Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133352e302f32342d3234203d3e20323638363736.roa
File:                     34352e3136352e3133352e302f32342d3234203d3e20323638363736.roa (raw, json)
Hash identifier:          6zxzEdSgbh62GRt72TBCsH/VVlwfQfr5PqLflYekuLs=
Subject key identifier:   26:4F:49:26:F3:E3:33:7C:03:48:4E:EB:A1:E3:D0:59:93:2A:64:D7
Certificate issuer:       /CN=EFECFF06B567336335B796BF5ACABEA67659A437
Certificate serial:       42CF81C67A8EE0F8ED929B6F05ED040A7CCA576A
Authority key identifier: EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133352e302f32342d3234203d3e20323638363736.roa
Signing time:             Mon 06 May 2024 14:09:15 +0000
ROA not before:           Mon 06 May 2024 14:04:15 +0000
ROA not after:            Mon 05 May 2025 14:09:15 +0000
asID:                     268676
IP address blocks:        45.165.135.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cf:81:c6:7a:8e:e0:f8:ed:92:9b:6f:05:ed:04:0a:7c:ca:57:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFECFF06B567336335B796BF5ACABEA67659A437
        Validity
            Not Before: May  6 14:04:15 2024 GMT
            Not After : May  5 14:09:15 2025 GMT
        Subject: CN=264F4926F3E3337C03484EEBA1E3D059932A64D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:97:c8:b8:d5:ff:2c:42:ea:b9:fd:70:e7:
                    f9:19:0c:f8:a1:5f:4a:5b:6e:b8:cd:8d:33:9e:c5:
                    a1:69:75:47:4e:34:f6:9f:4b:b8:2b:5c:6b:44:ac:
                    1f:5a:99:04:f8:1f:4b:e8:bb:9b:03:28:67:37:7e:
                    0c:2a:d6:16:7f:83:a0:50:5d:66:36:a7:81:bd:88:
                    f1:aa:10:e9:e0:9d:1e:df:5e:09:0d:1f:0f:30:d8:
                    72:e7:f4:2e:78:ee:6e:ab:44:bf:d5:d2:a9:75:b5:
                    3d:14:b5:30:e2:3b:d1:ea:26:6b:f7:2f:d3:c6:34:
                    b8:04:e3:61:88:24:4f:ba:94:b6:c5:34:d9:75:38:
                    8f:6c:29:15:a8:b8:c1:3b:14:69:ff:8b:31:73:1b:
                    20:96:99:29:c6:00:42:e4:1f:b2:b4:88:94:82:99:
                    65:bc:72:2f:f2:c2:39:5d:2f:1e:80:ef:7f:dd:af:
                    9d:d4:36:28:2d:8d:53:85:48:72:6e:7d:71:a7:dc:
                    cd:b1:fe:d9:fb:9d:f3:1c:fc:10:d6:3e:fc:07:7e:
                    97:af:2a:43:ff:58:82:cf:d5:94:7b:38:9f:e7:98:
                    44:16:21:8c:68:a4:33:51:42:db:46:d8:32:48:03:
                    0d:e7:1b:c4:b7:1c:f1:c9:4c:a6:ff:58:ff:04:97:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:49:26:F3:E3:33:7C:03:48:4E:EB:A1:E3:D0:59:93:2A:64:D7
            X509v3 Authority Key Identifier:
                keyid:EF:EC:FF:06:B5:67:33:63:35:B7:96:BF:5A:CA:BE:A6:76:59:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/EFECFF06B567336335B796BF5ACABEA67659A437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFECFF06B567336335B796BF5ACABEA67659A437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ayoo3qWfo8vDpMcgCGFebJFgrBhWPPywgVeacZzmaaJN/0/34352e3136352e3133352e302f32342d3234203d3e20323638363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:65:d0:23:40:43:cd:28:29:30:e4:06:97:9f:04:f7:c1:2f:
