Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa
File:                     34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa (raw, json)
Hash identifier:          OebuVfOGi/esDQZhmM0KSTCTnc8YDQqAHVIuyGHeyw8=
Subject key identifier:   3C:05:C4:1E:B2:30:E8:76:BF:EF:29:76:78:7E:78:93:66:3D:17:EF
Certificate issuer:       /CN=587B556A325EFD4FA17909D19F46DDB8079DD090
Certificate serial:       345B19AB00EC83A74322EC395B3AD90B53D640B6
Authority key identifier: 58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa
Signing time:             Thu 04 Apr 2024 23:24:17 +0000
ROA not before:           Thu 04 Apr 2024 23:19:17 +0000
ROA not after:            Thu 03 Apr 2025 23:24:17 +0000
asID:                     267136
IP address blocks:        45.229.233.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5b:19:ab:00:ec:83:a7:43:22:ec:39:5b:3a:d9:0b:53:d6:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587B556A325EFD4FA17909D19F46DDB8079DD090
        Validity
            Not Before: Apr  4 23:19:17 2024 GMT
            Not After : Apr  3 23:24:17 2025 GMT
        Subject: CN=3C05C41EB230E876BFEF2976787E7893663D17EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:6d:f2:a7:cf:21:75:23:2e:47:d6:8d:f8:
                    1d:06:10:e9:6c:4d:a1:9a:97:57:91:42:f9:7c:a1:
                    e9:a5:29:4d:55:c3:b1:df:f7:ae:28:34:97:64:71:
                    04:4a:6b:35:89:9d:13:5a:52:57:13:42:40:6e:cb:
                    58:68:b6:48:74:50:bf:52:e4:4b:96:d4:a5:9e:0f:
                    d0:5c:e4:06:5c:17:30:64:ae:c0:63:97:a2:53:b4:
                    82:fb:71:13:d5:51:6a:e7:59:6a:b7:dd:45:e1:c7:
                    29:76:4b:cd:89:bc:c4:6c:2c:1b:fc:55:a7:ab:24:
                    d0:52:3d:eb:b6:df:10:e3:52:60:dc:97:f8:3f:59:
                    2f:3d:d4:f9:47:a8:a7:47:cd:60:de:49:ab:8d:77:
                    dc:55:35:5c:44:94:8d:2e:ed:90:dc:e8:7e:47:9d:
                    2a:a6:4d:9d:b7:14:cb:73:61:0b:07:63:47:0a:eb:
                    03:b8:3a:02:74:49:7f:18:de:34:29:59:43:6c:f9:
                    0b:f2:fb:82:9f:33:f1:9a:09:f5:f0:02:0c:f6:86:
                    b5:e4:24:75:d4:fa:45:ff:d9:d9:e5:60:4a:cd:eb:
                    3d:f5:ae:e6:c7:c7:e5:e0:43:89:d9:37:1b:6e:c1:
                    c8:bf:43:4b:6a:28:d6:ff:b6:02:94:90:0e:9a:f9:
                    7a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:05:C4:1E:B2:30:E8:76:BF:EF:29:76:78:7E:78:93:66:3D:17:EF
            X509v3 Authority Key Identifier:
                keyid:58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233332e302f32342d3234203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:92:68:08:e8:a7:2e:65:1f:1a:3c:4d:9b:c5:96:74:39:25:
         44:3f:f3:d3:56:34:35:29:d6:da:7c:f4:6d:05:8d:0e:61:20:
         d8:69:83:ab:ed:c5:48:6d:1b:05:fc:b7:cf:a3:64:6a:79:38:
         3c:e6:96:cf:95:1a:7e:c6:4d:c5:be:50:7c:d0:20:58:24:23:
         63:7c:b5:51:a6:e9:5b:94:67:17:12:c9:de:3f:77:4e:22:55:
         b5:47:4a:ba:ce:4e:59:76:df:37:ee:ad:09:9e:8e:1c:73:50:
         3b:b7:58:0c:7d:60:07:ad:b5:cb:71:44:14:d6:7a:e0:e0:83:
         9d:58:85:a8:b9:2f:25:f2:6c:65:fc:00:7d:b8:bc:a4:0d:3e:
         c6:e2:49:64:bd:fc:11:54:ec:03:1a:41:87:64:0c:dd:42:72:
         15:ec:5a:95:69:7e:6f:1d:02:b1:e7:af:c5:71:a0:24:8a:78:
         d6:8a:ca:1c:62:db:e2:3c:84:e5:ab:ad:31:7b:ec:c4:1b:81:
         7e:7b:ad:06:8c:2b:7f:ca:ff:e8:4c:30:90:4b:82:54:a9:7c:
         55:33:e8:79:a7:ce:83:26:8a:48:00:c7:b2:6f:cc:04:a3:c6:
         95:ae:ec:a3:04:dc:6f:de:03:ea:ae:ed:73:f5:68:aa:80:c1:
         b0:36:16:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNFsZqwDsg6dDIuw5WzrZC1PWQLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg3QjU1NkEzMjVFRkQ0RkExNzkwOUQxOUY0NkREQjgw
NzlERDA5MDAeFw0yNDA0MDQyMzE5MTdaFw0yNTA0MDMyMzI0MTdaMDMxMTAvBgNV
BAMTKDNDMDVDNDFFQjIzMEU4NzZCRkVGMjk3Njc4N0U3ODkzNjYzRDE3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTw23yp88hdSMuR9aN+B0GEOls
TaGal1eRQvl8oemlKU1Vw7Hf964oNJdkcQRKazWJnRNaUlcTQkBuy1hotkh0UL9S
5EuW1KWeD9Bc5AZcFzBkrsBjl6JTtIL7cRPVUWrnWWq33UXhxyl2S82JvMRsLBv8
VaerJNBSPeu23xDjUmDcl/g/WS891PlHqKdHzWDeSauNd9xVNVxElI0u7ZDc6H5H
nSqmTZ23FMtzYQsHY0cK6wO4OgJ0SX8Y3jQpWUNs+Qvy+4KfM/GaCfXwAgz2hrXk
JHXU+kX/2dnlYErN6z31rubHx+XgQ4nZNxtuwci/Q0tqKNb/tgKUkA6a+XrxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPAXEHrIw6Ha/7yl2eH54k2Y9F+8wHwYDVR0j
BBgwFoAUWHtVajJe/U+heQnRn0bduAed0JAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JqM0ZRZUQ3N3g2M29KTHpLaWl3dm9DU1h2UTVkakVLb1pMWnFUZ2Jp
bzEvMS81ODdCNTU2QTMyNUVGRDRGQTE3OTA5RDE5RjQ2RERCODA3OUREMDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4N0I1NTZBMzI1RUZENEZB
MTc5MDlEMTlGNDZEREI4MDc5REQwOTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCajNGUWVENzd4NjNvSkx6S2lpd3ZvQ1NYdlE1ZGpFS29aTFpxVGdiaW8xLzEv
MzQzNTJlMzIzMjM5MmUzMjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5ekwDQYJKoZIhvcNAQELBQADggEBALiSaAjo
py5lHxo8TZvFlnQ5JUQ/89NWNDUp1tp89G0FjQ5hINhpg6vtxUhtGwX8t8+jZGp5
ODzmls+VGn7GTcW+UHzQIFgkI2N8tVGm6VuUZxcSyd4/d04iVbVHSrrOTll23zfu
rQmejhxzUDu3WAx9YAettctxRBTWeuDgg51Yhai5LyXybGX8AH24vKQNPsbiSWS9
/BFU7AMaQYdkDN1CchXsWpVpfm8dArHnr8VxoCSKeNaKyhxi2+I8hOWrrTF77MQb
gX57rQaMK3/K/+hMMJBLglSpfFUz6HmnzoMmikgAx7JvzASjxpWu7KME3G/eA+qu
7XP1aKqAwbA2Fvg=
-----END CERTIFICATE-----
Generated at Sun Nov 10 17:38:58 2024 by rpki-client on console-ams.rpki-client.org