Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32342d3234203d3e20323639343939.roa
File:                     34352e3138362e3135382e302f32342d3234203d3e20323639343939.roa (raw, json)
Hash identifier:          69S1+Rg9ZuXg/syJTsNRlt+jybjLtDmqBCvh/5/9FeM=
Subject key identifier:   61:62:AA:69:6F:92:2A:06:98:07:FE:6F:D5:89:76:20:E8:90:08:86
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       16DD401FCD31ACCF16F204AD1FD1E9918393CCD1
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32342d3234203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:13 +0000
ROA not before:           Thu 05 Sep 2024 19:32:13 +0000
ROA not after:            Thu 04 Sep 2025 19:37:13 +0000
asID:                     269499
IP address blocks:        45.186.158.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:dd:40:1f:cd:31:ac:cf:16:f2:04:ad:1f:d1:e9:91:83:93:cc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:13 2024 GMT
            Not After : Sep  4 19:37:13 2025 GMT
        Subject: CN=6162AA696F922A069807FE6FD5897620E8900886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:2e:60:f6:88:4a:d8:c0:9d:86:a2:2e:6e:
                    f4:3e:6f:2d:bd:05:80:fa:e5:8f:88:bc:6b:09:5a:
                    ef:ed:8e:af:87:ea:c4:45:43:93:a6:a7:a9:6f:65:
                    54:c3:a3:51:59:59:a3:27:a3:bb:f3:c4:d4:e0:22:
                    41:b7:ec:c5:00:55:61:cf:87:9e:77:04:bc:3d:db:
                    92:e8:92:84:90:e6:a9:ca:5d:f0:f6:68:52:9d:07:
                    6f:14:09:d6:2c:05:8d:d3:55:c8:db:5b:0d:64:e8:
                    05:e6:a4:7e:44:1c:90:72:07:a8:cf:0d:2f:4b:b1:
                    43:71:ed:94:30:97:45:a5:62:48:b2:8d:d6:a8:fe:
                    f1:49:30:ec:b8:64:41:b7:2f:88:85:84:b8:a2:ad:
                    58:a3:50:19:57:d0:0d:e6:0d:ba:0b:5c:38:c0:d3:
                    44:a0:cc:19:b4:63:50:d7:40:f6:31:0d:f2:a4:67:
                    30:e0:11:b7:6d:06:63:43:70:21:e8:81:e5:32:76:
                    e4:68:26:15:13:f3:02:f3:bd:ea:d6:b1:fc:65:8d:
                    85:d4:a8:0a:54:79:00:5e:f4:cb:c7:76:8a:3e:0c:
                    31:db:6a:60:17:79:3a:83:b1:7f:a4:18:45:c0:ac:
                    a1:1c:03:69:e2:d2:48:ed:7a:47:be:41:ba:29:39:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:AA:69:6F:92:2A:06:98:07:FE:6F:D5:89:76:20:E8:90:08:86
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32342d3234203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:af:cd:39:d9:67:4b:db:83:bb:f0:ca:a2:f1:92:15:c0:3f:
         c3:07:83:9b:0b:db:c9:8a:f9:3c:dc:81:81:59:9d:42:c0:7c:
