Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135372e302f32342d3234203d3e20323639343939.roa
File:                     34352e3138362e3135372e302f32342d3234203d3e20323639343939.roa (raw, json)
Hash identifier:          4Hh0+UG9roAc6/0cX/TVyjfwWQi2PtX03WEYx/jM/eI=
Subject key identifier:   D6:E5:7B:07:A6:C0:C9:B9:60:FA:FB:E3:F9:1E:44:E2:6D:C5:F6:FE
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       1FBA717A08704F869905C7CD322E5249433FAB8A
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135372e302f32342d3234203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:14 +0000
ROA not before:           Thu 05 Sep 2024 19:32:14 +0000
ROA not after:            Thu 04 Sep 2025 19:37:14 +0000
asID:                     269499
IP address blocks:        45.186.157.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ba:71:7a:08:70:4f:86:99:05:c7:cd:32:2e:52:49:43:3f:ab:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:14 2024 GMT
            Not After : Sep  4 19:37:14 2025 GMT
        Subject: CN=D6E57B07A6C0C9B960FAFBE3F91E44E26DC5F6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:a2:86:59:2f:73:4f:7f:b5:79:ea:73:84:
                    85:6e:51:e3:80:2f:4c:36:80:b4:f9:8e:01:62:05:
                    ed:ab:15:76:12:7a:49:8b:61:0d:5b:68:52:49:44:
                    7b:60:80:fb:34:fe:8e:98:65:9c:3d:8c:27:45:8e:
                    ea:1f:ab:44:9e:49:b8:eb:68:68:bd:ab:fc:ce:51:
                    d0:81:1b:57:aa:38:a0:61:4b:c7:b7:58:0f:88:81:
                    29:4a:cb:ac:d2:9e:40:af:4a:87:ba:e6:33:30:5f:
                    40:58:b7:4f:12:96:fe:21:e7:05:71:71:c5:da:7b:
                    25:93:f6:e3:a8:17:01:be:1e:66:ea:51:1e:13:41:
                    0b:7e:cc:0a:7d:aa:88:7b:c4:04:1f:e6:07:11:b5:
                    54:f5:48:f0:54:6a:20:aa:39:aa:54:10:03:bd:2e:
                    92:39:f9:0d:a6:84:cb:c4:b7:ac:b4:63:57:d4:f5:
                    14:84:c9:3d:f1:d1:86:57:ad:16:7e:f6:37:57:ed:
                    cb:8b:8c:7c:34:66:3a:12:cb:69:c7:74:34:f4:30:
                    b2:63:74:d3:6a:0b:0e:b2:d4:e3:a2:88:28:2d:8e:
                    82:a7:8a:f2:b1:9e:89:2d:97:7a:d7:98:d0:e5:83:
                    f1:68:cb:d9:8c:0a:35:b1:6d:06:3f:ad:8f:ee:10:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E5:7B:07:A6:C0:C9:B9:60:FA:FB:E3:F9:1E:44:E2:6D:C5:F6:FE
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135372e302f32342d3234203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:4b:75:23:6b:88:66:db:56:d6:43:73:ff:05:b4:86:ee:
         42:74:49:7e:d5:67:4f:fa:c8:af:74:29:5c:c8:8f:d5:51:36:
