Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32332d3233203d3e20323636393635.roa
File:                     34352e3232362e36322e302f32332d3233203d3e20323636393635.roa (raw, json)
Hash identifier:          US2gdjqasRKZwjk+YeLXGsCUTTFCPsbfz3YQL5jCg2Q=
Subject key identifier:   84:66:A1:04:4F:1C:BA:40:5A:62:1F:D9:28:C7:C2:F2:1D:46:48:F9
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       24F852F443048664CBCA125212F3039ADC035FD7
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32332d3233203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.62.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f8:52:f4:43:04:86:64:cb:ca:12:52:12:f3:03:9a:dc:03:5f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:fd:b7:e1:a0:1b:88:3d:2a:93:ce:0b:6f:
                    af:fc:21:86:3c:4f:04:ce:e4:43:d0:00:ce:d7:5b:
                    a7:0e:67:33:fb:6a:cf:19:a0:58:e6:53:df:a1:cf:
                    92:a3:16:8e:91:ec:46:59:47:91:20:97:80:82:1f:
                    0b:c4:a2:87:84:5a:c5:c0:3e:cf:2d:a1:67:b3:ea:
                    b0:4c:6c:30:84:3d:a5:fc:6b:1b:1b:3e:d7:e0:e4:
                    c1:b2:ff:3b:c7:28:be:cb:70:b1:64:67:3b:74:36:
                    55:58:4a:6f:89:43:8d:f8:d6:cf:16:77:5c:29:63:
                    32:5d:29:c1:9b:13:f1:6a:17:05:dc:13:4e:22:70:
                    08:c3:8b:00:d6:38:44:2b:f0:98:c6:85:5b:86:12:
                    3f:2f:4f:01:ee:db:9f:7b:ab:2d:37:a9:64:2c:d2:
                    91:0d:c3:f7:6f:05:f0:53:d8:57:d7:87:a7:f2:1f:
                    86:05:12:d8:d8:93:7c:94:3c:ee:e4:ee:47:88:4d:
                    34:10:61:dc:5c:73:51:81:e9:71:ee:2b:ae:a2:76:
                    76:16:6d:f2:4b:70:f8:18:c3:35:68:c9:63:7f:19:
                    40:95:08:42:ab:d8:06:3e:60:3b:36:c1:06:ab:51:
                    b7:80:e5:e8:63:fb:e3:9a:13:ab:5c:53:57:2b:c9:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:66:A1:04:4F:1C:BA:40:5A:62:1F:D9:28:C7:C2:F2:1D:46:48:F9
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32332d3233203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f1:1e:9e:17:ea:bd:65:fa:b0:50:89:e0:0c:15:41:c2:e6:cd:
         62:c4:a9:8b:d6:2f:0e:32:78:80:93:83:a5:77:ca:fd:9e:44:
         bc:a8:d3:97:d3:44:21:09:07:88:0f:ab:4c:87:ad:21:52:cb:
         8a:4c:27:f2:00:23:fc:a3:2a:12:d7:4a:f9:86:9c:69:6e:c8:
         27:9d:35:30:f5:ff:d4:ff:26:00:f8:a6:df:aa:97:af:17:01:
         cc:3b:08:03:10:fc:19:19:1b:47:81:ed:7a:54:bd:e5:0f:96:
         be:67:b2:41:85:94:e9:cc:95:a0:9d:2b:1d:7c:b1:a1:ce:63:
         52:33:05:81:c5:90:ad:f3:59:ca:a7:e6:97:f9:89:e1:41:5f:
         50:fc:1d:5e:89:0b:8b:71:74:99:99:da:d1:75:e0:d2:5f:0b:
         c3:09:c5:16:ff:8f:79:ee:f5:d9:cc:29:61:f4:8e:c5:81:0f:
         fd:1f:87:e9:7a:aa:f8:77:e6:e8:04:5a:35:87:90:d6:ce:8c:
         40:f6:78:26:29:8e:9c:57:7c:b6:5a:69:d4:44:52:85:1f:1f:
         7c:6d:76:5b:3f:a0:fa:9f:66:02:f3:35:3b:f8:c2:56:de:cd:
         7f:19:2f:9b:b1:1a:30:b9:70:22:b6:23:23:9c:ee:5f:e9:c7:
         d3:43:22:35
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUJPhS9EMEhmTLyhJSEvMDmtwDX9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzRjZEMTBGRERGM0ZDOTJFNTU4NDYwQUFCMDRFNkUz
NzIxQzk2ODAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg1OUZEQjdFMUEwMUI4ODNE
MkE5M0NFMEI2RkFGRkMyMTg2M0M0RjA0Q0VFNDQzRDAwMENFRDc1QkE3MEU2NzMz
RkI2QUNGMTlBMDU4RTY1M0RGQTFDRjkyQTMxNjhFOTFFQzQ2NTk0NzkxMjA5Nzgw
ODIxRjBCQzRBMjg3ODQ1QUM1QzAzRUNGMkRBMTY3QjNFQUIwNEM2QzMwODQzREE1
RkM2QjFCMUIzRUQ3RTBFNEMxQjJGRjNCQzcyOEJFQ0I3MEIxNjQ2NzNCNzQzNjU1
NTg0QTZGODk0MzhERjhENkNGMTY3NzVDMjk2MzMyNUQyOUMxOUIxM0YxNkExNzA1
REMxMzRFMjI3MDA4QzM4QjAwRDYzODQ0MkJGMDk4QzY4NTVCODYxMjNGMkY0RjAx
RUVEQjlGN0JBQjJEMzdBOTY0MkNEMjkxMERDM0Y3NkYwNUYwNTNEODU3RDc4N0E3
RjIxRjg2MDUxMkQ4RDg5MzdDOTQzQ0VFRTRFRTQ3ODg0RDM0MTA2MURDNUM3MzUx
ODFFOTcxRUUyQkFFQTI3Njc2MTY2REYyNEI3MEY4MThDMzM1NjhDOTYzN0YxOTQw
OTUwODQyQUJEODA2M0U2MDNCMzZDMTA2QUI1MUI3ODBFNUU4NjNGQkUzOUExM0FC
NUM1MzU3MkJDOTQyRTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyFn9t+GgG4g9KpPOC2+v/CGGPE8EzuRD0ADO11unDmcz+2rPGaBY
5lPfoc+SoxaOkexGWUeRIJeAgh8LxKKHhFrFwD7PLaFns+qwTGwwhD2l/GsbGz7X
4OTBsv87xyi+y3CxZGc7dDZVWEpviUON+NbPFndcKWMyXSnBmxPxahcF3BNOInAI
w4sA1jhEK/CYxoVbhhI/L08B7tufe6stN6lkLNKRDcP3bwXwU9hX14en8h+GBRLY
2JN8lDzu5O5HiE00EGHcXHNRgelx7iuuonZ2Fm3yS3D4GMM1aMljfxlAlQhCq9gG
PmA7NsEGq1G3gOXoY/vjmhOrXFNXK8lC4wIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FIRmoQRPHLpAWmIf2SjHwvIdRkj5MB8GA1UdIwQYMBaAFAE/bRD93z/JLlWEYKqw
Tm43IcloMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1
eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzEvMDEzRjZEMTBGRERGM0ZD
OTJFNTU4NDYwQUFCMDRFNkUzNzIxQzk2OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMTNGNkQxMEZEREYzRkM5MkU1NTg0NjBBQUIwNEU2RTM3MjFD
OTY4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82VkNSS0x5cFFtdVNpdXlrUU1W
YWM4RTllQThCUXUzVXhjRDFtclY4cVNreC8xLzM0MzUyZTMyMzIzNjJlMzYzMjJl
MzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM5MzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3i
PjANBgkqhkiG9w0BAQsFAAOCAQEA8R6eF+q9ZfqwUIngDBVBwubNYsSpi9YvDjJ4
gJODpXfK/Z5EvKjTl9NEIQkHiA+rTIetIVLLikwn8gAj/KMqEtdK+YacaW7IJ501
MPX/1P8mAPim36qXrxcBzDsIAxD8GRkbR4HtelS95Q+WvmeyQYWU6cyVoJ0rHXyx
oc5jUjMFgcWQrfNZyqfml/mJ4UFfUPwdXokLi3F0mZna0XXg0l8LwwnFFv+Pee71
2cwpYfSOxYEP/R+H6Xqq+Hfm6ARaNYeQ1s6MQPZ4JimOnFd8tlpp1ERShR8ffG12
Wz+g+p9mAvM1O/jCVt7Nfxkvm7EaMLlwIrYjI5zuX+nH00MiNQ==
-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org