Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          X4lptvWe6/qHhmHS4ZyWTNmP/XvtjV9hxd/oDsGvVEM=
Subject key identifier:   CB:E5:B5:C6:79:69:87:A5:F1:6E:E7:14:86:4C:03:59:3F:73:A6:69
Certificate issuer:       /CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
Certificate serial:       14DC151FCEE08FFE3FC662158E7A7AC80BB011C4
Authority key identifier: 01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
Signing time:             Mon 23 Oct 2023 23:06:28 +0000
ROA not before:           Mon 23 Oct 2023 23:01:28 +0000
ROA not after:            Mon 21 Oct 2024 23:06:28 +0000
asID:                     267079
IP address blocks:        45.227.47.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dc:15:1f:ce:e0:8f:fe:3f:c6:62:15:8e:7a:7a:c8:0b:b0:11:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Validity
            Not Before: Oct 23 23:01:28 2023 GMT
            Not After : Oct 21 23:06:28 2024 GMT
        Subject: CN=CBE5B5C6796987A5F16EE714864C03593F73A669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:23:e9:d8:20:75:8b:aa:25:62:65:70:80:0a:
                    5e:e8:f7:13:3a:04:a3:7c:95:86:38:49:bd:d2:81:
                    16:fe:42:20:09:34:e4:23:fd:d4:f5:7c:d9:14:56:
                    24:4d:67:82:5b:5f:24:f7:b5:48:e6:46:ad:25:c7:
                    41:cd:11:3d:ea:a0:bb:d3:21:d6:c9:24:17:79:69:
                    ec:38:45:e8:d5:24:12:43:ed:c5:e9:24:11:05:c9:
                    23:c4:c3:3f:0c:7a:47:ae:24:e7:69:fc:8b:7d:ef:
                    91:8f:3f:a7:6e:4b:fc:8a:47:de:4d:0b:98:71:ab:
                    18:94:ed:6e:2c:5e:a0:c2:c4:d6:d3:d8:97:79:05:
                    0c:ad:f9:79:1d:1a:c2:b0:94:05:da:63:1d:1c:55:
                    f4:45:ec:8f:85:89:b2:35:3a:36:07:cd:10:67:7a:
                    03:e5:40:1d:04:3a:d0:b6:75:a9:ff:d0:6e:d5:29:
                    66:ec:13:1a:54:0e:3b:5e:97:45:82:cf:89:dc:2f:
                    2a:92:64:2f:6f:a6:72:36:7a:71:c2:4c:b7:d2:ed:
                    08:c1:3d:54:af:a5:d2:6f:eb:e5:bf:52:a8:fc:c1:
                    fd:1d:56:0a:de:5d:5c:e4:d7:74:d5:11:69:e8:61:
                    d0:4a:53:73:65:9f:08:6a:2a:c1:19:50:fb:21:5a:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:B5:C6:79:69:87:A5:F1:6E:E7:14:86:4C:03:59:3F:73:A6:69
            X509v3 Authority Key Identifier:
                keyid:01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:2f:4c:16:ef:ff:4b:aa:d5:b2:da:91:0a:71:72:f9:c1:
         97:b7:e3:84:07:c3:f0:84:f3:d2:7a:7a:30:75:ff:04:1e:4e:
         9e:7e:8b:e1:95:ef:c8:0e:8f:1c:61:7c:08:a9:55:7d:0f:a5:
