Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32342d3234203d3e20323638363736.roa
File:                     34352e3136352e3133322e302f32342d3234203d3e20323638363736.roa (raw, json)
Hash identifier:          0i2XZuvEO8sSBbpAc+I+a2hddegjIrH8GSEEWx8lyr0=
Subject key identifier:   2D:75:70:16:D5:16:AE:6E:17:87:2C:B6:D3:41:83:B0:06:F8:52:5D
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       61451C11B02CD9540704DF928DC3E636401C7608
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32342d3234203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:14 +0000
ROA not before:           Mon 06 May 2024 14:04:14 +0000
ROA not after:            Mon 05 May 2025 14:09:14 +0000
asID:                     268676
IP address blocks:        45.165.132.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:45:1c:11:b0:2c:d9:54:07:04:df:92:8d:c3:e6:36:40:1c:76:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:14 2024 GMT
            Not After : May  5 14:09:14 2025 GMT
        Subject: CN=2D757016D516AE6E17872CB6D34183B006F8525D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:29:87:b9:51:d3:4f:ba:cf:fb:15:81:d3:
                    68:c3:31:75:de:8d:e5:84:2f:82:b0:16:46:b1:b1:
                    44:46:fd:38:9d:58:22:bf:a1:28:1c:88:2f:e0:6a:
                    ed:ce:a6:f8:84:c9:81:67:cb:c9:52:80:c2:fe:2a:
                    63:f2:3e:3a:3f:cb:c6:ea:92:76:0a:a5:66:a2:b1:
                    8f:d9:30:98:a1:fd:d5:14:75:d9:31:21:8f:c4:a3:
                    e0:2d:59:63:35:b6:d6:db:48:02:a0:08:fa:16:7b:
                    50:aa:2d:c0:b4:89:cb:f3:fe:db:af:08:9e:ed:c4:
                    46:60:8e:38:05:26:72:be:e9:58:2e:35:1c:23:87:
                    fa:92:13:a8:eb:3e:f4:bb:7c:56:dd:bc:d0:f7:c7:
                    38:39:29:8e:d6:42:a4:0b:40:45:6b:8e:c8:48:3f:
                    db:e5:4c:6b:b1:1d:8f:f6:19:a8:09:1d:e5:0b:8d:
                    86:fd:81:ed:1e:67:d8:5e:9a:ee:2c:88:3d:0b:51:
                    4c:95:9d:fd:e1:19:1a:c0:61:93:1e:70:1f:3b:64:
                    18:a7:15:06:ee:31:6e:8c:35:6c:d2:19:4e:f9:d6:
                    f4:89:80:84:7f:c7:37:91:ea:a9:e4:16:4f:bd:b2:
                    5e:d5:d7:d0:25:50:51:a8:df:db:c8:49:82:89:e4:
                    50:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:75:70:16:D5:16:AE:6E:17:87:2C:B6:D3:41:83:B0:06:F8:52:5D
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133322e302f32342d3234203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:09:52:26:57:ee:a3:ba:e4:ba:0a:ad:b8:3b:fa:0e:91:
         37:7a:69:90:e3:1f:11:cd:22:0d:94:31:7f:23:1f:2a:36:f1:
         4a:7d:a8:1a:e1:6a:90:8b:bf:50:df:a9:3e:af:f2:79:08:8b:
         17:70:bc:13:0a:56:b9:1b:68:a0:bf:99:09:03:a6:65:c3:67:
         8e:f4:3d:6c:5e:ba:35:6f:24:e0:ee:75:4b:59:6d:34:fa:68:
         ac:d9:24:98:dc:b6:cf:6d:a5:d8:97:51:8a:50:c8:ce:99:82:
         c6:75:82:33:ef:58:7e:d2:69:86:31:76:9a:ee:25:d8:fc:ac:
         e7:ed:2b:f7:81:c3:37:a1:73:db:96:40:fd:15:c5:b7:21:27:
         f9:91:66:73:84:56:f3:33:9e:21:e7:5d:c3:ef:57:83:53:07:
         58:cb:f4:50:c6:b5:14:ed:06:df:d9:a2:e5:28:2c:88:fb:30:
         b9:b3:e6:4c:40:8d:57:73:70:16:ea:77:49:4e:2c:3e:5f:35:
         69:97:b4:07:97:be:54:57:3e:dd:2f:0f:25:de:52:09:f4:2a:
         e0:6c:bb:0a:09:c7:3c:6f:05:a3:3a:9e:82:d8:7f:ce:ea:2a:
         17:9a:00:07:69:fa:4c:fc:de:89:6b:4f:8f:a8:e2:4e:49:fd:
         31:4e:d6:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYUUcEbAs2VQHBN+SjcPmNkAcdggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFQ0ZGMDZCNTY3MzM2MzM1Qjc5NkJGNUFDQUJFQTY3
NjU5QTQzNzAeFw0yNDA1MDYxNDA0MTRaFw0yNTA1MDUxNDA5MTRaMDMxMTAvBgNV
BAMTKDJENzU3MDE2RDUxNkFFNkUxNzg3MkNCNkQzNDE4M0IwMDZGODUyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMXCmHuVHTT7rP+xWB02jDMXXe
jeWEL4KwFkaxsURG/TidWCK/oSgciC/gau3OpviEyYFny8lSgML+KmPyPjo/y8bq
knYKpWaisY/ZMJih/dUUddkxIY/Eo+AtWWM1ttbbSAKgCPoWe1CqLcC0icvz/tuv
CJ7txEZgjjgFJnK+6VguNRwjh/qSE6jrPvS7fFbdvND3xzg5KY7WQqQLQEVrjshI
P9vlTGuxHY/2GagJHeULjYb9ge0eZ9hemu4siD0LUUyVnf3hGRrAYZMecB87ZBin
FQbuMW6MNWzSGU751vSJgIR/xzeR6qnkFk+9sl7V19AlUFGo39vISYKJ5FCVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULXVwFtUWrm4Xhyy200GDsAb4Ul0wHwYDVR0j
BBgwFoAU7+z/BrVnM2M1t5a/Wsq+pnZZpDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlvbzNxV2ZvOHZEcE1jZ0NHRmViSkZnckJoV1BQeXdnVmVhY1p6bWFh
Sk4vMC9FRkVDRkYwNkI1NjczMzYzMzVCNzk2QkY1QUNBQkVBNjc2NTlBNDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRUNGRjA2QjU2NzMzNjMz
NUI3OTZCRjVBQ0FCRUE2NzY1OUE0MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5b28zcVdmbzh2RHBNY2dDR0ZlYkpGZ3JCaFdQUHl3Z1ZlYWNaem1hYUpOLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYQwDQYJKoZIhvcNAQELBQADggEBAHHKCVIm
V+6juuS6Cq24O/oOkTd6aZDjHxHNIg2UMX8jHyo28Up9qBrhapCLv1DfqT6v8nkI
ixdwvBMKVrkbaKC/mQkDpmXDZ470PWxeujVvJODudUtZbTT6aKzZJJjcts9tpdiX
UYpQyM6ZgsZ1gjPvWH7SaYYxdpruJdj8rOftK/eBwzehc9uWQP0VxbchJ/mRZnOE
VvMzniHnXcPvV4NTB1jL9FDGtRTtBt/ZouUoLIj7MLmz5kxAjVdzcBbqd0lOLD5f
NWmXtAeXvlRXPt0vDyXeUgn0KuBsuwoJxzxvBaM6noLYf87qKheaAAdp+kz83olr
T4+o4k5J/TFO1pI=
-----END CERTIFICATE-----
Generated at Sun Aug 25 05:06:07 2024 by rpki-client on console-ams.rpki-client.org