Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32322d3232203d3e20323638363736.roa
File:                     34352e3136352e3133322e302f32322d3232203d3e20323638363736.roa (raw, json)
Hash identifier:          Bh30tUNktMHHggXFGXho99NwJBS1D6RSWXXb3eqrq8s=
Subject key identifier:   2C:B1:F9:6A:44:81:B0:8E:F3:B8:E9:19:8A:26:5F:E9:81:ED:4E:31
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       1BBD102AFEE8DE27E1CDC8CA861D2FB149493687
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32322d3232203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:14 +0000
ROA not before:           Mon 06 May 2024 14:04:14 +0000
ROA not after:            Mon 05 May 2025 14:09:14 +0000
asID:                     268676
IP address blocks:        45.165.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bd:10:2a:fe:e8:de:27:e1:cd:c8:ca:86:1d:2f:b1:49:49:36:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:14 2024 GMT
            Not After : May  5 14:09:14 2025 GMT
        Subject: CN=2CB1F96A4481B08EF3B8E9198A265FE981ED4E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:8c:fd:a1:b5:40:7b:70:14:0c:ab:73:c5:
                    0c:26:4e:8d:aa:dc:8a:b0:62:f7:37:65:27:86:9b:
                    59:dd:f6:8f:d9:e6:9b:aa:c5:03:7c:0b:9a:2e:20:
                    cf:24:73:c3:db:be:08:43:22:0a:11:45:f0:f3:bf:
                    8c:98:cc:49:95:1e:9d:c4:a8:ea:de:29:01:83:50:
                    ef:36:e7:40:13:c8:1c:b0:89:e5:29:42:94:e2:bd:
                    a5:05:f5:d7:ad:97:24:c9:e5:90:6f:88:53:b2:5c:
                    2b:b2:10:cc:5e:8f:57:43:e5:7e:3d:4f:87:bf:8f:
                    5e:c7:4d:d9:eb:15:d1:13:73:92:6f:70:0a:ac:9a:
                    78:4e:3c:4f:53:90:04:ac:91:03:39:17:a7:b0:dd:
                    cf:01:63:43:5c:e6:1c:11:c1:81:e3:33:e3:e2:e1:
                    8b:da:8b:70:26:e4:39:de:55:77:d6:b1:42:e0:54:
                    44:44:9c:74:f3:6a:04:a2:2c:de:d0:b2:f6:d9:52:
                    4f:6c:ec:f7:27:c0:8b:26:51:3c:c2:80:50:72:6e:
                    cf:62:bf:e8:5e:c3:51:0c:85:8c:76:49:17:4a:f6:
                    27:73:6e:39:fd:92:05:9e:76:ed:ab:ce:8c:f6:d0:
                    63:87:63:ba:91:34:6b:b9:d8:1c:a7:5f:78:9d:76:
                    7a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B1:F9:6A:44:81:B0:8E:F3:B8:E9:19:8A:26:5F:E9:81:ED:4E:31
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32322d3232203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:43:bb:78:65:c9:2f:e7:fa:2a:bc:38:9f:9b:1f:6e:ed:
         6f:3c:e6:06:e6:dd:6d:99:19:7d:9b:a4:67:ab:4f:ec:fe:b3:
