Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/34352e352e3134342e302f32322d3332203d3e20323636313033.roa
File:                     34352e352e3134342e302f32322d3332203d3e20323636313033.roa (raw, json)
Hash identifier:          d7ehNZPyxE6LFCEkIDA6L0ohXfHtoIUhqPg1Ks3Eyvg=
Subject key identifier:   96:DD:FF:BF:18:C6:E0:E5:F3:3B:BD:9B:22:82:5A:65:74:B2:B0:A2
Certificate issuer:       /CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
Certificate serial:       3BFA5030C1C2888E9920A1CB1F9C6EDE8D826320
Authority key identifier: D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/34352e352e3134342e302f32322d3332203d3e20323636313033.roa
Signing time:             Tue 20 Aug 2024 02:45:40 +0000
ROA not before:           Tue 20 Aug 2024 02:40:40 +0000
ROA not after:            Tue 19 Aug 2025 02:45:40 +0000
asID:                     266103
IP address blocks:        45.5.144.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fa:50:30:c1:c2:88:8e:99:20:a1:cb:1f:9c:6e:de:8d:82:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D688CC4B42325E3A36E294BDD732C0A7D36E9193
        Validity
            Not Before: Aug 20 02:40:40 2024 GMT
            Not After : Aug 19 02:45:40 2025 GMT
        Subject: CN=96DDFFBF18C6E0E5F33BBD9B22825A6574B2B0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:e0:89:48:55:4e:9c:5b:f4:69:96:ea:e3:
                    40:7c:82:06:f5:23:82:ce:18:03:af:fb:95:ed:9b:
                    51:a0:d9:cd:12:cc:38:c8:14:c7:5d:49:7d:c6:5d:
                    26:51:eb:7b:37:78:e7:01:f0:a5:77:44:d6:8a:8d:
                    f9:4e:6c:a0:e5:f2:50:38:0a:b5:1e:6d:97:5b:00:
                    61:7f:f8:99:5a:0e:ce:56:fb:4f:8a:19:9e:1e:b9:
                    55:56:82:8e:4f:1a:52:72:f7:bf:03:86:e4:e4:40:
                    f3:e2:3f:db:85:bc:b6:af:20:76:6a:67:2f:11:f4:
                    0e:ff:4a:6e:43:41:73:0e:ef:87:ed:dc:16:86:cf:
                    4e:ee:27:f9:e2:61:da:91:71:1a:e6:a2:05:98:df:
                    02:45:c3:91:3f:af:a6:78:fe:19:b4:f6:d5:4f:d3:
                    cd:6e:a0:13:d8:d7:9c:5e:8a:f0:4e:39:2a:71:c8:
                    9c:3b:5f:78:5b:8d:6b:65:94:95:71:8a:9e:4e:6d:
                    54:5c:8b:21:c3:9f:a6:eb:2f:af:d1:76:f0:58:7b:
                    fd:96:cd:d4:56:4f:27:e9:5f:f2:39:7d:56:93:53:
                    8d:02:e6:21:b7:1c:64:c5:8d:11:47:04:26:74:d1:
                    4a:7c:91:0f:01:66:5e:d7:d7:1e:3a:99:aa:73:06:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DD:FF:BF:18:C6:E0:E5:F3:3B:BD:9B:22:82:5A:65:74:B2:B0:A2
            X509v3 Authority Key Identifier:
                keyid:D6:88:CC:4B:42:32:5E:3A:36:E2:94:BD:D7:32:C0:A7:D3:6E:91:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/D688CC4B42325E3A36E294BDD732C0A7D36E9193.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D688CC4B42325E3A36E294BDD732C0A7D36E9193.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADtcXjYhnfkx3mW3PKLXqtUK8EAb2P9zDZGMfsiMdWxS/0/34352e352e3134342e302f32322d3332203d3e20323636313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:f1:1a:6a:4c:ac:50:e4:4e:8b:8b:bc:b2:16:15:d5:29:f9:
         b0:94:8c:98:64:61:45:99:92:ec:aa:66:22:09:2c:7d:b5:2c:
         0b:94:26:54:13:a6:0a:3b:01:cc:7d:93:ae:f6:bc:31:25:29:
         51:fb:c3:15:d3:74:98:44:cb:0b:d9:ea:51:96:8e:24:f4:27:
         6a:05:c1:3f:80:40:1e:b3:6f:ce:b6:87:f0:e9:9a:41:f8:b8:
         0c:11:04:61:33:86:93:23:6a:29:3b:4c:35:b8:dd:d9:f6:2c:
         26:86:a8:8d:94:d9:7a:08:5b:89:9f:ee:6f:60:da:e5:72:ca:
         d8:64:83:6f:23:7b:6f:e1:de:16:c7:ba:da:a5:95:c9:35:9c:
         93:6c:25:50:10:0e:e3:ce:28:b7:ec:03:bd:6a:f6:21:dd:5f:
         46:e7:ed:6f:8e:96:37:89:5a:e4:82:35:28:0e:f8:85:72:0d:
         e0:16:04:cc:69:6f:2a:3b:94:5a:5f:d3:48:37:ef:da:23:dc:
         85:d3:ca:9f:2d:66:01:3d:3d:ee:02:ec:15:91:c3:61:ea:a4:
         f1:0a:f2:99:67:75:6d:ff:60:49:ea:1f:4e:2b:7f:99:ba:de:
         a6:64:40:11:2e:5a:08:70:53:eb:a3:be:b3:5b:25:90:0c:2c:
         b9:f4:23:67
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUO/pQMMHCiI6ZIKHLH5xu3o2CYyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4OENDNEI0MjMyNUUzQTM2RTI5NEJERDczMkMwQTdE
MzZFOTE5MzAeFw0yNDA4MjAwMjQwNDBaFw0yNTA4MTkwMjQ1NDBaMDMxMTAvBgNV
BAMTKDk2RERGRkJGMThDNkUwRTVGMzNCQkQ5QjIyODI1QTY1NzRCMkIwQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IeCJSFVOnFv0aZbq40B8ggb1
I4LOGAOv+5Xtm1Gg2c0SzDjIFMddSX3GXSZR63s3eOcB8KV3RNaKjflObKDl8lA4
CrUebZdbAGF/+JlaDs5W+0+KGZ4euVVWgo5PGlJy978DhuTkQPPiP9uFvLavIHZq
Zy8R9A7/Sm5DQXMO74ft3BaGz07uJ/niYdqRcRrmogWY3wJFw5E/r6Z4/hm09tVP
081uoBPY15xeivBOOSpxyJw7X3hbjWtllJVxip5ObVRciyHDn6brL6/RdvBYe/2W
zdRWTyfpX/I5fVaTU40C5iG3HGTFjRFHBCZ00Up8kQ8BZl7X1x46mapzBtkrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlt3/vxjG4OXzO72bIoJaZXSysKIwHwYDVR0j
BBgwFoAU1ojMS0IyXjo24pS91zLAp9NukZMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUR0Y1hqWWhuZmt4M21XM1BLTFhxdFVLOEVBYjJQOXpEWkdNZnNpTWRX
eFMvMC9ENjg4Q0M0QjQyMzI1RTNBMzZFMjk0QkRENzMyQzBBN0QzNkU5MTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2ODhDQzRCNDIzMjVFM0Ez
NkUyOTRCREQ3MzJDMEE3RDM2RTkxOTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FEdGNYallobmZreDNtVzNQS0xYcXRVSzhFQWIyUDl6RFpHTWZzaU1kV3hTLzAv
MzQzNTJlMzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMx
MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0FkDANBgkqhkiG9w0BAQsFAAOCAQEAxfEaakysUORO
i4u8shYV1Sn5sJSMmGRhRZmS7KpmIgksfbUsC5QmVBOmCjsBzH2Trva8MSUpUfvD
FdN0mETLC9nqUZaOJPQnagXBP4BAHrNvzraH8OmaQfi4DBEEYTOGkyNqKTtMNbjd
2fYsJoaojZTZeghbiZ/ub2Da5XLK2GSDbyN7b+HeFse62qWVyTWck2wlUBAO484o
t+wDvWr2Id1fRuftb46WN4la5II1KA74hXIN4BYEzGlvKjuUWl/TSDfv2iPchdPK
ny1mAT097gLsFZHDYeqk8QrymWd1bf9gSeofTit/mbrepmRAES5aCHBT66O+s1sl
kAwsufQjZw==
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:55:55 2024 by rpki-client on console-ams.rpki-client.org