         79:c8:8d:74:0f:af:60:24:c5:8b:09:cb:84:90:46:e7:28:76:
         e2:69:51:25:3b:50:bb:d0:24:0d:87:68:a0:8d:10:54:e8:c2:
         70:f9:ba:67:4f:5c:e3:98:5e:3c:d3:e1:02:4e:54:06:a2:26:
         f1:3a:d5:21:65:5b:2e:49:16:62:11:21:85:4d:41:9b:32:97:
         ee:0e:a4:ab:78:b0:e3:0b:1d:70:6f:9e:5f:e8:05:5b:41:ad:
         3e:cc:85:79:72:31:4d:6f:d0:eb:09:c0:ee:02:9a:b7:80:01:
         ff:84:31:bc:d9:d9:15:54:68:6a:04:c4:50:3d:6c:29:03:07:
         1e:2a:1f:76:14:cb:05:5a:29:2b:c1:da:ac:f7:33:32:44:3c:
         48:27:b4:e5:9f:6a:f5:f6:3f:83:d5:ef:25:2d:bc:f5:ea:dc:
         2d:c3:47:83:b5:a3:c2:89:22:b4:f9:04:a8:8b:cf:99:65:be:
         70:a9:69:cf:33:0e:9b:86:e3:1a:6c:9f:d0:a1:26:b9:35:be:
         01:82:0b:ec:93:1d:56:3f:10:bb:fa:ec:08:18:cb:83:5c:a8:
         70:75:98:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUH7pxeghwT4aZBcfNMi5SSUM/q4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGNjZENDMwODgxNkU3QjQ3RjY5MTJFQkJFNzUxMzU4
NUE1OUI5RDAeFw0yNDA5MDUxOTMyMTRaFw0yNTA5MDQxOTM3MTRaMDMxMTAvBgNV
BAMTKEQ2RTU3QjA3QTZDMEM5Qjk2MEZBRkJFM0Y5MUU0NEUyNkRDNUY2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2KKGWS9zT3+1eepzhIVuUeOA
L0w2gLT5jgFiBe2rFXYSekmLYQ1baFJJRHtggPs0/o6YZZw9jCdFjuofq0SeSbjr
aGi9q/zOUdCBG1eqOKBhS8e3WA+IgSlKy6zSnkCvSoe65jMwX0BYt08Slv4h5wVx
ccXaeyWT9uOoFwG+HmbqUR4TQQt+zAp9qoh7xAQf5gcRtVT1SPBUaiCqOapUEAO9
LpI5+Q2mhMvEt6y0Y1fU9RSEyT3x0YZXrRZ+9jdX7cuLjHw0ZjoSy2nHdDT0MLJj
dNNqCw6y1OOiiCgtjoKnivKxnoktl3rXmNDlg/Foy9mMCjWxbQY/rY/uECrNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1uV7B6bAyblg+vvj+R5E4m3F9v4wHwYDVR0j
BBgwFoAUIfZtQwiBbntH9pEuu+dRNYWlm50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNkeW85TW1CcHFoaWJkNTg1Qmd6THkxczRmQ1dMMjdRM1BkakJMZ21B
dTEvMS8yMUY2NkQ0MzA4ODE2RTdCNDdGNjkxMkVCQkU3NTEzNTg1QTU5QjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjY2RDQzMDg4MTZFN0I0
N0Y2OTEyRUJCRTc1MTM1ODVBNTlCOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTZHlvOU1tQnBxaGliZDU4NUJnekx5MXM0ZkNXTDI3UTNQZGpCTGdtQXUxLzEv
MzQzNTJlMzEzODM2MmUzMTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtup0wDQYJKoZIhvcNAQELBQADggEBACqsS3Uj
a4hm21bWQ3P/BbSG7kJ0SX7VZ0/6yK90KVzIj9VRNnnIjXQPr2AkxYsJy4SQRuco
duJpUSU7ULvQJA2HaKCNEFTownD5umdPXOOYXjzT4QJOVAaiJvE61SFlWy5JFmIR
IYVNQZsyl+4OpKt4sOMLHXBvnl/oBVtBrT7MhXlyMU1v0OsJwO4CmreAAf+EMbzZ
2RVUaGoExFA9bCkDBx4qH3YUywVaKSvB2qz3MzJEPEgntOWfavX2P4PV7yUtvPXq
3C3DR4O1o8KJIrT5BKiLz5llvnCpac8zDpuG4xpsn9ChJrk1vgGCC+yTHVY/ELv6
7AgYy4NcqHB1mLA=
-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org