Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa
File:                     34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa (raw, json)
Hash identifier:          DdhBdIIUxY3wNLW4L7lHZNPZoWgO7QDSLLmOO2d+10k=
Subject key identifier:   10:DF:D6:20:65:DE:44:C2:9E:46:F6:65:07:FA:E0:44:7D:43:31:51
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       3BD6DBF876AE28A5E683BE5573DEB04F88245DC5
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        45.182.204.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d6:db:f8:76:ae:28:a5:e6:83:be:55:73:de:b0:4f:88:24:5d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=10DFD62065DE44C29E46F66507FAE0447D433151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:a0:32:b6:96:fd:84:39:8d:e7:84:29:c8:
                    34:06:9d:65:19:bf:38:b9:a4:cb:30:43:a6:cc:68:
                    37:e7:7d:d1:07:31:d1:41:db:19:95:d8:ae:06:b0:
                    9c:cb:03:b9:64:8a:0c:0f:94:10:7c:73:fa:73:89:
                    1a:31:d9:aa:d6:27:0d:57:94:a8:29:72:e7:7f:9c:
                    30:be:44:61:a0:b7:15:9f:06:f7:05:16:a6:7e:37:
                    f9:89:6b:27:3b:bf:f9:11:79:3b:26:f7:16:d6:6b:
                    d2:a0:ab:fd:bc:00:03:d8:37:5e:25:88:27:d7:2a:
                    05:80:60:58:72:87:d5:4f:5d:fc:e7:a6:1c:8a:4f:
                    98:9f:d3:d3:f0:d2:06:14:c4:71:9a:a5:d9:ca:8c:
                    ec:51:00:09:55:d8:aa:11:15:2c:07:d5:00:ed:b0:
                    a3:cd:7d:24:4c:13:37:82:98:3a:05:47:ba:8d:6e:
                    de:48:1b:83:1a:09:06:46:59:ac:33:67:f1:83:f2:
                    0a:e1:7c:fa:59:ad:3c:a1:61:07:71:ff:0a:95:7e:
                    c1:48:98:97:0d:8b:e8:d8:4a:5a:5c:4a:0d:06:1f:
                    b2:29:dd:83:87:45:1f:34:10:c1:b6:32:5e:1c:5b:
                    16:0e:b6:1b:44:47:dc:57:d2:8c:d2:86:e2:53:6c:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:D6:20:65:DE:44:C2:9E:46:F6:65:07:FA:E0:44:7D:43:31:51
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32332d3233203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:8a:6b:9c:9d:cb:b6:a9:04:76:f7:e3:67:e8:18:cd:b6:ba:
         18:04:82:24:25:35:e6:8d:0e:04:b5:9f:b6:c9:d9:51:01:bc:
         7f:42:fe:c7:f3:cc:eb:d7:d2:1a:5a:63:17:24:90:03:92:61:
         9b:e5:6a:e9:7f:6f:a0:40:86:7d:8c:f0:84:ce:04:ca:76:8d:
         10:7b:94:88:4a:d1:f6:bd:1f:c2:5f:2b:0d:d3:73:58:44:77:
         42:ad:e4:08:75:fc:4c:30:47:c5:6b:03:ba:86:20:bf:e7:6b:
         c4:7e:c6:93:e1:3b:ab:01:8d:18:1f:8a:5b:b9:2a:f8:6e:0e:
         af:67:f1:b9:f6:58:f2:0d:70:d9:78:26:96:ce:39:b6:a1:44:
         26:a7:84:29:64:20:00:47:81:07:a7:a2:1c:a9:9c:e6:fc:03:
         c0:00:2e:de:a5:53:63:1c:72:49:67:37:cd:df:d5:30:2a:7c:
         83:bc:ae:25:c9:89:2e:c5:b5:9d:36:e3:4b:cd:3d:4d:e3:01:
         c9:15:9e:55:6e:75:38:6e:25:c6:92:8e:09:ce:02:e5:1f:b2:
         f7:ca:f4:37:c8:c4:61:3c:cb:53:1d:8f:48:f5:59:7b:73:5c:
         d9:78:70:78:63:2c:39:93:97:e3:0e:b5:29:ff:39:71:29:3d:
         19:16:8e:24
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO9bb+HauKKXmg75Vc96wT4gkXcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcwNzA1NjRENTNBQ0I2NjA0RkE1NjBGMUUwNTFENDdB
NUMzRjY1NzAeFw0yNDA0MDQwMzA2NTlaFw0yNTA0MDMwMzExNTlaMDMxMTAvBgNV
BAMTKDEwREZENjIwNjVERTQ0QzI5RTQ2RjY2NTA3RkFFMDQ0N0Q0MzMxNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpk6Aytpb9hDmN54QpyDQGnWUZ
vzi5pMswQ6bMaDfnfdEHMdFB2xmV2K4GsJzLA7lkigwPlBB8c/pziRox2arWJw1X
lKgpcud/nDC+RGGgtxWfBvcFFqZ+N/mJayc7v/kReTsm9xbWa9Kgq/28AAPYN14l
iCfXKgWAYFhyh9VPXfznphyKT5if09Pw0gYUxHGapdnKjOxRAAlV2KoRFSwH1QDt
sKPNfSRMEzeCmDoFR7qNbt5IG4MaCQZGWawzZ/GD8grhfPpZrTyhYQdx/wqVfsFI
mJcNi+jYSlpcSg0GH7Ip3YOHRR80EMG2Ml4cWxYOthtER9xX0ozShuJTbNhpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEN/WIGXeRMKeRvZlB/rgRH1DMVEwHwYDVR0j
BBgwFoAUZwcFZNU6y2YE+lYPHgUdR6XD9lcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhqb3VvcFhBb0ZXV2VxTWdrVjdNM3RRU1RFNzJUd3FYaTJjazM5VG5n
RWcvMS82NzA3MDU2NEQ1M0FDQjY2MDRGQTU2MEYxRTA1MUQ0N0E1QzNGNjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MDcwNTY0RDUzQUNCNjYw
NEZBNTYwRjFFMDUxRDQ3QTVDM0Y2NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhoam91b3BYQW9GV1dlcU1na1Y3TTN0UVNURTcyVHdxWGkyY2szOVRuZ0VnLzEv
MzQzNTJlMzEzODMyMmUzMjMwMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzMjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEttswwDQYJKoZIhvcNAQELBQADggEBALGKa5yd
y7apBHb342foGM22uhgEgiQlNeaNDgS1n7bJ2VEBvH9C/sfzzOvX0hpaYxckkAOS
YZvlaul/b6BAhn2M8ITOBMp2jRB7lIhK0fa9H8JfKw3Tc1hEd0Kt5Ah1/EwwR8Vr
A7qGIL/na8R+xpPhO6sBjRgfilu5KvhuDq9n8bn2WPINcNl4JpbOObahRCanhClk
IABHgQenohypnOb8A8AALt6lU2MccklnN83f1TAqfIO8riXJiS7FtZ0240vNPU3j
AckVnlVudThuJcaSjgnOAuUfsvfK9DfIxGE8y1Mdj0j1WXtzXNl4cHhjLDmTl+MO
tSn/OXEpPRkWjiQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:35:10 2024 by rpki-client on console-ams.rpki-client.org