         3a:89:8d:37:84:2c:86:bb:b7:5d:11:51:b3:dd:48:01:24:eb:
         4c:8f:71:91:36:9b:d6:f1:5f:77:59:e8:6a:9d:74:99:78:a7:
         a4:b8:7f:18:0d:2f:67:27:bd:be:15:10:e6:64:d1:62:ff:16:
         76:4a:71:5b:78:05:73:e6:16:b4:ac:bb:a5:bc:3a:76:cb:7f:
         59:d0:9f:59:07:89:60:57:7c:50:0b:dc:ee:31:dc:98:74:a9:
         78:d5:37:34:56:42:53:46:1c:42:9b:45:de:f8:5a:91:08:79:
         12:08:75:81:6e:6c:85:e9:e5:db:11:dd:95:05:fb:61:6a:ad:
         90:0e:5a:31:79:61:d0:d6:e7:c7:60:69:30:e2:76:78:85:1f:
         99:05:f6:77:af:b5:84:f2:60:b6:22:24:a2:e8:d6:30:7d:e1:
         3e:db:48:83:06:a9:b0:56:77:14:c9:e4:f9:78:23:99:98:bb:
         b9:d7:dc:84:44:23:86:6a:31:fa:25:a9:75:e9:d2:e5:51:af:
         11:c0:0d:07
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFNwVH87gj/4/xmIVjnp6yAuwEcQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFCMDY0MzNFNjE0NEM2QUFBNUQ1NjE4NkVFRTc4NDAx
MDVBNkZCNTAeFw0yMzEwMjMyMzAxMjhaFw0yNDEwMjEyMzA2MjhaMDMxMTAvBgNV
BAMTKENCRTVCNUM2Nzk2OTg3QTVGMTZFRTcxNDg2NEMwMzU5M0Y3M0E2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpI+nYIHWLqiViZXCACl7o9xM6
BKN8lYY4Sb3SgRb+QiAJNOQj/dT1fNkUViRNZ4JbXyT3tUjmRq0lx0HNET3qoLvT
IdbJJBd5aew4RejVJBJD7cXpJBEFySPEwz8MekeuJOdp/It975GPP6duS/yKR95N
C5hxqxiU7W4sXqDCxNbT2Jd5BQyt+XkdGsKwlAXaYx0cVfRF7I+FibI1OjYHzRBn
egPlQB0EOtC2dan/0G7VKWbsExpUDjtel0WCz4ncLyqSZC9vpnI2enHCTLfS7QjB
PVSvpdJv6+W/Uqj8wf0dVgreXVzk13TVEWnoYdBKU3NlnwhqKsEZUPshWoYVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUy+W1xnlph6XxbucUhkwDWT9zpmkwHwYDVR0j
BBgwFoAUAbBkM+YUTGqqXVYYbu54QBBab7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNndjVVo2eWNHTVo0WENvOWYzUXlkdEppVUdGanBzcm94Y2l1ZldaZmRy
QXUvMC8wMUIwNjQzM0U2MTQ0QzZBQUE1RDU2MTg2RUVFNzg0MDEwNUE2RkI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAxQjA2NDMzRTYxNDRDNkFB
QTVENTYxODZFRUU3ODQwMTA1QTZGQjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ3Y1VaNnljR01aNFhDbzlmM1F5ZHRKaVVHRmpwc3JveGNpdWZXWmZkckF1LzAv
MzQzNTJlMzIzMjM3MmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeMvMA0GCSqGSIb3DQEBCwUAA4IBAQBB5i9MFu//
S6rVstqRCnFy+cGXt+OEB8PwhPPSenowdf8EHk6efovhle/IDo8cYXwIqVV9D6U6
iY03hCyGu7ddEVGz3UgBJOtMj3GRNpvW8V93WehqnXSZeKekuH8YDS9nJ72+FRDm
ZNFi/xZ2SnFbeAVz5ha0rLulvDp2y39Z0J9ZB4lgV3xQC9zuMdyYdKl41Tc0VkJT
RhxCm0Xe+FqRCHkSCHWBbmyF6eXbEd2VBfthaq2QDloxeWHQ1ufHYGkw4nZ4hR+Z
BfZ3r7WE8mC2IiSi6NYwfeE+20iDBqmwVncUyeT5eCOZmLu519yERCOGajH6Jal1
6dLlUa8RwA0H
-----END CERTIFICATE-----
Generated at Mon Apr 15 09:34:02 2024 by rpki-client on console-fra.rpki-client.org