Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3332203d3e20323638313935.roa
File:                     34352e3233352e3130302e302f32322d3332203d3e20323638313935.roa (raw, json)
Hash identifier:          +WhsqwghzOL2GISaLfTj4gAjXdw+eRpIRacuXydGGsg=
Subject key identifier:   E8:5A:74:E5:FA:EB:42:AA:00:0B:51:B1:DF:BB:D6:09:73:C1:8B:52
Certificate issuer:       /CN=0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA
Certificate serial:       471C554EC48941439705242867F05A475068CD2F
Authority key identifier: 03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3332203d3e20323638313935.roa
Signing time:             Thu 18 Apr 2024 23:25:26 +0000
ROA not before:           Thu 18 Apr 2024 23:20:26 +0000
ROA not after:            Thu 17 Apr 2025 23:25:26 +0000
asID:                     268195
IP address blocks:        45.235.100.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1c:55:4e:c4:89:41:43:97:05:24:28:67:f0:5a:47:50:68:cd:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA
        Validity
            Not Before: Apr 18 23:20:26 2024 GMT
            Not After : Apr 17 23:25:26 2025 GMT
        Subject: CN=E85A74E5FAEB42AA000B51B1DFBBD60973C18B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:5f:72:c1:9b:0a:f5:56:df:21:0f:32:76:
                    38:19:fc:3a:cf:a1:3f:7f:c7:0d:28:04:74:14:47:
                    2a:a1:78:64:46:1f:72:04:63:f2:8c:b0:1d:eb:24:
                    f6:0a:a0:69:76:5e:c7:52:69:fb:f7:66:d8:e4:e9:
                    9d:5c:ec:2d:3b:38:6d:0a:0f:12:0c:b9:cc:15:4d:
                    13:85:44:1a:be:da:e4:11:49:3e:fd:70:ba:6d:07:
                    9f:23:bc:d5:57:9f:e0:98:51:f5:9e:6e:5d:80:d8:
                    5b:2e:ed:94:42:99:52:98:88:22:c3:e0:05:32:4b:
                    0e:96:c9:bd:58:c1:14:7b:54:b3:68:c9:1d:5c:e9:
                    34:6e:9a:4b:42:da:51:be:6d:dc:8d:3a:50:fa:11:
                    b1:2b:ae:a6:e7:15:76:39:75:30:7f:05:aa:87:ed:
                    0e:17:b5:0c:32:bb:8d:50:b3:89:04:e1:b9:74:0f:
                    02:cc:cf:83:fe:6d:1f:e9:65:ec:a8:80:5a:68:8e:
                    81:d4:2a:33:f0:e8:5b:fa:c8:9a:db:cb:9a:da:f2:
                    fc:79:38:19:0e:4b:e2:dc:5a:8e:9f:73:dc:c7:50:
                    ca:6f:ac:7c:12:af:3c:ec:ce:72:30:49:57:7a:2c:
                    e3:84:9e:16:c2:46:f7:31:c4:c1:d4:26:a3:d7:f3:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5A:74:E5:FA:EB:42:AA:00:0B:51:B1:DF:BB:D6:09:73:C1:8B:52
            X509v3 Authority Key Identifier:
                keyid:03:06:DD:90:02:F6:DF:CE:DE:0A:16:C9:1D:0E:5F:53:7A:01:17:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0306DD9002F6DFCEDE0A16C91D0E5F537A0117BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaKFXx8jyCvrDw7sP5kwndu7QAdNiHPWPZQvz8i5HTAM/0/34352e3233352e3130302e302f32322d3332203d3e20323638313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:20:39:83:da:24:53:4c:ef:41:e6:3e:64:6f:2a:3e:a9:
