Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36322e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          UupmTqbfQi0x53Rszjif1RuBxfu/XlMRu8LIVV75t0A=
Subject key identifier:   58:74:7C:0B:7F:B5:88:8E:C6:A7:1B:3C:2D:00:E7:0A:53:D7:85:26
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       4C4C8EE5FD6866B2D9DFC95735D4DE0BADB9F0C8
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4c:8e:e5:fd:68:66:b2:d9:df:c9:57:35:d4:de:0b:ad:b9:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:ce:7a:e4:c2:4d:6c:c7:f0:be:da:3c:6c:
                    75:51:90:a1:e6:9d:89:81:51:a7:7b:c1:df:c4:5b:
                    d0:ac:59:b4:b4:38:7e:aa:22:5a:3d:79:7a:d2:03:
                    56:05:16:b2:a4:e5:52:49:b8:04:0a:97:41:94:ea:
                    89:79:8a:9a:2d:e0:4c:a1:75:5c:75:aa:f4:a3:15:
                    17:01:ee:f5:81:38:c6:ee:c3:8d:04:25:a1:16:3b:
                    85:9b:0e:87:a6:c6:5e:c2:ed:9a:fd:20:a1:fd:20:
                    90:81:0a:61:47:fb:3d:79:81:bb:13:16:6e:d9:35:
                    f7:18:52:6b:9f:59:8c:2a:d3:fa:ad:3b:64:06:7f:
                    7f:5b:5e:ff:93:95:a4:5e:3a:aa:eb:32:71:c7:f6:
                    01:00:b6:2f:3d:cb:39:c1:d3:74:25:ba:c4:bd:71:
                    74:ec:30:09:20:d3:b3:ac:6d:13:d5:45:83:b2:f8:
                    ea:6a:68:27:7a:3b:dc:ad:ea:fe:85:70:f8:f7:76:
                    5f:30:21:27:9f:7c:76:aa:67:45:e6:2a:87:3e:3a:
                    73:1d:ff:38:45:97:cc:22:f8:62:3b:e3:ec:fe:2f:
                    ed:8f:86:39:a4:62:74:a3:12:f5:0b:28:eb:41:be:
                    38:50:61:14:b8:74:a7:9d:bd:bd:83:04:10:ff:b3:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:7C:0B:7F:B5:88:8E:C6:A7:1B:3C:2D:00:E7:0A:53:D7:85:26
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36322e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:3f:c1:70:92:ea:11:a2:1b:60:f9:5f:14:47:5a:31:a9:b2:
         ba:52:b1:78:60:67:1b:87:3e:a6:ac:3b:8e:31:d3:cd:95:d7:
         92:ab:30:38:d5:60:ce:86:44:90:9f:e1:ff:96:e2:76:64:ce:
         13:92:54:a7:f4:c6:92:a6:e5:73:d7:2c:8d:92:81:8e:25:22:
         b4:63:45:f1:6c:e7:9f:33:bf:02:e8:36:28:3f:c0:bb:ce:1e:
         41:b5:bc:4d:d8:11:81:e0:f4:70:92:8a:16:3a:ea:ad:fa:b0:
         89:52:24:16:47:b1:8c:4a:16:bf:72:66:23:0b:26:92:45:90:
         c9:17:ec:71:6d:db:b9:49:27:34:d9:3b:88:ba:3f:d1:4b:48:
         56:46:56:a4:7f:17:8b:66:42:19:84:de:23:47:4d:c6:0f:80:
         f6:b2:90:2a:1e:c7:28:54:f6:8d:a6:43:d7:47:39:a2:75:df:
         cc:1c:c4:f3:59:f3:2e:c4:29:d4:9b:fc:49:f6:cd:d1:ab:13:
         2a:e3:28:24:43:55:02:7c:e5:98:38:96:53:fb:a6:a9:a2:08:
         93:16:1e:0b:bd:a3:58:6a:22:20:d3:10:89:ef:2a:64:fd:31:
         a9:b9:9f:cd:ee:86:e8:d1:4e:ea:b4:3f:43:27:eb:70:c2:4f:
         14:c7:16:60
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUTEyO5f1oZrLZ38lXNdTeC6258MgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEzRjZEMTBGRERGM0ZDOTJFNTU4NDYwQUFCMDRFNkUz
NzIxQzk2ODAeFw0yNDA0MDMxODU1MDBaFw0yNTA0MDMxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY3QUNFN0FFNEMyNEQ2Q0M3
RjBCRURBM0M2Qzc1NTE5MEExRTY5RDg5ODE1MUE3N0JDMURGQzQ1QkQwQUM1OUI0
QjQzODdFQUEyMjVBM0Q3OTdBRDIwMzU2MDUxNkIyQTRFNTUyNDlCODA0MEE5NzQx
OTRFQTg5Nzk4QTlBMkRFMDRDQTE3NTVDNzVBQUY0QTMxNTE3MDFFRUY1ODEzOEM2
RUVDMzhEMDQyNUExMTYzQjg1OUIwRTg3QTZDNjVFQzJFRDlBRkQyMEExRkQyMDkw
ODEwQTYxNDdGQjNENzk4MUJCMTMxNjZFRDkzNUY3MTg1MjZCOUY1OThDMkFEM0ZB
QUQzQjY0MDY3RjdGNUI1RUZGOTM5NUE0NUUzQUFBRUIzMjcxQzdGNjAxMDBCNjJG
M0RDQjM5QzFEMzc0MjVCQUM0QkQ3MTc0RUMzMDA5MjBEM0IzQUM2RDEzRDU0NTgz
QjJGOEVBNkE2ODI3N0EzQkRDQURFQUZFODU3MEY4Rjc3NjVGMzAyMTI3OUY3Qzc2
QUE2NzQ1RTYyQTg3M0UzQTczMURGRjM4NDU5N0NDMjJGODYyM0JFM0VDRkUyRkVE
OEY4NjM5QTQ2Mjc0QTMxMkY1MEIyOEVCNDFCRTM4NTA2MTE0Qjg3NEE3OURCREJE
ODMwNDEwRkZCMzk2NjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxnrOeuTCTWzH8L7aPGx1UZCh5p2JgVGne8HfxFvQrFm0tDh+qiJa
PXl60gNWBRaypOVSSbgECpdBlOqJeYqaLeBMoXVcdar0oxUXAe71gTjG7sONBCWh
FjuFmw6HpsZewu2a/SCh/SCQgQphR/s9eYG7ExZu2TX3GFJrn1mMKtP6rTtkBn9/
W17/k5WkXjqq6zJxx/YBALYvPcs5wdN0JbrEvXF07DAJINOzrG0T1UWDsvjqamgn
ejvcrer+hXD493ZfMCEnn3x2qmdF5iqHPjpzHf84RZfMIvhiO+Ps/i/tj4Y5pGJ0
oxL1CyjrQb44UGEUuHSnnb29gwQQ/7OWYQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FFh0fAt/tYiOxqcbPC0A5wpT14UmMB8GA1UdIwQYMBaAFAE/bRD93z/JLlWEYKqw
Tm43IcloMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZWQ1JLTHlwUW11U2l1
eWtRTVZhYzhFOWVBOEJRdTNVeGNEMW1yVjhxU2t4LzEvMDEzRjZEMTBGRERGM0ZD
OTJFNTU4NDYwQUFCMDRFNkUzNzIxQzk2OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8wMTNGNkQxMEZEREYzRkM5MkU1NTg0NjBBQUIwNEU2RTM3MjFD
OTY4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby82VkNSS0x5cFFtdVNpdXlrUU1W
YWM4RTllQThCUXUzVXhjRDFtclY4cVNreC8xLzM0MzUyZTMyMzIzNjJlMzYzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzYzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
PjANBgkqhkiG9w0BAQsFAAOCAQEAuj/BcJLqEaIbYPlfFEdaMamyulKxeGBnG4c+
pqw7jjHTzZXXkqswONVgzoZEkJ/h/5bidmTOE5JUp/TGkqblc9csjZKBjiUitGNF
8WznnzO/Aug2KD/Au84eQbW8TdgRgeD0cJKKFjrqrfqwiVIkFkexjEoWv3JmIwsm
kkWQyRfscW3buUknNNk7iLo/0UtIVkZWpH8Xi2ZCGYTeI0dNxg+A9rKQKh7HKFT2
jaZD10c5onXfzBzE81nzLsQp1Jv8SfbN0asTKuMoJENVAnzlmDiWU/umqaIIkxYe
C72jWGoiINMQie8qZP0xqbmfze6G6NFO6rQ/QyfrcMJPFMcWYA==
-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org