         17:22:a8:c6:cc:4d:62:13:c7:bd:4f:76:bf:7b:ef:5a:bc:c7:
         7d:c7:89:1d:90:45:91:42:9b:87:15:d4:ab:25:85:a4:9a:7b:
         cf:03:71:83:37:30:4c:1b:06:4a:81:3b:c3:81:68:84:f7:cc:
         d3:fd:5e:ce:fa:5b:91:a7:52:27:a6:ae:ba:05:93:1b:b7:1d:
         4f:6b:a1:f0:26:4d:6c:d8:52:65:02:ec:1f:4b:ef:9a:34:cb:
         20:a4:36:93:d8:b6:c1:d6:d2:8c:4f:68:60:e0:4e:ad:ae:df:
         b8:20:cf:ba:30:c8:69:8e:92:4c:22:ad:d0:83:6b:42:35:72:
         ad:fa:7d:ea:67:88:f9:59:01:46:2c:bf:56:79:a2:2e:4b:9f:
         ff:ff:60:48:30:dc:a9:89:f4:f3:95:be:ef:77:ed:d3:bf:3f:
         96:ec:a7:fd:a6:9a:bc:e0:ce:13:b2:05:20:b4:e7:35:e4:2b:
         51:65:d0:e6:02:61:70:3a:ea:3e:f6:b0:a7:23:85:e1:39:2a:
         91:f6:31:80:32:c2:52:4c:64:cf:bb:6e:0e:c2:4d:e5:89:47:
         fd:8a:84:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG70QKv7o3ifhzcjKhh0vsUlJNocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFQ0ZGMDZCNTY3MzM2MzM1Qjc5NkJGNUFDQUJFQTY3
NjU5QTQzNzAeFw0yNDA1MDYxNDA0MTRaFw0yNTA1MDUxNDA5MTRaMDMxMTAvBgNV
BAMTKDJDQjFGOTZBNDQ4MUIwOEVGM0I4RTkxOThBMjY1RkU5ODFFRDRFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGIz9obVAe3AUDKtzxQwmTo2q
3IqwYvc3ZSeGm1nd9o/Z5puqxQN8C5ouIM8kc8PbvghDIgoRRfDzv4yYzEmVHp3E
qOreKQGDUO8250ATyBywieUpQpTivaUF9detlyTJ5ZBviFOyXCuyEMxej1dD5X49
T4e/j17HTdnrFdETc5JvcAqsmnhOPE9TkASskQM5F6ew3c8BY0Nc5hwRwYHjM+Pi
4Yvai3Am5DneVXfWsULgVEREnHTzagSiLN7QsvbZUk9s7PcnwIsmUTzCgFBybs9i
v+hew1EMhYx2SRdK9idzbjn9kgWedu2rzoz20GOHY7qRNGu52BynX3iddnoRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULLH5akSBsI7zuOkZiiZf6YHtTjEwHwYDVR0j
BBgwFoAU7+z/BrVnM2M1t5a/Wsq+pnZZpDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlvbzNxV2ZvOHZEcE1jZ0NHRmViSkZnckJoV1BQeXdnVmVhY1p6bWFh
Sk4vMC9FRkVDRkYwNkI1NjczMzYzMzVCNzk2QkY1QUNBQkVBNjc2NTlBNDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRUNGRjA2QjU2NzMzNjMz
NUI3OTZCRjVBQ0FCRUE2NzY1OUE0MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5b28zcVdmbzh2RHBNY2dDR0ZlYkpGZ3JCaFdQUHl3Z1ZlYWNaem1hYUpOLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpYQwDQYJKoZIhvcNAQELBQADggEBAFCmQ7t4
Zckv5/oqvDifmx9u7W885gbm3W2ZGX2bpGerT+z+sxciqMbMTWITx71Pdr9771q8
x33HiR2QRZFCm4cV1KslhaSae88DcYM3MEwbBkqBO8OBaIT3zNP9Xs76W5GnUiem
rroFkxu3HU9rofAmTWzYUmUC7B9L75o0yyCkNpPYtsHW0oxPaGDgTq2u37ggz7ow
yGmOkkwirdCDa0I1cq36fepniPlZAUYsv1Z5oi5Ln///YEgw3KmJ9POVvu937dO/
P5bsp/2mmrzgzhOyBSC05zXkK1Fl0OYCYXA66j72sKcjheE5KpH2MYAywlJMZM+7
bg7CTeWJR/2KhLw=
-----END CERTIFICATE-----
Generated at Sun Aug 25 05:06:07 2024 by rpki-client on console-ams.rpki-client.org