Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          +Eij42xSGv8hJw2L2tNPTevFaAE+tjpOnSlTdEmsCtk=
Subject key identifier:   2D:3D:37:F0:F2:D5:95:0F:FA:71:2C:5F:55:F9:A1:03:59:7B:E5:AC
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       30AF68091DEBEC361C2A439859A763D433879EF5
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32342d3234203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:68:09:1d:eb:ec:36:1c:2a:43:98:59:a7:63:d4:33:87:9e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:82:3c:66:e3:5e:98:4d:74:f3:cd:83:ae:
                    da:80:03:52:77:4d:f0:33:29:14:c0:47:24:e2:48:
                    e9:ab:80:b5:09:3f:2a:d1:92:88:69:8d:07:5d:06:
                    c2:11:05:92:14:47:cb:e0:d3:42:a0:77:4c:95:2f:
                    d6:a8:0f:26:f0:48:93:d4:b7:f5:c3:af:f3:cf:c6:
                    29:9f:af:cd:d7:89:4e:47:fb:a6:9d:5c:14:eb:6d:
                    b8:2c:7e:68:45:9a:4d:57:31:d4:6b:06:52:b9:2f:
                    30:91:ed:47:2b:73:f3:ed:ac:4b:87:4b:2a:37:6e:
                    ed:2f:07:09:ac:c8:e9:d2:2e:10:6e:af:68:76:ca:
                    e3:07:48:0a:08:62:ac:b6:23:9d:b4:6a:f2:c2:16:
                    3a:59:f8:8c:1e:e1:e0:71:47:7e:8a:08:05:be:96:
                    2e:8d:7c:cf:de:f4:25:c9:99:9b:2b:fa:c2:ab:9b:
                    bd:4b:85:b5:bb:0d:d9:4b:e6:81:a9:81:f9:24:8f:
                    8d:9e:0e:1e:bc:0d:06:8c:c2:83:80:87:b6:a0:b6:
                    93:46:f2:17:f1:0b:af:67:fa:e9:f5:91:80:23:cd:
                    32:91:ff:15:f4:d0:51:8c:fb:71:9e:ed:77:09:2a:
                    f0:8a:f9:d3:6b:97:74:ee:fb:69:28:09:fa:08:72:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3D:37:F0:F2:D5:95:0F:FA:71:2C:5F:55:F9:A1:03:59:7B:E5:AC
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d3:62:af:11:51:44:a9:d5:a3:50:c2:7c:0e:ce:9f:b0:95:
         07:5e:d1:fb:3b:31:56:34:f3:02:9a:9e:2f:cc:ad:83:a0:24:
         ab:dc:f3:b0:f8:f5:d5:cf:e5:ca:72:a2:20:14:af:57:ba:c7:
         9c:5e:0f:87:c6:59:96:52:1a:bc:f7:a3:65:5f:67:10:4f:a1:
         92:64:ee:7f:b7:f3:10:1d:6d:9d:fa:3d:57:80:be:9f:3e:d9:
         13:1c:de:3e:a8:b8:e4:dd:74:c9:f5:6e:ce:2b:c4:dd:3f:0f:
         44:d9:5b:e7:70:4b:c7:71:53:7b:4b:e2:ef:be:37:de:cc:37:
         38:4e:b3:86:34:e0:85:d5:4e:62:88:c3:78:00:22:92:4e:6c:
         b4:ff:ba:11:df:ce:d5:9c:c5:f1:d2:52:6e:cd:23:60:f2:0b:
         53:f9:01:12:c9:6d:6b:e9:a4:ed:06:53:36:62:a9:99:e9:0e:
         f1:14:72:40:8d:a8:74:32:d0:d8:94:b0:3f:e5:a5:4c:c0:b9:
         d4:eb:24:ae:fb:0d:98:95:11:ca:c7:9a:5f:cd:e7:32:74:84:
         7a:8d:87:5f:4d:55:8d:f3:96:0a:a6:29:12:77:b0:14:e4:d9:
         e6:06:4d:45:3c:9b:92:2b:d1:52:a7:01:7c:6c:6d:54:e9:85:
         7b:8e:72:98
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUMK9oCR3r7DYcKkOYWadj1DOHnvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzRjZEMTBGRERGM0ZDOTJFNTU4NDYwQUFCMDRFNkUz
NzIxQzk2ODAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQwNzgyM0M2NkUzNUU5ODRE
NzRGM0NEODNBRURBODAwMzUyNzc0REYwMzMyOTE0QzA0NzI0RTI0OEU5QUI4MEI1
MDkzRjJBRDE5Mjg4Njk4RDA3NUQwNkMyMTEwNTkyMTQ0N0NCRTBEMzQyQTA3NzRD
OTUyRkQ2QTgwRjI2RjA0ODkzRDRCN0Y1QzNBRkYzQ0ZDNjI5OUZBRkNERDc4OTRF
NDdGQkE2OUQ1QzE0RUI2REI4MkM3RTY4NDU5QTRENTczMUQ0NkIwNjUyQjkyRjMw
OTFFRDQ3MkI3M0YzRURBQzRCODc0QjJBMzc2RUVEMkYwNzA5QUNDOEU5RDIyRTEw
NkVBRjY4NzZDQUUzMDc0ODBBMDg2MkFDQjYyMzlEQjQ2QUYyQzIxNjNBNTlGODhD
MUVFMUUwNzE0NzdFOEEwODA1QkU5NjJFOEQ3Q0NGREVGNDI1Qzk5OTlCMkJGQUMy
QUI5QkJENEI4NUI1QkIwREQ5NEJFNjgxQTk4MUY5MjQ4RjhEOUUwRTFFQkMwRDA2
OENDMjgzODA4N0I2QTBCNjkzNDZGMjE3RjEwQkFGNjdGQUU5RjU5MTgwMjNDRDMy
OTFGRjE1RjREMDUxOENGQjcxOUVFRDc3MDkyQUYwOEFGOUQzNkI5Nzc0RUVGQjY5
MjgwOUZBMDg3MjE2MDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvQeCPGbjXphNdPPNg67agANSd03wMykUwEck4kjpq4C1CT8q0ZKI
aY0HXQbCEQWSFEfL4NNCoHdMlS/WqA8m8EiT1Lf1w6/zz8Ypn6/N14lOR/umnVwU
6224LH5oRZpNVzHUawZSuS8wke1HK3Pz7axLh0sqN27tLwcJrMjp0i4Qbq9odsrj
B0gKCGKstiOdtGrywhY6WfiMHuHgcUd+iggFvpYujXzP3vQlyZmbK/rCq5u9S4W1
uw3ZS+aBqYH5JI+Nng4evA0GjMKDgIe2oLaTRvIX8QuvZ/rp9ZGAI80ykf8V9NBR
jPtxnu13CSrwivnTa5d07vtpKAn6CHIWAwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FC09N/Dy1ZUP+nEsX1X5oQNZe+WsMB8GA1UdIwQYMBaAFAE/bRD93z/JLlWEYKqw
Tm43IcloMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1
eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzEvMDEzRjZEMTBGRERGM0ZD
OTJFNTU4NDYwQUFCMDRFNkUzNzIxQzk2OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMTNGNkQxMEZEREYzRkM5MkU1NTg0NjBBQUIwNEU2RTM3MjFD
OTY4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82VkNSS0x5cFFtdVNpdXlrUU1W
YWM4RTllQThCUXUzVXhjRDFtclY4cVNreC8xLzM0MzUyZTMyMzIzNjJlMzYzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
PDANBgkqhkiG9w0BAQsFAAOCAQEAFdNirxFRRKnVo1DCfA7On7CVB17R+zsxVjTz
ApqeL8ytg6Akq9zzsPj11c/lynKiIBSvV7rHnF4Ph8ZZllIavPejZV9nEE+hkmTu
f7fzEB1tnfo9V4C+nz7ZExzePqi45N10yfVuzivE3T8PRNlb53BLx3FTe0vi7743
3sw3OE6zhjTghdVOYojDeAAikk5stP+6Ed/O1ZzF8dJSbs0jYPILU/kBEslta+mk
7QZTNmKpmekO8RRyQI2odDLQ2JSwP+WlTMC51OskrvsNmJURyseaX83nMnSEeo2H
X01VjfOWCqYpEnewFOTZ5gZNRTybkivRUqcBfGxtVOmFe45ymA==
-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org