Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3137392e302e302f32322d3234203d3e20323639313132.roa
File:                     34352e3137392e302e302f32322d3234203d3e20323639313132.roa (raw, json)
Hash identifier:          LpuHORhyxbgaqzWkdkOIaePw5lP0xmOTYN+MPkbbTWU=
Subject key identifier:   79:50:49:EA:53:10:CA:94:E6:A9:33:55:4A:28:61:C6:E9:A3:D1:25
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       576C2366E5BEFB1B6107E0541F7096C7B825DC5A
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3137392e302e302f32322d3234203d3e20323639313132.roa
Signing time:             Thu 04 Apr 2024 19:59:29 +0000
ROA not before:           Thu 04 Apr 2024 19:54:29 +0000
ROA not after:            Thu 03 Apr 2025 19:59:29 +0000
asID:                     269112
IP address blocks:        45.179.0.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:6c:23:66:e5:be:fb:1b:61:07:e0:54:1f:70:96:c7:b8:25:dc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:29 2024 GMT
            Not After : Apr  3 19:59:29 2025 GMT
        Subject: CN=795049EA5310CA94E6A933554A2861C6E9A3D125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:fe:ea:32:b8:92:0a:ff:f2:10:44:53:a3:
                    ea:41:18:42:fb:ab:f3:b6:6d:37:a2:6c:50:4a:49:
                    87:2d:9d:0a:5e:cd:86:0c:89:ee:0d:a1:6c:a8:7d:
                    2a:2e:b8:3c:11:46:16:a4:66:a4:01:18:fd:d9:24:
                    0f:67:6e:70:31:c8:d2:32:d8:6f:40:45:a8:5f:a2:
                    7b:7a:ff:4c:ae:4d:1f:d8:82:c4:92:c5:ae:7a:99:
                    0d:5f:ff:6c:60:ce:84:df:40:d5:32:ac:b9:e1:1d:
                    65:c9:a6:f6:8b:f4:e8:cf:0c:8d:09:f4:75:6e:7b:
                    b9:87:2f:cc:cb:9d:e6:f8:f4:5b:b2:07:1e:4e:6a:
                    2e:98:de:7b:23:14:3b:7c:b6:13:68:2b:fb:e4:96:
                    f5:9a:7f:3e:64:5b:45:e5:40:fd:0b:a9:6d:3c:12:
                    34:49:e6:9a:fa:4c:41:60:a1:da:1a:00:9d:c9:51:
                    f0:4d:a8:0c:5b:8f:f2:db:1b:7e:72:8b:dc:64:7e:
                    e6:72:ca:83:ff:ef:3a:bd:60:ad:f2:9b:11:11:9a:
                    d4:d3:24:f6:fe:e2:4b:8c:ec:85:58:88:db:f7:23:
                    87:26:b8:cb:c5:51:6f:23:a7:d1:ae:c2:25:59:0a:
                    22:df:59:ec:54:6e:32:51:71:6d:75:40:9b:9a:39:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:49:EA:53:10:CA:94:E6:A9:33:55:4A:28:61:C6:E9:A3:D1:25
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3137392e302e302f32322d3234203d3e20323639313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:90:ec:c3:7f:81:89:9b:b1:f3:50:ab:13:4e:03:e1:35:
         8f:20:c3:27:b7:07:94:c4:1a:1e:a8:42:6d:a1:e5:a3:73:af:
         9f:b8:7a:d4:23:82:e1:64:ef:10:3c:da:22:01:5c:48:b0:ab:
         43:09:be:2a:0e:bd:81:56:f2:95:e0:ae:f1:9d:12:36:50:05:
         2e:b8:e4:7c:70:4f:fb:8f:e7:b6:68:a8:32:da:74:55:a9:67:
         c3:88:34:1c:5a:ea:02:84:b0:1f:24:79:28:a9:69:5a:af:23:
         14:b6:06:f7:82:4b:84:65:7b:f2:bb:75:cc:eb:b7:7f:7e:9c:
         84:50:86:f0:8e:e3:1a:42:e2:dd:75:21:f2:10:d7:b9:6c:a9:
         18:cc:5c:a6:40:6b:d0:90:0b:25:51:6c:c8:a9:7c:fc:3c:2a:
         d5:31:b1:9c:f7:8a:24:30:48:66:32:71:6d:36:a5:01:7b:f6:
         e8:83:ea:19:b2:bc:ac:87:60:f8:25:85:cf:c3:48:b2:0a:ff:
         60:75:a8:74:60:99:7a:2b:65:20:d5:00:95:79:4f:96:24:62:
         f8:e7:54:b1:e7:26:07:87:b0:27:cd:b6:b1:5f:30:16:41:30:
         a9:3d:9e:1d:46:ab:77:b5:83:38:ae:e1:cf:2f:b0:66:08:fb:
         db:b3:b0:c8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUV2wjZuW++xthB+BUH3CWx7gl3FowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzODYyRDE3MUM4NzVDM0YxODQ0MzJEREFEQ0M4MjE5
RjUxQ0FERjAeFw0yNDA0MDQxOTU0MjlaFw0yNTA0MDMxOTU5MjlaMDMxMTAvBgNV
BAMTKDc5NTA0OUVBNTMxMENBOTRFNkE5MzM1NTRBMjg2MUM2RTlBM0QxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKw/7qMriSCv/yEERTo+pBGEL7
q/O2bTeibFBKSYctnQpezYYMie4NoWyofSouuDwRRhakZqQBGP3ZJA9nbnAxyNIy
2G9ARahfont6/0yuTR/YgsSSxa56mQ1f/2xgzoTfQNUyrLnhHWXJpvaL9OjPDI0J
9HVue7mHL8zLneb49FuyBx5Oai6Y3nsjFDt8thNoK/vklvWafz5kW0XlQP0LqW08
EjRJ5pr6TEFgodoaAJ3JUfBNqAxbj/LbG35yi9xkfuZyyoP/7zq9YK3ymxERmtTT
JPb+4kuM7IVYiNv3I4cmuMvFUW8jp9GuwiVZCiLfWexUbjJRcW11QJuaOc/1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUeVBJ6lMQypTmqTNVSihhxumj0SUwHwYDVR0j
BBgwFoAUeThi0XHIdcPxhEMt2tzIIZ9Ryt8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMS83OTM4NjJEMTcxQzg3NUMzRjE4NDQzMkREQURDQzgyMTlGNTFDQURGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Mzg2MkQxNzFDODc1QzNG
MTg0NDMyRERBRENDODIxOUY1MUNBREYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzEv
MzQzNTJlMzEzNzM5MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTMx
MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2zADANBgkqhkiG9w0BAQsFAAOCAQEAigeQ7MN/gYmb
sfNQqxNOA+E1jyDDJ7cHlMQaHqhCbaHlo3Ovn7h61COC4WTvEDzaIgFcSLCrQwm+
Kg69gVbyleCu8Z0SNlAFLrjkfHBP+4/ntmioMtp0Valnw4g0HFrqAoSwHyR5KKlp
Wq8jFLYG94JLhGV78rt1zOu3f36chFCG8I7jGkLi3XUh8hDXuWypGMxcpkBr0JAL
JVFsyKl8/Dwq1TGxnPeKJDBIZjJxbTalAXv26IPqGbK8rIdg+CWFz8NIsgr/YHWo
dGCZeitlINUAlXlPliRi+OdUsecmB4ewJ822sV8wFkEwqT2eHUard7WDOK7hzy+w
Zgj727OwyA==
-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org