Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/34352e3138392e3232302e302f32322d3234203d3e20323639363135.roa
File:                     34352e3138392e3232302e302f32322d3234203d3e20323639363135.roa (raw, json)
Hash identifier:          taYQn5qpnhUvS40duB7uE2b0V98eKxgPhRcMpVx1mm8=
Subject key identifier:   65:98:BC:0B:0F:15:F0:06:90:D2:E8:D2:90:3F:3E:11:75:B1:18:D6
Certificate issuer:       /CN=1FE6BE1E801100262206EC007E7FEB4AD323AA0C
Certificate serial:       5EC74CF36136BF5291032660B48844E2B59CE4C5
Authority key identifier: 1F:E6:BE:1E:80:11:00:26:22:06:EC:00:7E:7F:EB:4A:D3:23:AA:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FE6BE1E801100262206EC007E7FEB4AD323AA0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/34352e3138392e3232302e302f32322d3234203d3e20323639363135.roa
Signing time:             Wed 21 Aug 2024 09:05:28 +0000
ROA not before:           Wed 21 Aug 2024 09:00:28 +0000
ROA not after:            Wed 20 Aug 2025 09:05:28 +0000
asID:                     269615
IP address blocks:        45.189.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c7:4c:f3:61:36:bf:52:91:03:26:60:b4:88:44:e2:b5:9c:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FE6BE1E801100262206EC007E7FEB4AD323AA0C
        Validity
            Not Before: Aug 21 09:00:28 2024 GMT
            Not After : Aug 20 09:05:28 2025 GMT
        Subject: CN=6598BC0B0F15F00690D2E8D2903F3E1175B118D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:7b:56:61:e4:19:89:12:19:6e:5d:52:e0:
                    a9:85:7f:42:fd:20:cb:2f:aa:f8:ee:5b:0a:74:42:
                    96:f3:b5:c2:ee:d4:a2:26:54:fd:cb:1e:dd:ac:1c:
                    7a:fa:9b:30:09:de:1a:27:12:1d:84:08:ed:18:24:
                    09:44:b7:90:08:a4:d9:bd:31:98:71:75:7c:a2:97:
                    fa:33:1c:2d:99:1b:b0:f3:76:32:90:db:98:16:f9:
                    78:6e:f5:ab:bd:cc:69:e7:50:d1:cc:f7:be:fb:db:
                    be:0f:67:74:16:27:c9:bb:3f:43:37:69:c2:71:38:
                    b7:91:64:6e:55:b1:da:19:bb:20:33:63:7d:7f:80:
                    b8:72:10:b5:88:c7:2b:b6:3e:01:5d:59:09:2f:f5:
                    fa:ed:14:20:10:23:4b:b2:9a:ae:cf:87:df:85:ca:
                    61:e3:6a:e8:4a:9a:11:ab:76:93:2a:7f:c0:8c:80:
                    e0:f8:4e:62:84:e3:66:78:a6:a2:73:95:b2:f9:ef:
                    80:41:e7:85:3b:24:de:ba:35:10:47:57:20:e5:ad:
                    5b:09:54:41:df:f8:f2:0d:fa:7e:1e:a1:29:19:0f:
                    6f:f3:42:c5:d5:94:10:a6:d3:03:48:32:04:fc:1f:
                    99:23:d3:d7:77:7f:1b:06:e3:20:08:e2:9b:99:ac:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:98:BC:0B:0F:15:F0:06:90:D2:E8:D2:90:3F:3E:11:75:B1:18:D6
            X509v3 Authority Key Identifier:
                keyid:1F:E6:BE:1E:80:11:00:26:22:06:EC:00:7E:7F:EB:4A:D3:23:AA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/1FE6BE1E801100262206EC007E7FEB4AD323AA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FE6BE1E801100262206EC007E7FEB4AD323AA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BWFkvkfDw6CgpBTYs6jCUGkZvXhxS13evTj1fbgDuYPw/0/34352e3138392e3232302e302f32322d3234203d3e20323639363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:21:e6:14:9c:cb:3c:a5:70:67:d7:d7:a6:ed:88:ac:f3:a3:
         b6:da:f6:b4:6d:26:c5:5a:ba:1a:21:e8:d8:65:fa:03:4c:00:
         d9:a7:2c:35:4c:86:e8:5c:a7:7b:c5:36:32:44:a0:a2:7e:2a:
         37:82:5e:57:15:e5:cb:50:2b:c1:da:d1:b1:44:55:6e:d9:49:
         5c:66:fb:c4:57:09:76:52:58:09:6e:0b:b9:40:1d:cd:db:86:
         cf:d1:47:51:8e:fa:8a:12:ab:25:08:67:42:ae:45:6e:5b:7c:
         52:3c:36:dd:d5:ae:c2:38:06:fd:6e:6c:5d:f7:14:be:4c:cb:
         5a:18:32:78:3f:5c:1d:83:da:85:78:1e:4d:6c:3c:63:38:c9:
         1d:a5:79:d1:e1:49:28:d3:95:97:ed:d9:33:a1:41:48:98:64:
         f9:5c:7b:bb:b5:b5:f1:68:db:42:bf:83:18:9a:74:f8:b5:c7:
         de:88:fb:1e:d8:93:a1:e8:dd:c3:3d:17:32:c0:bb:bb:ad:e8:
         25:ea:d8:e6:62:c6:22:13:fc:22:6b:b4:5d:d7:43:11:2c:ac:
         70:99:5a:f9:60:21:88:a9:86:fb:f1:66:10:9e:a6:1b:fc:55:
         90:31:0c:54:3c:f3:c2:87:f0:51:80:01:39:e9:c2:d2:39:79:
         be:36:1e:a5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXsdM82E2v1KRAyZgtIhE4rWc5MUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZFNkJFMUU4MDExMDAyNjIyMDZFQzAwN0U3RkVCNEFE
MzIzQUEwQzAeFw0yNDA4MjEwOTAwMjhaFw0yNTA4MjAwOTA1MjhaMDMxMTAvBgNV
BAMTKDY1OThCQzBCMEYxNUYwMDY5MEQyRThEMjkwM0YzRTExNzVCMTE4RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4intWYeQZiRIZbl1S4KmFf0L9
IMsvqvjuWwp0QpbztcLu1KImVP3LHt2sHHr6mzAJ3honEh2ECO0YJAlEt5AIpNm9
MZhxdXyil/ozHC2ZG7DzdjKQ25gW+Xhu9au9zGnnUNHM9777274PZ3QWJ8m7P0M3
acJxOLeRZG5VsdoZuyAzY31/gLhyELWIxyu2PgFdWQkv9frtFCAQI0uymq7Ph9+F
ymHjauhKmhGrdpMqf8CMgOD4TmKE42Z4pqJzlbL574BB54U7JN66NRBHVyDlrVsJ
VEHf+PIN+n4eoSkZD2/zQsXVlBCm0wNIMgT8H5kj09d3fxsG4yAI4puZrE1VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZZi8Cw8V8AaQ0ujSkD8+EXWxGNYwHwYDVR0j
BBgwFoAUH+a+HoARACYiBuwAfn/rStMjqgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQldGa3ZrZkR3NkNncEJUWXM2akNVR2tadlhoeFMxM2V2VGoxZmJnRHVZ
UHcvMC8xRkU2QkUxRTgwMTEwMDI2MjIwNkVDMDA3RTdGRUI0QUQzMjNBQTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRTZCRTFFODAxMTAwMjYy
MjA2RUMwMDdFN0ZFQjRBRDMyM0FBMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JXRmt2a2ZEdzZDZ3BCVFlzNmpDVUdrWnZYaHhTMTNldlRqMWZiZ0R1WVB3LzAv
MzQzNTJlMzEzODM5MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItvdwwDQYJKoZIhvcNAQELBQADggEBABkh5hSc
yzylcGfX16btiKzzo7ba9rRtJsVauhoh6Nhl+gNMANmnLDVMhuhcp3vFNjJEoKJ+
KjeCXlcV5ctQK8Ha0bFEVW7ZSVxm+8RXCXZSWAluC7lAHc3bhs/RR1GO+ooSqyUI
Z0KuRW5bfFI8Nt3VrsI4Bv1ubF33FL5My1oYMng/XB2D2oV4Hk1sPGM4yR2ledHh
SSjTlZft2TOhQUiYZPlce7u1tfFo20K/gxiadPi1x96I+x7Yk6Ho3cM9FzLAu7ut
6CXq2OZixiIT/CJrtF3XQxEsrHCZWvlgIYiphvvxZhCephv8VZAxDFQ888KH8FGA
ATnpwtI5eb42HqU=
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org