         12:77:37:18:a8:ed:13:c6:0b:db:34:6c:1d:d8:5e:0f:7d:ff:
         80:86:71:6b:a3:2a:7e:59:71:67:d8:8e:d1:e4:1c:9f:e4:30:
         ab:9e:95:6b:bd:b4:f2:d9:e7:82:06:a4:8a:f0:d4:cf:6c:f3:
         97:2b:67:98:82:3b:b7:3e:26:30:6b:ff:76:a2:ea:5c:dd:3c:
         fd:29:be:31:af:f8:14:eb:6c:8c:bc:9e:14:e9:a2:6b:2e:64:
         27:c4:59:ef:3b:e1:9e:87:71:bd:67:17:7e:68:07:77:b5:ee:
         7b:88:2e:f8:e8:ec:1c:6f:2a:37:e8:07:51:11:84:cd:52:96:
         54:01:33:54:7a:c6:84:d9:1e:0c:25:e5:bf:c2:36:c5:1e:55:
         cc:d6:99:b4:5b:08:65:87:ef:77:ee:2c:cd:4a:85:c7:1e:4b:
         84:fc:e5:8a:21:ea:a7:33:e7:79:0a:20:63:f2:c5:8f:97:0a:
         57:87:f0:ec:f4:ee:ea:2f:50:81:de:14:b4:ad:b2:1c:46:c7:
         d3:4e:b0:6c:82:c9:3a:9d:fc:16:e3:63:49:3f:17:f3:0c:4b:
         f9:d2:72:bd:0e:b3:62:83:de:1b:5f:4b:35:e5:3a:48:28:71:
         79:1f:0f:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURxxVTsSJQUOXBSQoZ/BaR1BozS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwNkREOTAwMkY2REZDRURFMEExNkM5MUQwRTVGNTM3
QTAxMTdCQTAeFw0yNDA0MTgyMzIwMjZaFw0yNTA0MTcyMzI1MjZaMDMxMTAvBgNV
BAMTKEU4NUE3NEU1RkFFQjQyQUEwMDBCNTFCMURGQkJENjA5NzNDMThCNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCje19ywZsK9VbfIQ8ydjgZ/DrP
oT9/xw0oBHQURyqheGRGH3IEY/KMsB3rJPYKoGl2XsdSafv3Ztjk6Z1c7C07OG0K
DxIMucwVTROFRBq+2uQRST79cLptB58jvNVXn+CYUfWebl2A2Fsu7ZRCmVKYiCLD
4AUySw6Wyb1YwRR7VLNoyR1c6TRumktC2lG+bdyNOlD6EbErrqbnFXY5dTB/BaqH
7Q4XtQwyu41Qs4kE4bl0DwLMz4P+bR/pZeyogFpojoHUKjPw6Fv6yJrby5ra8vx5
OBkOS+LcWo6fc9zHUMpvrHwSrzzsznIwSVd6LOOEnhbCRvcxxMHUJqPX88ydAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6Fp05frrQqoAC1Gx37vWCXPBi1IwHwYDVR0j
BBgwFoAUAwbdkAL2387eChbJHQ5fU3oBF7owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWFLRlh4OGp5Q3ZyRHc3c1A1a3duZHU3UUFkTmlIUFdQWlF2ejhpNUhU
QU0vMC8wMzA2REQ5MDAyRjZERkNFREUwQTE2QzkxRDBFNUY1MzdBMDExN0JBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDZERDkwMDJGNkRGQ0VE
RTBBMTZDOTFEMEU1RjUzN0EwMTE3QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhS0ZYeDhqeUN2ckR3N3NQNWt3bmR1N1FBZE5pSFBXUFpRdno4aTVIVEFNLzAv
MzQzNTJlMzIzMzM1MmUzMTMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt62QwDQYJKoZIhvcNAQELBQADggEBAHYdIDmD
2iRTTO9B5j5kbyo+qRJ3Nxio7RPGC9s0bB3YXg99/4CGcWujKn5ZcWfYjtHkHJ/k
MKuelWu9tPLZ54IGpIrw1M9s85crZ5iCO7c+JjBr/3ai6lzdPP0pvjGv+BTrbIy8
nhTpomsuZCfEWe874Z6Hcb1nF35oB3e17nuILvjo7BxvKjfoB1ERhM1SllQBM1R6
xoTZHgwl5b/CNsUeVczWmbRbCGWH73fuLM1KhcceS4T85Yoh6qcz53kKIGPyxY+X
CleH8Oz07uovUIHeFLStshxGx9NOsGyCyTqd/BbjY0k/F/MMS/nScr0Os2KD3htf
SzXlOkgocXkfD4s=
-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:40 2024 by rpki-client on console-ams.rpki-client.org