         03:dc:a3:68:7f:e0:37:dd:f8:ca:5c:0f:a6:10:aa:e8:39:1e:
         8d:9a:af:4e:67:da:85:43:e9:a5:6f:61:1b:dd:78:d8:5f:6e:
         d5:20:e2:ba:d0:9b:76:b9:db:99:ae:7d:b0:47:35:3e:ab:73:
         76:76:01:ef:3f:64:c8:17:9a:3a:29:5b:eb:24:22:59:57:25:
         b1:6f:7d:6d:7f:c5:aa:aa:3c:ea:9f:fb:b4:49:77:b7:2f:98:
         29:49:6c:ab:81:da:84:58:60:d0:50:9a:96:e8:21:2c:eb:4c:
         a6:7d:c5:d8:c8:8d:eb:92:27:42:c7:16:4b:33:d6:49:af:e8:
         56:78:95:8d:ae:b3:d4:a0:78:24:17:31:f1:98:be:90:94:99:
         60:f2:a3:c9:01:bc:27:9e:4f:29:99:c1:b1:f6:63:ba:4c:1e:
         d6:6f:15:e9:12:b0:02:c8:76:63:9e:67:f2:84:4e:31:22:2c:
         77:53:72:de:93:c1:b5:eb:ad:b9:a1:50:49:fa:0a:b6:ea:a8:
         38:c3:3e:fe:c1:ae:c0:2a:39:ef:d7:88:17:c2:eb:e3:40:f6:
         92:85:cd:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFt1AH80xrM8W8gStH9HpkYOTzNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFGNjZENDMwODgxNkU3QjQ3RjY5MTJFQkJFNzUxMzU4
NUE1OUI5RDAeFw0yNDA5MDUxOTMyMTNaFw0yNTA5MDQxOTM3MTNaMDMxMTAvBgNV
BAMTKDYxNjJBQTY5NkY5MjJBMDY5ODA3RkU2RkQ1ODk3NjIwRTg5MDA4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZoS5g9ohK2MCdhqIubvQ+by29
BYD65Y+IvGsJWu/tjq+H6sRFQ5Omp6lvZVTDo1FZWaMno7vzxNTgIkG37MUAVWHP
h553BLw925LokoSQ5qnKXfD2aFKdB28UCdYsBY3TVcjbWw1k6AXmpH5EHJByB6jP
DS9LsUNx7ZQwl0WlYkiyjdao/vFJMOy4ZEG3L4iFhLiirVijUBlX0A3mDboLXDjA
00SgzBm0Y1DXQPYxDfKkZzDgEbdtBmNDcCHogeUyduRoJhUT8wLzverWsfxljYXU
qApUeQBe9MvHdoo+DDHbamAXeTqDsX+kGEXArKEcA2ni0kjteke+QbopOWMDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYWKqaW+SKgaYB/5v1Yl2IOiQCIYwHwYDVR0j
BBgwFoAUIfZtQwiBbntH9pEuu+dRNYWlm50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNkeW85TW1CcHFoaWJkNTg1Qmd6THkxczRmQ1dMMjdRM1BkakJMZ21B
dTEvMS8yMUY2NkQ0MzA4ODE2RTdCNDdGNjkxMkVCQkU3NTEzNTg1QTU5QjlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIxRjY2RDQzMDg4MTZFN0I0
N0Y2OTEyRUJCRTc1MTM1ODVBNTlCOUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTZHlvOU1tQnBxaGliZDU4NUJnekx5MXM0ZkNXTDI3UTNQZGpCTGdtQXUxLzEv
MzQzNTJlMzEzODM2MmUzMTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtup4wDQYJKoZIhvcNAQELBQADggEBAJWvzTnZ
Z0vbg7vwyqLxkhXAP8MHg5sL28mK+TzcgYFZnULAfAPco2h/4Dfd+MpcD6YQqug5
Ho2ar05n2oVD6aVvYRvdeNhfbtUg4rrQm3a525mufbBHNT6rc3Z2Ae8/ZMgXmjop
W+skIllXJbFvfW1/xaqqPOqf+7RJd7cvmClJbKuB2oRYYNBQmpboISzrTKZ9xdjI
jeuSJ0LHFksz1kmv6FZ4lY2us9SgeCQXMfGYvpCUmWDyo8kBvCeeTymZwbH2Y7pM
HtZvFekSsALIdmOeZ/KETjEiLHdTct6TwbXrrbmhUEn6CrbqqDjDPv7BrsAqOe/X
iBfC6+NA9pKFzZI=
-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:12 2024 by rpki-client on console-fra.rpki-client.org