBQADggEBAKIhyx8Z
1k7CL1OykkynZrse/lvFM45gAtdeMF9nvzHXnn2XDXVeYqEt6FaTbcJE5cCdOpOf
QAtUPxdeQnTaRuYZJB8d8AlLPU1H2o8hw89cFF1asaMRT+auNVMgVP1/9I1Qtz42
l200J9mcCy4XcVy5D1XEaGEdZQaWUuabAYxwnu8OJ55FjXCMPW0YfdN26nwK/EPB
1jXiPJArRxRUQtc9d6l2ILCBxSmM/gUABiiZRsS3LkylmK4MMa93Yy+byBPn+d0p
5qngHUD2slz+zteMpx2niRQ3YMo3qsyBOvR7xqwELUhmNE/qrTTuHO5xovNe0ibn
OnNt379UTq241aA=
-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:37 2024 by rpki-client on console-fra.rpki-client.org