Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa
File:                     34352e3138342e3230342e302f32322d3234203d3e203533303133.roa (raw, json)
Hash identifier:          jBiim+2iTOJn3GTF0j7CwA5uET6YjJYRx76Hn7q49BM=
Subject key identifier:   A8:88:3F:5F:C1:3F:3F:FE:2F:C8:AE:9C:AB:4D:FD:2D:1E:2F:8B:87
Certificate issuer:       /CN=05749835F92CCEEF3F9BB76E98EEAC180176BE4A
Certificate serial:       2973A7575DBB963D34C810C194B4207859F03626
Authority key identifier: 05:74:98:35:F9:2C:CE:EF:3F:9B:B7:6E:98:EE:AC:18:01:76:BE:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa
Signing time:             Wed 03 Apr 2024 20:00:15 +0000
ROA not before:           Wed 03 Apr 2024 19:55:15 +0000
ROA not after:            Wed 02 Apr 2025 20:00:15 +0000
asID:                     53013
IP address blocks:        45.184.204.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:73:a7:57:5d:bb:96:3d:34:c8:10:c1:94:b4:20:78:59:f0:36:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05749835F92CCEEF3F9BB76E98EEAC180176BE4A
        Validity
            Not Before: Apr  3 19:55:15 2024 GMT
            Not After : Apr  2 20:00:15 2025 GMT
        Subject: CN=A8883F5FC13F3FFE2FC8AE9CAB4DFD2D1E2F8B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:f2:56:15:7c:3d:4a:d8:7a:d6:d0:be:91:
                    4a:69:f9:db:49:59:80:40:04:8e:72:cd:09:9b:4c:
                    6b:49:a3:24:06:c0:a0:88:1c:6c:07:fc:2a:b5:3d:
                    db:49:43:8e:70:8b:8c:5f:4b:68:54:3a:5b:d8:e6:
                    28:36:29:ec:d3:3e:69:de:1d:34:e4:00:c7:a0:38:
                    a6:f0:d3:3b:7b:10:f6:39:92:82:0f:46:7b:12:70:
                    26:15:f2:05:32:83:5f:9e:36:c4:e6:64:65:2d:93:
                    98:c0:ff:51:c2:3a:63:22:df:62:0a:1a:27:fb:f1:
                    37:2b:2e:ea:53:26:e3:a4:d4:85:23:b4:6f:e1:84:
                    97:b2:ee:79:cf:8f:48:c2:84:97:fc:6e:6d:90:c7:
                    07:01:c5:17:f6:f9:57:b9:53:26:d3:6d:e7:b0:0b:
                    72:57:17:49:dd:b2:ce:0c:04:8d:5a:85:ce:89:f1:
                    0c:72:de:87:b9:9f:3f:3d:73:25:c4:06:b9:cf:6b:
                    48:18:48:e9:5e:ce:a7:14:39:4b:37:52:6f:cf:9e:
                    d6:be:38:3e:3c:bd:0a:d2:c0:18:eb:e8:ce:39:b6:
                    e0:98:ef:0a:79:af:68:c0:52:22:1d:39:88:8f:23:
                    1e:fd:57:3c:27:4c:a4:06:78:2f:33:70:03:c5:48:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:3F:5F:C1:3F:3F:FE:2F:C8:AE:9C:AB:4D:FD:2D:1E:2F:8B:87
            X509v3 Authority Key Identifier:
                keyid:05:74:98:35:F9:2C:CE:EF:3F:9B:B7:6E:98:EE:AC:18:01:76:BE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d4:c8:e3:94:d5:68:c5:a3:f6:66:c4:62:cb:a4:b1:0f:04:
