Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa
File:                     34352e3139302e32302e302f32322d3232203d3e20323639363038.roa (raw, json)
Hash identifier:          oB5h17aUv7uEcRn2Sf7XJkQ0Sg3TLcpiJgizYHe2s7I=
Subject key identifier:   CA:54:72:0A:C9:4A:62:5D:A7:32:FC:89:5C:F0:B6:88:FD:80:19:9B
Certificate issuer:       /CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
Certificate serial:       7EF8F027502FD1DE6520EB392306AF0E9279F111
Authority key identifier: 0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa
Signing time:             Wed 03 Apr 2024 22:20:06 +0000
ROA not before:           Wed 03 Apr 2024 22:15:06 +0000
ROA not after:            Wed 02 Apr 2025 22:20:06 +0000
asID:                     269608
IP address blocks:        45.190.20.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f8:f0:27:50:2f:d1:de:65:20:eb:39:23:06:af:0e:92:79:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
        Validity
            Not Before: Apr  3 22:15:06 2024 GMT
            Not After : Apr  2 22:20:06 2025 GMT
        Subject: CN=CA54720AC94A625DA732FC895CF0B688FD80199B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:ed:80:b6:89:15:3d:8b:d9:c7:56:9b:c7:
                    c1:1f:e7:39:2d:04:ac:e6:74:c1:9f:23:33:aa:cd:
                    58:31:cb:4a:ac:8f:7c:c6:df:00:aa:53:39:c0:c3:
                    76:05:4c:ba:9b:ca:03:a5:7c:36:9c:a3:ef:a2:34:
                    40:6b:b8:1e:bb:d8:24:67:a3:12:17:25:b5:b2:c7:
                    b9:49:cd:e4:4f:ba:03:5f:f0:5e:d8:6a:12:98:5d:
                    6b:2b:7d:05:e3:af:36:68:2b:41:61:9f:da:ac:ee:
                    0b:de:bd:5e:0f:a0:da:0c:b5:2e:7f:87:5e:b1:9e:
                    c2:5e:da:0f:3e:9a:43:ba:89:16:ee:95:c7:1a:4e:
                    11:79:12:4b:95:f9:2b:82:d2:0a:b8:96:8f:50:28:
                    4f:a2:ae:a3:ff:28:2e:d7:ff:27:ce:3f:fc:0b:d2:
                    66:d2:90:0e:4c:4e:f2:17:bf:1e:31:81:00:df:55:
                    9f:e5:00:65:39:10:c8:f8:ca:0a:51:53:b8:f6:35:
                    3a:2d:b7:e5:d5:d1:ac:93:30:91:09:21:db:7f:3a:
                    33:35:82:cf:00:2c:0a:1c:8a:d1:8d:ca:c0:9f:df:
                    5b:24:7e:0b:27:46:63:68:3a:38:ff:94:44:6a:85:
                    72:e7:67:04:8d:be:dc:b0:a5:4f:be:13:c1:4b:6c:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:72:0A:C9:4A:62:5D:A7:32:FC:89:5C:F0:B6:88:FD:80:19:9B
            X509v3 Authority Key Identifier:
                keyid:0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32302e302f32322d3232203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:e9:c7:7e:da:d8:16:38:83:55:b3:cf:8c:6a:e8:b9:73:
