Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/34352e3138342e3232302e302f32322d3234203d3e20323639353139.roa
File:                     34352e3138342e3232302e302f32322d3234203d3e20323639353139.roa (raw, json)
Hash identifier:          RYYW8UQp3oRk3c2eWMXoIZUx4juBYkcNeOSnbsMl/E4=
Subject key identifier:   7D:E9:20:AC:88:A2:D0:9F:1B:A5:84:BE:AC:1B:F9:BC:C2:A9:F8:9B
Certificate issuer:       /CN=3B3189B227E3E6004FAEF8E11BEB169F2D24116B
Certificate serial:       19B20B88C581AEE9DAAFD3B6E85D4E5064A28D9E
Authority key identifier: 3B:31:89:B2:27:E3:E6:00:4F:AE:F8:E1:1B:EB:16:9F:2D:24:11:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/34352e3138342e3232302e302f32322d3234203d3e20323639353139.roa
Signing time:             Thu 11 Apr 2024 21:53:55 +0000
ROA not before:           Thu 11 Apr 2024 21:48:55 +0000
ROA not after:            Thu 10 Apr 2025 21:53:55 +0000
asID:                     269519
IP address blocks:        45.184.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b2:0b:88:c5:81:ae:e9:da:af:d3:b6:e8:5d:4e:50:64:a2:8d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3189B227E3E6004FAEF8E11BEB169F2D24116B
        Validity
            Not Before: Apr 11 21:48:55 2024 GMT
            Not After : Apr 10 21:53:55 2025 GMT
        Subject: CN=7DE920AC88A2D09F1BA584BEAC1BF9BCC2A9F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:8a:db:d3:8a:02:30:8e:74:0c:fc:2b:4d:
                    3f:be:b5:ca:08:c6:ce:5e:08:93:5d:0b:ac:ef:39:
                    4a:d7:3e:84:aa:80:5f:ef:d1:ec:36:04:f0:dc:a4:
                    93:02:db:ee:66:17:97:bf:b8:a4:57:60:18:2e:e0:
                    dd:24:6e:7c:00:8c:4f:66:25:a5:af:8c:c3:2f:11:
                    34:d0:a1:ce:a8:fc:1b:11:95:78:25:61:38:8c:1b:
                    7d:db:9e:4b:b3:f1:5c:7a:17:3f:43:34:a7:b5:aa:
                    c7:ef:ad:99:1b:c2:9c:cd:64:8b:65:df:1c:1b:15:
                    fd:30:e6:66:62:f3:c6:fd:d1:a7:99:28:b8:5a:e3:
                    e9:3a:90:de:06:be:51:91:d4:44:a1:df:7a:07:d8:
                    22:15:34:93:27:ab:fc:cd:51:3a:c5:c0:43:f4:25:
                    07:7f:1b:c3:5d:b6:a7:7f:6a:c2:3c:7c:a8:d0:24:
                    83:07:fc:84:4e:15:61:f5:7f:94:b6:1b:06:dc:b3:
                    18:30:1e:d4:6c:e3:f9:c9:a7:fe:27:0e:ad:8a:de:
                    ef:1a:a8:26:80:97:51:84:2b:42:f5:f2:98:de:00:
                    c4:54:37:85:04:23:25:36:88:5b:48:64:1e:67:57:
                    4f:74:93:68:ef:b9:03:40:d4:9f:49:eb:5b:49:98:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E9:20:AC:88:A2:D0:9F:1B:A5:84:BE:AC:1B:F9:BC:C2:A9:F8:9B
            X509v3 Authority Key Identifier:
                keyid:3B:31:89:B2:27:E3:E6:00:4F:AE:F8:E1:1B:EB:16:9F:2D:24:11:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B3189B227E3E6004FAEF8E11BEB169F2D24116B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BG59FRTeXe574eVmSoko88KvWh8HAEmf1WbzK3HkmrNY/0/34352e3138342e3232302e302f32322d3234203d3e20323639353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:4b:3c:17:01:45:3c:06:4e:cc:e3:92:a6:cb:24:9f:1a:74:
         9a:94:9c:88:10:1a:ee:93:05:f4:89:bc:6a:06:66:e7:d5:57:
         de:fe:73:8e:35:2b:a3:ea:51:2f:bd:e0:66:70:27:77:9a:0a:
         68:ad:be:94:37:5c:d8:e7:a9:84:aa:ff:c3:82:82:0d:3e:8b:
         41:5b:4d:a5:ba:fa:d1:ad:6e:85:f2:b1:ce:50:f6:af:90:7d:
         f7:a8:69:ab:74:7e:30:7a:bd:df:1a:50:8c:90:a9:d9:6c:40:
         a1:3a:cd:a9:7b:ac:6f:13:62:20:e8:6c:12:df:1c:e6:f3:74:
         d2:72:2a:7c:ea:80:21:c4:76:e4:2c:cb:9f:b6:0d:15:c1:cd:
         63:fc:f8:94:79:16:eb:2b:1a:b8:06:6c:31:2e:f6:83:b5:8c:
         ff:c3:d8:e2:e7:02:5b:14:d6:81:36:be:68:ba:c1:5b:92:a6:
         a0:10:00:aa:69:4e:30:3d:8d:bc:1b:f8:a6:27:6c:6a:4b:4d:
         1a:0e:de:9c:e3:2d:f4:58:f4:4c:b1:da:c8:be:a8:d2:b2:03:
         2e:02:93:80:9b:67:99:30:37:40:39:de:99:1d:d8:fe:b6:a7:
         84:4b:b4:73:f0:0f:25:40:ca:7d:50:ea:e7:fa:6b:c4:e0:50:
         06:a4:5e:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGbILiMWBrunar9O26F1OUGSijZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IzMTg5QjIyN0UzRTYwMDRGQUVGOEUxMUJFQjE2OUYy
RDI0MTE2QjAeFw0yNDA0MTEyMTQ4NTVaFw0yNTA0MTAyMTUzNTVaMDMxMTAvBgNV
BAMTKDdERTkyMEFDODhBMkQwOUYxQkE1ODRCRUFDMUJGOUJDQzJBOUY4OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNIrb04oCMI50DPwrTT++tcoI
xs5eCJNdC6zvOUrXPoSqgF/v0ew2BPDcpJMC2+5mF5e/uKRXYBgu4N0kbnwAjE9m
JaWvjMMvETTQoc6o/BsRlXglYTiMG33bnkuz8Vx6Fz9DNKe1qsfvrZkbwpzNZItl
3xwbFf0w5mZi88b90aeZKLha4+k6kN4GvlGR1ESh33oH2CIVNJMnq/zNUTrFwEP0
JQd/G8Ndtqd/asI8fKjQJIMH/IROFWH1f5S2GwbcsxgwHtRs4/nJp/4nDq2K3u8a
qCaAl1GEK0L18pjeAMRUN4UEIyU2iFtIZB5nV090k2jvuQNA1J9J61tJmJjjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfekgrIii0J8bpYS+rBv5vMKp+JswHwYDVR0j
BBgwFoAUOzGJsifj5gBPrvjhG+sWny0kEWswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkc1OUZSVGVYZTU3NGVWbVNva284OEt2V2g4SEFFbWYxV2J6SzNIa21y
TlkvMC8zQjMxODlCMjI3RTNFNjAwNEZBRUY4RTExQkVCMTY5RjJEMjQxMTZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCMzE4OUIyMjdFM0U2MDA0
RkFFRjhFMTFCRUIxNjlGMkQyNDExNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JHNTlGUlRlWGU1NzRlVm1Tb2tvODhLdldoOEhBRW1mMVdiekszSGttck5ZLzAv
MzQzNTJlMzEzODM0MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuNwwDQYJKoZIhvcNAQELBQADggEBANNLPBcB
RTwGTszjkqbLJJ8adJqUnIgQGu6TBfSJvGoGZufVV97+c441K6PqUS+94GZwJ3ea
CmitvpQ3XNjnqYSq/8OCgg0+i0FbTaW6+tGtboXysc5Q9q+Qffeoaat0fjB6vd8a
UIyQqdlsQKE6zal7rG8TYiDobBLfHObzdNJyKnzqgCHEduQsy5+2DRXBzWP8+JR5
FusrGrgGbDEu9oO1jP/D2OLnAlsU1oE2vmi6wVuSpqAQAKppTjA9jbwb+KYnbGpL
TRoO3pzjLfRY9Eyx2si+qNKyAy4Ck4CbZ5kwN0A53pkd2P62p4RLtHPwDyVAyn1Q
6uf6a8TgUAakXjg=
-----END CERTIFICATE-----
Generated at Sat Jul 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org