Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32322d3232203d3e20323636393734.roa
File:                     34352e3232352e3234342e302f32322d3232203d3e20323636393734.roa (raw, json)
Hash identifier:          kWWQYuZmIefCpSYPr/fvqNLHTuPLsGWymXUuhjiuIkE=
Subject key identifier:   CE:D2:20:4A:25:12:EF:CC:BC:42:00:F2:12:13:E0:D9:9F:3C:42:59
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       3C9556F5EE0920B45589AC9A127E0A78208EFA46
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32322d3232203d3e20323636393734.roa
Signing time:             Mon 09 Oct 2023 13:22:21 +0000
ROA not before:           Mon 09 Oct 2023 13:17:21 +0000
ROA not after:            Mon 07 Oct 2024 13:22:21 +0000
asID:                     266974
IP address blocks:        45.225.244.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:95:56:f5:ee:09:20:b4:55:89:ac:9a:12:7e:0a:78:20:8e:fa:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Oct  9 13:17:21 2023 GMT
            Not After : Oct  7 13:22:21 2024 GMT
        Subject: CN=CED2204A2512EFCCBC4200F21213E0D99F3C4259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:aa:ce:98:71:17:4b:e1:56:36:53:aa:dc:
                    ff:b1:7b:a9:a7:05:c0:fb:b7:f3:c1:cb:46:23:e5:
                    8e:c9:c8:8e:d9:20:92:a3:eb:85:f1:50:52:b6:0c:
                    49:55:99:f3:3e:6a:e4:7d:ec:c8:4f:8f:6d:32:f4:
                    53:be:83:fa:8b:09:74:08:62:88:cf:4d:1b:57:09:
                    28:68:87:60:0d:d1:8a:f8:73:36:fa:6b:35:7e:05:
                    ef:18:29:2a:34:04:2e:b2:2b:ef:27:d3:f8:fe:08:
                    6a:36:24:ae:ea:8a:7a:d9:a5:59:12:e5:d2:03:8b:
                    9d:fc:ed:60:a3:1d:9f:3e:57:1d:2c:ed:6b:b6:ed:
                    16:ae:82:45:1a:c9:ec:ea:1d:d9:6a:95:9e:99:7a:
                    4a:e1:30:dd:d7:72:b4:a8:ba:f9:c7:d9:2a:c6:3f:
                    9e:fe:23:57:49:1f:13:45:86:26:16:57:12:2a:43:
                    23:98:f4:50:cf:83:84:30:b2:af:0d:c6:b5:be:a9:
                    30:0d:ca:26:71:e0:e6:3e:95:b8:c8:24:37:1d:be:
                    51:1b:08:57:db:1e:26:fe:1a:14:35:c9:0f:66:8a:
                    cc:53:47:ba:19:66:e8:7d:80:9c:41:2a:40:1d:56:
                    07:a9:2e:be:87:a5:1a:dd:dd:42:47:15:17:d2:29:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D2:20:4A:25:12:EF:CC:BC:42:00:F2:12:13:E0:D9:9F:3C:42:59
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32322d3232203d3e20323636393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:bc:96:0e:9e:9d:79:45:0d:0f:7d:12:71:52:f6:11:71:
         3b:5a:09:59:57:44:1d:66:32:a4:9c:46:6e:d5:8f:3e:3f:b1:
         5b:dd:53:06:71:e0:68:1c:ef:1f:53:70:2a:08:cb:d7:84:a5:
         20:5c:ec:ca:37:03:1e:69:ba:8f:45:12:a1:1c:4e:61:8d:52:
         30:19:08:f0:b3:8d:45:1f:a2:44:7a:c9:d5:fe:47:b0:ac:3f:
         de:3e:7e:aa:50:79:9f:ff:96:7e:90:ff:32:0d:a7:78:e9:a2:
         b9:2f:82:ce:3f:49:a0:76:12:bf:f7:51:35:fb:34:27:83:9a:
         4d:15:b1:f7:31:2b:71:f1:a8:22:2e:e3:0f:ac:81:b5:90:f2:
         b4:52:07:28:f3:3c:c2:d0:6f:21:a5:38:b0:4f:59:99:af:ea:
         1f:89:a2:50:ee:9b:6d:cc:78:25:88:e4:eb:b9:aa:2c:3f:28:
         5e:06:25:dd:6f:eb:0b:e7:9b:51:e4:5f:0c:ba:c1:94:4b:9a:
         86:09:33:97:2d:f4:05:06:65:f3:64:f5:d7:3b:61:30:d6:04:
         d7:73:73:d4:d0:a8:53:ba:f5:5c:b7:99:42:ab:d8:de:b3:b4:
         f2:dc:e9:02:73:4a:5c:db:12:c2:dd:47:96:f3:63:4d:4a:86:
         ef:d0:a0:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPJVW9e4JILRViayaEn4KeCCO+kYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwNjcyQjUwRUEwNDBBNUJBMEREMkNDRjExOUUxRDBF
NzFEMTA3NTAeFw0yMzEwMDkxMzE3MjFaFw0yNDEwMDcxMzIyMjFaMDMxMTAvBgNV
BAMTKENFRDIyMDRBMjUxMkVGQ0NCQzQyMDBGMjEyMTNFMEQ5OUYzQzQyNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxHKrOmHEXS+FWNlOq3P+xe6mn
BcD7t/PBy0Yj5Y7JyI7ZIJKj64XxUFK2DElVmfM+auR97MhPj20y9FO+g/qLCXQI
YojPTRtXCShoh2AN0Yr4czb6azV+Be8YKSo0BC6yK+8n0/j+CGo2JK7qinrZpVkS
5dIDi5387WCjHZ8+Vx0s7Wu27RaugkUayezqHdlqlZ6ZekrhMN3XcrSouvnH2SrG
P57+I1dJHxNFhiYWVxIqQyOY9FDPg4Qwsq8NxrW+qTANyiZx4OY+lbjIJDcdvlEb
CFfbHib+GhQ1yQ9misxTR7oZZuh9gJxBKkAdVgepLr6HpRrd3UJHFRfSKUY3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUztIgSiUS78y8QgDyEhPg2Z88QlkwHwYDVR0j
BBgwFoAUMQZytQ6gQKW6DdLM8Rnh0OcdEHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz
VXMvMC8zMTA2NzJCNTBFQTA0MEE1QkEwREQyQ0NGMTE5RTFEMEU3MUQxMDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxMDY3MkI1MEVBMDQwQTVC
QTBERDJDQ0YxMTlFMUQwRTcxRDEwNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhM2lkZkFmY0xnZ0RNQ3F3OUFHTEtKOGZ4RGphVG5tUG9xM3hpc1UzM1VzLzAv
MzQzNTJlMzIzMjM1MmUzMjM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4fQwDQYJKoZIhvcNAQELBQADggEBADF7vJYO
np15RQ0PfRJxUvYRcTtaCVlXRB1mMqScRm7Vjz4/sVvdUwZx4Ggc7x9TcCoIy9eE
pSBc7Mo3Ax5puo9FEqEcTmGNUjAZCPCzjUUfokR6ydX+R7CsP94+fqpQeZ//ln6Q
/zINp3jporkvgs4/SaB2Er/3UTX7NCeDmk0VsfcxK3HxqCIu4w+sgbWQ8rRSByjz
PMLQbyGlOLBPWZmv6h+JolDum23MeCWI5Ou5qiw/KF4GJd1v6wvnm1HkXwy6wZRL
moYJM5ct9AUGZfNk9dc7YTDWBNdzc9TQqFO69Vy3mUKr2N6ztPLc6QJzSlzbEsLd
R5bzY01Khu/QoDo=
-----END CERTIFICATE-----
Generated at Fri Jan 19 00:54:45 2024 by rpki-client on console-fra.rpki-client.org