         65:eb:fe:61:f7:a3:dc:8d:2a:48:a9:20:14:79:d5:cb:fe:56:
         ef:fa:5f:0a:85:98:50:0a:7c:c5:ad:24:cb:4f:20:ef:ce:29:
         f3:a0:8e:19:e7:bc:04:24:43:53:76:3f:89:69:fc:0d:c8:70:
         bf:f2:b5:c4:cc:70:6f:cd:3c:15:f7:d2:53:c9:e7:da:06:6d:
         47:9c:a6:fd:a2:19:c1:16:3c:9a:79:73:ec:36:ae:fe:66:e2:
         e5:2d:ca:02:65:d9:40:b0:0c:a7:98:3c:0f:5c:0d:be:54:4a:
         5c:72:7a:8a:df:d0:8a:db:18:29:5f:dd:98:ba:37:2f:c5:b9:
         6b:9a:a1:b6:79:62:ed:8b:34:f0:32:d7:28:6f:3d:c5:9e:d7:
         fb:f8:d1:9e:0d:58:90:38:d8:12:ee:5e:1b:42:ae:44:1d:36:
         97:ed:80:0c:57:c4:27:13:12:61:20:c8:cb:6e:12:06:c4:44:
         7f:b9:12:a5:3c:49:1a:2e:0c:dc:27:b6:fb:fe:cb:c9:8e:e0:
         46:29:2c:3b:01:15:c4:b7:fe:c7:8c:0b:f6:3d:0c:a7:ec:5e:
         85:4e:cb:dc:68:83:2d:e3:ca:ce:e9:a8:39:02:84:15:0a:a7:
         25:54:9f:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQs+BxnqO4PjtkptvBe0ECnzKV2owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZFQ0ZGMDZCNTY3MzM2MzM1Qjc5NkJGNUFDQUJFQTY3
NjU5QTQzNzAeFw0yNDA1MDYxNDA0MTVaFw0yNTA1MDUxNDA5MTVaMDMxMTAvBgNV
BAMTKDI2NEY0OTI2RjNFMzMzN0MwMzQ4NEVFQkExRTNEMDU5OTMyQTY0RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFZfIuNX/LELquf1w5/kZDPih
X0pbbrjNjTOexaFpdUdONPafS7grXGtErB9amQT4H0vou5sDKGc3fgwq1hZ/g6BQ
XWY2p4G9iPGqEOngnR7fXgkNHw8w2HLn9C547m6rRL/V0ql1tT0UtTDiO9HqJmv3
L9PGNLgE42GIJE+6lLbFNNl1OI9sKRWouME7FGn/izFzGyCWmSnGAELkH7K0iJSC
mWW8ci/ywjldLx6A73/dr53UNigtjVOFSHJufXGn3M2x/tn7nfMc/BDWPvwHfpev
KkP/WILP1ZR7OJ/nmEQWIYxopDNRQttG2DJIAw3nG8S3HPHJTKb/WP8El2GxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJk9JJvPjM3wDSE7roePQWZMqZNcwHwYDVR0j
BBgwFoAU7+z/BrVnM2M1t5a/Wsq+pnZZpDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlvbzNxV2ZvOHZEcE1jZ0NHRmViSkZnckJoV1BQeXdnVmVhY1p6bWFh
Sk4vMC9FRkVDRkYwNkI1NjczMzYzMzVCNzk2QkY1QUNBQkVBNjc2NTlBNDM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGRUNGRjA2QjU2NzMzNjMz
NUI3OTZCRjVBQ0FCRUE2NzY1OUE0MzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5b28zcVdmbzh2RHBNY2dDR0ZlYkpGZ3JCaFdQUHl3Z1ZlYWNaem1hYUpOLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYcwDQYJKoZIhvcNAQELBQADggEBAJdl0CNA
Q80oKTDkBpefBPfBL2Xr/mH3o9yNKkipIBR51cv+Vu/6XwqFmFAKfMWtJMtPIO/O
KfOgjhnnvAQkQ1N2P4lp/A3IcL/ytcTMcG/NPBX30lPJ59oGbUecpv2iGcEWPJp5
c+w2rv5m4uUtygJl2UCwDKeYPA9cDb5USlxyeorf0IrbGClf3Zi6Ny/FuWuaobZ5
Yu2LNPAy1yhvPcWe1/v40Z4NWJA42BLuXhtCrkQdNpftgAxXxCcTEmEgyMtuEgbE
RH+5EqU8SRouDNwntvv+y8mO4EYpLDsBFcS3/seMC/Y9DKfsXoVOy9xogy3jys7p
qDkChBUKpyVUn+M=
-----END CERTIFICATE-----
Generated at Sun Aug 25 05:06:07 2024 by rpki-client on console-ams.rpki-client.org