Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230352e302f32342d3234203d3e20323637353836.roa
File:                     34352e37302e3230352e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier:          RBoyYYOxCsSKTTmMOBucsKpHUR2fj2Jr2RHGwtAS9TE=
Subject key identifier:   EB:AE:05:91:DC:F9:46:C9:13:C8:BD:A8:3B:E3:83:33:92:FE:77:2F
Certificate issuer:       /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial:       0FFA0785E8BA815E18397B3B27C3BF782C497D61
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230352e302f32342d3234203d3e20323637353836.roa
Signing time:             Sun 22 Sep 2024 20:51:28 +0000
ROA not before:           Sun 22 Sep 2024 20:46:28 +0000
ROA not after:            Sun 21 Sep 2025 20:51:28 +0000
asID:                     267586
IP address blocks:        45.70.205.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:fa:07:85:e8:ba:81:5e:18:39:7b:3b:27:c3:bf:78:2c:49:7d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
        Validity
            Not Before: Sep 22 20:46:28 2024 GMT
            Not After : Sep 21 20:51:28 2025 GMT
        Subject: CN=EBAE0591DCF946C913C8BDA83BE3833392FE772F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:bc:2f:ce:62:79:5b:fa:cd:c8:05:90:82:
                    dc:7c:85:24:0c:d3:aa:ca:ef:51:b0:ce:b9:d0:21:
                    49:5e:bd:d0:71:12:0a:74:37:2b:dd:5f:cf:f7:e0:
                    4b:a7:f4:b8:17:ef:66:33:3d:2d:76:e3:34:e7:1b:
                    a1:95:04:87:45:1a:82:9a:38:7c:4d:ff:bb:f1:69:
                    94:69:9b:d7:c6:1a:f7:9d:12:2c:7f:c0:7a:01:04:
                    fe:ba:aa:6a:2e:b0:64:58:cb:cb:01:84:c7:cf:4a:
                    96:4e:ee:f3:9f:3b:ef:cb:4f:9a:c9:1d:21:2e:ee:
                    2f:35:01:f5:b4:b9:c8:9b:c8:22:e9:ff:ae:66:3c:
                    b1:dd:12:3a:b0:7f:1c:52:b6:e2:a8:f5:21:50:9c:
                    a7:ea:0d:93:0a:11:98:54:e6:e0:c5:ba:99:1a:0a:
                    24:a9:be:19:a4:ad:4c:d5:73:cb:d0:e9:b4:36:0f:
                    ee:1a:93:c1:c2:30:0e:80:97:45:2f:b5:25:5b:d0:
                    43:11:05:b5:45:a4:6d:89:99:12:22:51:32:0f:42:
                    b2:93:dd:52:fc:6e:8e:03:0f:2a:24:2f:74:a8:57:
                    28:4a:ca:96:ab:57:2d:7d:f7:f0:a3:a6:7e:6c:1c:
                    b2:88:8b:e7:df:64:4e:b5:2a:1b:16:c1:a3:5c:c8:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AE:05:91:DC:F9:46:C9:13:C8:BD:A8:3B:E3:83:33:92:FE:77:2F
            X509v3 Authority Key Identifier:
                keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230352e302f32342d3234203d3e20323637353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:54:d7:07:88:08:b9:39:c2:41:fd:96:84:57:1a:de:97:
         40:e0:c5:49:54:77:27:11:1a:ef:d5:bf:a4:7c:74:51:3f:b8:
         a7:8c:44:0f:9f:84:39:0b:a7:72:d4:82:f3:cf:e5:a0:bd:49:
         0f:64:84:bf:18:aa:af:b9:90:73:10:32:d2:7d:06:e1:e0:6f:
         81:d4:7e:15:20:5f:cb:56:70:d7:11:af:7e:0a:f3:4d:cf:9e:
         25:72:e4:4a:08:52:50:9f:ef:b1:63:f1:c8:42:c6:a1:bf:76:
         f9:c0:f7:fc:74:4a:cb:77:d3:95:55:7d:c3:d4:0e:e3:31:db:
         97:16:a2:25:ac:11:9d:8a:af:b3:a8:34:e6:bb:79:ba:9d:b1:
         68:d3:cb:aa:7d:32:e2:14:72:af:ae:72:bb:17:9a:d3:86:43:
         dd:f6:7b:69:32:b0:4f:22:c8:8b:c8:7b:d3:a5:a6:2f:7b:1a:
         9c:7c:17:ee:fe:52:d1:36:29:33:83:d2:7b:67:62:74:6c:b6:
         d1:29:73:44:f8:71:b1:89:d1:d2:e7:26:a1:23:4e:77:46:28:
         63:ba:24:0e:f9:37:a4:66:66:90:15:62:9e:9e:d1:d3:3a:7e:
         5d:ce:aa:16:76:71:26:b7:cb:79:d2:f6:5e:f3:4b:3b:cf:e8:
         e4:47:b0:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD/oHhei6gV4YOXs7J8O/eCxJfWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYwQTUwNjk1OTRGOUJCNjI2QTMzMzJERkUxNkREN0E3
NERFNjFBMDAeFw0yNDA5MjIyMDQ2MjhaFw0yNTA5MjEyMDUxMjhaMDMxMTAvBgNV
BAMTKEVCQUUwNTkxRENGOTQ2QzkxM0M4QkRBODNCRTM4MzMzOTJGRTc3MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0zrwvzmJ5W/rNyAWQgtx8hSQM
06rK71GwzrnQIUlevdBxEgp0NyvdX8/34Eun9LgX72YzPS124zTnG6GVBIdFGoKa
OHxN/7vxaZRpm9fGGvedEix/wHoBBP66qmousGRYy8sBhMfPSpZO7vOfO+/LT5rJ
HSEu7i81AfW0ucibyCLp/65mPLHdEjqwfxxStuKo9SFQnKfqDZMKEZhU5uDFupka
CiSpvhmkrUzVc8vQ6bQ2D+4ak8HCMA6Al0UvtSVb0EMRBbVFpG2JmRIiUTIPQrKT
3VL8bo4DDyokL3SoVyhKyparVy199/Cjpn5sHLKIi+ffZE61KhsWwaNcyLQtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU664Fkdz5RskTyL2oO+ODM5L+dy8wHwYDVR0j
BBgwFoAU1gpQaVlPm7YmozMt/hbdenTeYaAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVGTm9YSjdQRVJ1QUtidjl1YndyN1N3d1dDTFFtdjR4ZllYSEVRTW4z
RnIvMC9ENjBBNTA2OTU5NEY5QkI2MjZBMzMzMkRGRTE2REQ3QTc0REU2MUEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MEE1MDY5NTk0RjlCQjYy
NkEzMzMyREZFMTZERDdBNzRERTYxQTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVRk5vWEo3UEVSdUFLYnY5dWJ3cjdTd3dXQ0xRbXY0eGZZWEhFUU1uM0ZyLzAv
MzQzNTJlMzczMDJlMzIzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUbNMA0GCSqGSIb3DQEBCwUAA4IBAQBf/FTXB4gI
uTnCQf2WhFca3pdA4MVJVHcnERrv1b+kfHRRP7injEQPn4Q5C6dy1ILzz+WgvUkP
ZIS/GKqvuZBzEDLSfQbh4G+B1H4VIF/LVnDXEa9+CvNNz54lcuRKCFJQn++xY/HI
Qsahv3b5wPf8dErLd9OVVX3D1A7jMduXFqIlrBGdiq+zqDTmu3m6nbFo08uqfTLi
FHKvrnK7F5rThkPd9ntpMrBPIsiLyHvTpaYvexqcfBfu/lLRNikzg9J7Z2J0bLbR
KXNE+HGxidHS5yahI053RihjuiQO+TekZmaQFWKentHTOn5dzqoWdnEmt8t50vZe
80s7z+jkR7AJ
-----END CERTIFICATE-----
Generated at Wed Oct 16 21:17:34 2024 by rpki-client on console-ams.rpki-client.org