         d1:a6:65:7c:b5:8f:6a:85:eb:a6:9d:53:c2:a3:cd:16:2b:27:
         09:fb:1e:38:95:42:49:89:a8:4d:b8:2a:69:84:64:7e:e8:b8:
         20:59:40:89:58:ab:f0:ad:5c:5e:c7:41:f8:c2:ea:11:5c:d9:
         06:23:7f:ce:d0:ea:e0:17:12:b4:6e:2a:1c:eb:38:ce:73:90:
         f3:96:d8:f0:75:0f:db:93:28:70:34:40:8e:78:f1:eb:7b:9a:
         45:04:b6:0f:86:ff:e8:86:87:d6:2f:83:91:6a:31:c3:17:bc:
         70:af:5e:f9:43:d1:6b:e8:70:27:25:ef:97:86:5a:b3:6a:d8:
         a2:7a:f0:f6:09:b2:ff:1d:26:6b:39:1f:60:5a:f7:4f:7b:ee:
         d7:09:8e:51:ec:25:05:98:74:9b:a1:d9:1a:c5:f3:f0:de:2e:
         e3:f2:ab:45:3a:8e:41:3f:3f:9f:56:d1:06:38:5c:e8:c7:ce:
         a0:16:d3:1f:98:70:32:f5:06:c9:e4:07:f3:d4:ea:44:f3:6f:
         fe:28:ec:84:95:f0:5c:fa:e7:d8:77:21:78:33:3e:47:07:ad:
         43:21:bd:82:be:b8:d0:3d:fd:63:2d:23:2a:99:41:1d:25:74:
         01:e8:db:12
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKXOnV127lj00yBDBlLQgeFnwNiYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU3NDk4MzVGOTJDQ0VFRjNGOUJCNzZFOThFRUFDMTgw
MTc2QkU0QTAeFw0yNDA0MDMxOTU1MTVaFw0yNTA0MDIyMDAwMTVaMDMxMTAvBgNV
BAMTKEE4ODgzRjVGQzEzRjNGRkUyRkM4QUU5Q0FCNERGRDJEMUUyRjhCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB//JWFXw9Sth61tC+kUpp+dtJ
WYBABI5yzQmbTGtJoyQGwKCIHGwH/Cq1PdtJQ45wi4xfS2hUOlvY5ig2KezTPmne
HTTkAMegOKbw0zt7EPY5koIPRnsScCYV8gUyg1+eNsTmZGUtk5jA/1HCOmMi32IK
Gif78TcrLupTJuOk1IUjtG/hhJey7nnPj0jChJf8bm2QxwcBxRf2+Ve5UybTbeew
C3JXF0ndss4MBI1ahc6J8Qxy3oe5nz89cyXEBrnPa0gYSOlezqcUOUs3Um/Pnta+
OD48vQrSwBjr6M45tuCY7wp5r2jAUiIdOYiPIx79VzwnTKQGeC8zcAPFSEslAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqIg/X8E/P/4vyK6cq039LR4vi4cwHwYDVR0j
BBgwFoAUBXSYNfkszu8/m7dumO6sGAF2vkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlVGYnVnVEJxU3YyY1FZRG5MOWR6bjE5MmNNTFgxTUJZUGtpQkRlY29W
Uk0vMS8wNTc0OTgzNUY5MkNDRUVGM0Y5QkI3NkU5OEVFQUMxODAxNzZCRTRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1NzQ5ODM1RjkyQ0NFRUYz
RjlCQjc2RTk4RUVBQzE4MDE3NkJFNEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JVRmJ1Z1RCcVN2MmNRWURuTDlkem4xOTJjTUxYMU1CWVBraUJEZWNvVlJNLzEv
MzQzNTJlMzEzODM0MmUzMjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzAzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbjMMA0GCSqGSIb3DQEBCwUAA4IBAQAr1MjjlNVo
xaP2ZsRiy6SxDwTRpmV8tY9qheumnVPCo80WKycJ+x44lUJJiahNuCpphGR+6Lgg
WUCJWKvwrVxex0H4wuoRXNkGI3/O0OrgFxK0bioc6zjOc5DzltjwdQ/bkyhwNECO
ePHre5pFBLYPhv/ohofWL4ORajHDF7xwr175Q9Fr6HAnJe+XhlqzatiievD2CbL/
HSZrOR9gWvdPe+7XCY5R7CUFmHSbodkaxfPw3i7j8qtFOo5BPz+fVtEGOFzox86g
FtMfmHAy9QbJ5Afz1OpE82/+KOyElfBc+ufYdyF4Mz5HB61DIb2CvrjQPf1jLSMq
mUEdJXQB6NsS
-----END CERTIFICATE-----
Generated at Sat Aug 10 12:53:45 2024 by rpki-client on console-fra.rpki-client.org