         8d:4b:22:ce:72:84:c1:4c:75:eb:99:47:1a:0f:1e:db:e9:4c:
         80:35:dc:40:5e:fa:62:d4:32:8e:db:ec:bd:fe:c6:9d:10:bf:
         a1:5e:b4:0f:32:3c:16:d6:17:3a:2f:9f:10:aa:a2:38:7b:75:
         38:f8:9f:03:a9:6d:88:72:7c:1b:80:57:0c:72:bd:ac:95:a4:
         92:6e:40:06:28:72:09:5f:ff:3e:5f:c2:bb:9c:c7:4e:b5:61:
         5d:c2:96:e2:5c:90:9c:69:5d:1c:05:c3:e8:94:81:80:bf:5f:
         47:8f:34:f0:54:6e:4b:ce:4a:a4:ef:1b:a6:b7:05:17:df:b8:
         ac:b4:4b:48:53:1a:53:ec:68:fa:f2:c8:ef:b5:16:cd:72:7c:
         00:db:2c:38:77:e6:fd:f3:1d:48:f6:1f:07:5f:76:06:87:73:
         c6:85:7e:9b:f2:21:a3:47:2f:7f:d0:d8:6c:0a:37:cc:c6:01:
         78:3b:99:45:0b:43:18:9e:b3:00:a7:84:07:74:f1:94:6c:1f:
         1a:cf:30:b0:d1:a6:ad:d8:06:89:5e:1b:a6:98:55:fc:62:51:
         0c:b9:63:1d:5b:f5:aa:81:0e:da:d4:74:35:d2:13:ea:30:c5:
         95:9a:58:94
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfvjwJ1Av0d5lIOs5IwavDpJ58REwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0NTVCRDYwMTEyOEU1RDQzMkY5QjI2NDA4NDJCRTU5
QjgxQjZGQjAeFw0yNDA0MDMyMjE1MDZaFw0yNTA0MDIyMjIwMDZaMDMxMTAvBgNV
BAMTKENBNTQ3MjBBQzk0QTYyNURBNzMyRkM4OTVDRjBCNjg4RkQ4MDE5OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+O2AtokVPYvZx1abx8Ef5zkt
BKzmdMGfIzOqzVgxy0qsj3zG3wCqUznAw3YFTLqbygOlfDaco++iNEBruB672CRn
oxIXJbWyx7lJzeRPugNf8F7YahKYXWsrfQXjrzZoK0Fhn9qs7gvevV4PoNoMtS5/
h16xnsJe2g8+mkO6iRbulccaThF5EkuV+SuC0gq4lo9QKE+irqP/KC7X/yfOP/wL
0mbSkA5MTvIXvx4xgQDfVZ/lAGU5EMj4ygpRU7j2NTott+XV0ayTMJEJIdt/OjM1
gs8ALAocitGNysCf31skfgsnRmNoOjj/lERqhXLnZwSNvtywpU++E8FLbM7nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUylRyCslKYl2nMvyJXPC2iP2AGZswHwYDVR0j
BBgwFoAUDkVb1gESjl1DL5smQIQr5ZuBtvswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlNOWdRRHZpczl5SnZrYkF2WUo2WURucVlKZDU4bTE1V0FXS3Q0b2Va
QVcvMS8wRTQ1NUJENjAxMTI4RTVENDMyRjlCMjY0MDg0MkJFNTlCODFCNkZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFNDU1QkQ2MDExMjhFNUQ0
MzJGOUIyNjQwODQyQkU1OUI4MUI2RkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5TTlnUUR2aXM5eUp2a2JBdllKNllEbnFZSmQ1OG0xNVdBV0t0NG9lWkFXLzEv
MzQzNTJlMzEzOTMwMmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzYzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLb4UMA0GCSqGSIb3DQEBCwUAA4IBAQBdFunHftrY
FjiDVbPPjGrouXONSyLOcoTBTHXrmUcaDx7b6UyANdxAXvpi1DKO2+y9/sadEL+h
XrQPMjwW1hc6L58QqqI4e3U4+J8DqW2IcnwbgFcMcr2slaSSbkAGKHIJX/8+X8K7
nMdOtWFdwpbiXJCcaV0cBcPolIGAv19HjzTwVG5Lzkqk7xumtwUX37istEtIUxpT
7Gj68sjvtRbNcnwA2yw4d+b98x1I9h8HX3YGh3PGhX6b8iGjRy9/0NhsCjfMxgF4
O5lFC0MYnrMAp4QHdPGUbB8azzCw0aat2AaJXhummFX8YlEMuWMdW/WqgQ7a1HQ1
0hPqMMWVmliU
-----END CERTIFICATE-----
Generated at Sat Aug 10 12:53:45 2024 by rpki-client on console-fra.rpki-client.org