Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32342d3234203d3e20323639323337.roa
File:                     34352e3138322e3230362e302f32342d3234203d3e20323639323337.roa (raw, json)
Hash identifier:          N5uqkLf0hsmREOkSIsYglvxLI7O1UX42/6Lsj+MHa8E=
Subject key identifier:   D1:E0:73:B8:A6:6E:AD:CC:9E:68:79:FE:12:75:86:3E:D0:82:18:08
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       71DAE76DD4247556063D602D268DF9F29EB0AFF7
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32342d3234203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:58 +0000
ROA not before:           Thu 04 Apr 2024 03:06:58 +0000
ROA not after:            Thu 03 Apr 2025 03:11:58 +0000
asID:                     269237
IP address blocks:        45.182.206.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:da:e7:6d:d4:24:75:56:06:3d:60:2d:26:8d:f9:f2:9e:b0:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:58 2024 GMT
            Not After : Apr  3 03:11:58 2025 GMT
        Subject: CN=D1E073B8A66EADCC9E6879FE1275863ED0821808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:f8:59:f7:4c:4f:22:32:e5:e2:e0:00:7c:
                    f9:48:9e:0e:8d:c8:1a:0a:98:8a:f1:bb:b6:a8:f4:
                    e6:78:05:0c:91:a3:7a:92:a1:3d:40:e5:e8:36:dd:
                    e3:5e:0b:ce:c7:37:e5:44:4c:6a:03:9b:67:3e:91:
                    83:82:4d:84:ba:b4:31:b9:4d:15:30:8e:a8:96:5d:
                    c9:85:f3:dc:02:95:16:bb:eb:d9:fa:d7:ff:49:2b:
                    b1:42:53:2c:c6:6b:9e:d7:8f:af:d4:3a:cc:f5:3b:
                    9b:bb:ba:e2:e2:65:17:8e:eb:81:b3:8f:83:66:12:
                    3d:55:1e:3e:9f:74:b9:09:74:62:22:c3:7f:9a:92:
                    57:cf:90:71:f5:9d:8c:18:5e:1d:ec:ab:6b:3b:ab:
                    08:5c:45:e3:8f:20:66:38:27:ac:b1:48:c7:c9:c8:
                    2a:bd:90:04:ea:f2:b6:ae:4b:3f:3b:56:8c:d8:84:
                    31:1a:2e:52:78:f4:4f:d7:aa:d2:1b:09:14:10:d9:
                    9c:7b:d9:ba:89:f0:af:30:c0:ed:e5:7d:3d:4a:72:
                    fd:a5:04:c1:70:20:8d:71:a8:6d:db:7c:7b:78:b9:
                    2d:e6:23:9e:02:09:b8:ee:22:ce:8b:7b:52:cf:2d:
                    8c:ab:1a:b1:cf:68:97:ad:49:a1:df:81:1a:1f:23:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:73:B8:A6:6E:AD:CC:9E:68:79:FE:12:75:86:3E:D0:82:18:08
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32342d3234203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:c6:3a:4b:60:f1:36:11:c9:e1:ea:46:fc:01:48:67:2a:93:
         9b:a7:64:fa:3e:ea:f7:39:ce:72:0e:1c:11:98:c6:c4:6f:03:
         46:d5:a0:e9:18:00:11:a8:fb:9b:03:77:1f:29:6e:60:91:7e:
         f1:59:e6:1a:92:a7:ad:d9:59:56:eb:30:ca:37:da:b5:d8:ed:
         3b:4e:54:ef:f0:4f:2c:c6:00:af:2b:83:91:3f:97:32:48:45:
         45:8a:49:0f:b7:e0:3d:31:3e:f2:61:ea:87:42:57:b0:92:71:
         2d:c8:de:32:e1:1e:7a:46:97:c1:19:0b:ab:13:de:92:8f:f3:
         dc:3e:06:ba:85:e1:e1:fa:e8:af:88:e3:eb:dd:e2:90:fb:ad:
         30:9e:e3:b7:39:63:2c:41:c0:27:e9:48:aa:89:fd:cd:60:6a:
         44:cd:61:f6:f0:6b:77:c1:07:16:91:43:48:23:a8:25:c4:b3:
         ae:fa:f0:61:7b:c9:f4:b5:97:d9:8b:97:a1:cc:95:f1:33:f0:
         28:68:9b:bb:eb:76:23:ac:01:55:67:8f:eb:88:6f:77:e0:09:
         2c:b6:96:59:e3:db:27:87:7b:a8:a5:d3:f6:61:b9:19:bb:2f:
         f5:0f:da:c0:b6:0a:4b:fa:df:da:a8:9a:7a:ef:77:a6:1f:83:
         20:9a:b5:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcdrnbdQkdVYGPWAtJo358p6wr/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjcwNzA1NjRENTNBQ0I2NjA0RkE1NjBGMUUwNTFENDdB
NUMzRjY1NzAeFw0yNDA0MDQwMzA2NThaFw0yNTA0MDMwMzExNThaMDMxMTAvBgNV
BAMTKEQxRTA3M0I4QTY2RUFEQ0M5RTY4NzlGRTEyNzU4NjNFRDA4MjE4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZvhZ90xPIjLl4uAAfPlIng6N
yBoKmIrxu7ao9OZ4BQyRo3qSoT1A5eg23eNeC87HN+VETGoDm2c+kYOCTYS6tDG5
TRUwjqiWXcmF89wClRa769n61/9JK7FCUyzGa57Xj6/UOsz1O5u7uuLiZReO64Gz
j4NmEj1VHj6fdLkJdGIiw3+aklfPkHH1nYwYXh3sq2s7qwhcReOPIGY4J6yxSMfJ
yCq9kATq8rauSz87VozYhDEaLlJ49E/XqtIbCRQQ2Zx72bqJ8K8wwO3lfT1Kcv2l
BMFwII1xqG3bfHt4uS3mI54CCbjuIs6Le1LPLYyrGrHPaJetSaHfgRofI7sjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0eBzuKZurcyeaHn+EnWGPtCCGAgwHwYDVR0j
BBgwFoAUZwcFZNU6y2YE+lYPHgUdR6XD9lcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGhqb3VvcFhBb0ZXV2VxTWdrVjdNM3RRU1RFNzJUd3FYaTJjazM5VG5n
RWcvMS82NzA3MDU2NEQ1M0FDQjY2MDRGQTU2MEYxRTA1MUQ0N0E1QzNGNjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3MDcwNTY0RDUzQUNCNjYw
NEZBNTYwRjFFMDUxRDQ3QTVDM0Y2NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhoam91b3BYQW9GV1dlcU1na1Y3TTN0UVNURTcyVHdxWGkyY2szOVRuZ0VnLzEv
MzQzNTJlMzEzODMyMmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtts4wDQYJKoZIhvcNAQELBQADggEBAKbGOktg
8TYRyeHqRvwBSGcqk5unZPo+6vc5znIOHBGYxsRvA0bVoOkYABGo+5sDdx8pbmCR
fvFZ5hqSp63ZWVbrMMo32rXY7TtOVO/wTyzGAK8rg5E/lzJIRUWKSQ+34D0xPvJh
6odCV7CScS3I3jLhHnpGl8EZC6sT3pKP89w+BrqF4eH66K+I4+vd4pD7rTCe47c5
YyxBwCfpSKqJ/c1gakTNYfbwa3fBBxaRQ0gjqCXEs6768GF7yfS1l9mLl6HMlfEz
8Chom7vrdiOsAVVnj+uIb3fgCSy2llnj2yeHe6il0/ZhuRm7L/UP2sC2Ckv639qo
mnrvd6YfgyCatZs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:35:10 2024 by rpki-client on console-ams.rpki-client.org