Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32332d3233203d3e20323638363736.roa
File:                     34352e3136352e3133322e302f32332d3233203d3e20323638363736.roa (raw, json)
Hash identifier:          hwS5PAcvKzBXWZmCFEaQ/gNvnFRs1zkfdeMqwYY+XQU=
Subject key identifier:   0B:11:9B:94:F9:62:FA:EE:22:06:E5:8E:85:45:91:91:CB:19:80:A3
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       201A12DEADAB8CA68C01C102CCB3BE657DA3FE94
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32332d3233203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:13 +0000
ROA not before:           Mon 06 May 2024 14:04:13 +0000
ROA not after:            Mon 05 May 2025 14:09:13 +0000
asID:                     268676
IP address blocks:        45.165.132.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1a:12:de:ad:ab:8c:a6:8c:01:c1:02:cc:b3:be:65:7d:a3:fe:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:13 2024 GMT
            Not After : May  5 14:09:13 2025 GMT
        Subject: CN=0B119B94F962FAEE2206E58E85459191CB1980A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a6:c0:bd:26:c1:c7:ea:e4:0f:db:ae:5a:dc:
                    07:2b:57:7c:c0:f9:cd:e1:4f:f9:b1:d9:f4:60:58:
                    bf:a4:38:4d:66:f1:3d:4c:2b:0e:02:e6:bb:93:ef:
                    4b:dc:d9:b8:1d:c5:3d:7a:8d:ae:ef:2f:53:d4:ab:
                    4d:b0:48:c3:dd:5f:3a:cf:d4:4f:db:46:4f:87:f0:
                    28:38:b7:76:cd:8a:5d:24:65:46:c9:be:75:5f:ba:
                    59:38:53:cd:11:5a:28:5a:5f:4b:96:8b:b8:51:9c:
                    32:5e:ad:a9:a0:1d:b7:76:67:8f:8b:81:38:f3:fd:
                    ec:cd:5a:e3:31:3a:8f:26:ee:22:b6:89:26:8d:f5:
                    71:17:5f:ba:ec:3c:75:ca:98:f3:37:90:64:a7:4e:
                    6e:9e:22:4c:0c:34:cc:0a:0f:bd:69:c0:de:e6:fa:
                    20:d0:7d:93:80:50:25:8b:d2:2d:c7:b4:7d:05:ab:
                    80:f8:7c:c3:88:e3:32:62:91:24:53:25:d9:da:cc:
                    f6:de:f3:16:1f:66:a6:8a:17:a1:68:5e:16:91:01:
                    23:ae:bd:79:30:ca:e8:2b:44:19:ad:85:82:8e:57:
                    da:7e:fa:a5:05:cd:6d:ab:ab:02:7b:3f:e6:81:1e:
                    fa:35:8e:2b:79:7d:c4:9d:bb:08:62:4b:52:cb:93:
                    a6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:11:9B:94:F9:62:FA:EE:22:06:E5:8E:85:45:91:91:CB:19:80:A3
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32332d3233203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:81:32:3c:d4:1b:0b:6f:1d:9c:de:22:e4:1b:61:9e:0d:
         87:98:92:4e:bf:d2:7d:72:96:61:3b:0b:52:ad:ab:ab:d8:10:
         bd:39:a3:9e:2b:21:74:df:ad:bd:dd:6d:60:a0:ad:a5:c4:32:
         96:aa:36:06:98:a2:6d:70:bd:74:02:ac:25:2f:39:73:5d:fa:
         2a:4c:15:7a:65:3d:58:40:c6:bd:e3:95:f1:a5:f1:ac:ed:b4:
         02:1a:23:ea:6f:3d:cd:a3:51:32:e3:ae:13:23:3f:a6:2d:53:
         5d:58:e8:3a:cc:a0:f4:8b:4d:18:dc:9a:2e:9e:3f:f5:8e:a0:
         5c:45:7c:77:de:9f:fb:8c:2d:7f:09:21:16:4b:6a:ba:46:e1:
         59:26:00:c8:66:19:e5:49:de:e8:dc:82:11:dc:04:89:6e:56:
         eb:bf:98:7e:8f:c9:c9:46:b5:cf:ce:32:b2:a2:ef:00:db:33:
         cc:50:f5:00:d8:95:88:e7:12:ce:ee:36:67:37:20:8c:4f:c0:
         a3:81:6d:34:4c:1a:23:73:81:a7:2a:f5:ba:82:83:bd:8c:44:
         57:0f:16:c2:cc:76:0f:2d:d4:62:b5:4d:8e:43:0d:d9:b7:d7:
         9d:9c:f2:f1:97:92:b0:a3:4f:a6:21:1a:6d:84:2c:e4:21:6f:
         0e:bb:89:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIBoS3q2rjKaMAcECzLO+ZX2j/pQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFQ0ZGMDZCNTY3MzM2MzM1Qjc5NkJGNUFDQUJFQTY3
NjU5QTQzNzAeFw0yNDA1MDYxNDA0MTNaFw0yNTA1MDUxNDA5MTNaMDMxMTAvBgNV
BAMTKDBCMTE5Qjk0Rjk2MkZBRUUyMjA2RTU4RTg1NDU5MTkxQ0IxOTgwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/psC9JsHH6uQP265a3AcrV3zA
+c3hT/mx2fRgWL+kOE1m8T1MKw4C5ruT70vc2bgdxT16ja7vL1PUq02wSMPdXzrP
1E/bRk+H8Cg4t3bNil0kZUbJvnVfulk4U80RWihaX0uWi7hRnDJeramgHbd2Z4+L
gTjz/ezNWuMxOo8m7iK2iSaN9XEXX7rsPHXKmPM3kGSnTm6eIkwMNMwKD71pwN7m
+iDQfZOAUCWL0i3HtH0Fq4D4fMOI4zJikSRTJdnazPbe8xYfZqaKF6FoXhaRASOu
vXkwyugrRBmthYKOV9p++qUFzW2rqwJ7P+aBHvo1jit5fcSduwhiS1LLk6aLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCxGblPli+u4iBuWOhUWRkcsZgKMwHwYDVR0j
BBgwFoAU7+z/BrVnM2M1t5a/Wsq+pnZZpDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlvbzNxV2ZvOHZEcE1jZ0NHRmViSkZnckJoV1BQeXdnVmVhY1p6bWFh
Sk4vMC9FRkVDRkYwNkI1NjczMzYzMzVCNzk2QkY1QUNBQkVBNjc2NTlBNDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRUNGRjA2QjU2NzMzNjMz
NUI3OTZCRjVBQ0FCRUE2NzY1OUE0MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5b28zcVdmbzh2RHBNY2dDR0ZlYkpGZ3JCaFdQUHl3Z1ZlYWNaem1hYUpOLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtpYQwDQYJKoZIhvcNAQELBQADggEBABPZgTI8
1BsLbx2c3iLkG2GeDYeYkk6/0n1ylmE7C1Ktq6vYEL05o54rIXTfrb3dbWCgraXE
MpaqNgaYom1wvXQCrCUvOXNd+ipMFXplPVhAxr3jlfGl8azttAIaI+pvPc2jUTLj
rhMjP6YtU11Y6DrMoPSLTRjcmi6eP/WOoFxFfHfen/uMLX8JIRZLarpG4VkmAMhm
GeVJ3ujcghHcBIluVuu/mH6PyclGtc/OMrKi7wDbM8xQ9QDYlYjnEs7uNmc3IIxP
wKOBbTRMGiNzgacq9bqCg72MRFcPFsLMdg8t1GK1TY5DDdm3152c8vGXkrCjT6Yh
Gm2ELOQhbw67iXU=
-----END CERTIFICATE-----
Generated at Sun Aug 25 05:06:07 2024 by rpki-client on console-ams.rpki-client.org