Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32332d3234203d3e20323636393734.roa
File:                     34352e3232352e3234342e302f32332d3234203d3e20323636393734.roa (raw, json)
Hash identifier:          RL+bFDlHE4Q3uygnyt4ZMc9anR96ZQfMrW28W/U8KRw=
Subject key identifier:   94:8F:9A:D8:0A:F6:02:7A:DD:5E:AE:8E:B7:3D:0F:22:87:EE:DC:0E
Certificate issuer:       /CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
Certificate serial:       1307CA10CF1016E48DBF381CCDA1A459E9A04EC5
Authority key identifier: 31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32332d3234203d3e20323636393734.roa
Signing time:             Mon 09 Oct 2023 13:22:56 +0000
ROA not before:           Mon 09 Oct 2023 13:17:56 +0000
ROA not after:            Mon 07 Oct 2024 13:22:56 +0000
asID:                     266974
IP address blocks:        45.225.244.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:07:ca:10:cf:10:16:e4:8d:bf:38:1c:cd:a1:a4:59:e9:a0:4e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310672B50EA040A5BA0DD2CCF119E1D0E71D1075
        Validity
            Not Before: Oct  9 13:17:56 2023 GMT
            Not After : Oct  7 13:22:56 2024 GMT
        Subject: CN=948F9AD80AF6027ADD5EAE8EB73D0F2287EEDC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:f4:44:d9:9a:bc:a0:88:eb:18:e3:e9:aa:
                    21:b9:34:ef:9b:39:dd:81:97:8e:f7:68:c5:f0:98:
                    b8:66:76:9d:91:20:dc:1b:c0:18:36:73:00:ce:f3:
                    eb:4f:f7:b7:27:05:4a:8b:98:e4:f3:99:89:63:e8:
                    86:f2:83:9f:ca:d8:20:a4:6a:33:15:27:8c:c3:0a:
                    63:c2:4b:cd:37:35:a2:93:fd:ae:29:8e:72:56:b1:
                    e2:8f:27:04:47:c1:04:9a:d3:e8:78:f1:08:73:58:
                    1c:e2:ff:fa:8b:de:85:d6:22:04:d7:33:95:42:24:
                    5b:13:a6:ce:60:09:45:3c:2c:43:68:01:03:da:de:
                    20:21:85:7c:45:3e:63:f9:17:af:a3:83:93:a2:29:
                    23:63:b1:c4:20:9f:02:6e:68:6d:64:7b:5f:0a:8b:
                    2a:23:8e:06:bb:29:92:ce:6b:99:b8:cd:eb:51:20:
                    3c:90:4c:fd:dc:cb:15:e6:50:43:b1:a0:b9:e4:f4:
                    7e:ac:b6:14:f0:f7:ec:21:79:a8:cf:07:f1:b7:c3:
                    43:2d:6a:b9:c8:c0:c4:7a:46:fa:a1:06:fb:5e:50:
                    2a:e5:d8:bb:ef:5c:8c:c8:ad:55:34:36:58:00:42:
                    27:40:c6:66:9e:75:9b:0f:39:9a:e3:c6:90:27:a4:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:9A:D8:0A:F6:02:7A:DD:5E:AE:8E:B7:3D:0F:22:87:EE:DC:0E
            X509v3 Authority Key Identifier:
                keyid:31:06:72:B5:0E:A0:40:A5:BA:0D:D2:CC:F1:19:E1:D0:E7:1D:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/310672B50EA040A5BA0DD2CCF119E1D0E71D1075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ba3idfAfcLggDMCqw9AGLKJ8fxDjaTnmPoq3xisU33Us/0/34352e3232352e3234342e302f32332d3234203d3e20323636393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e8:0d:13:97:46:52:23:ad:d1:21:c8:ae:a7:37:62:ef:4c:
         12:e6:30:c0:e7:02:9d:93:e3:f1:26:67:87:2a:9d:15:42:d7:
         88:fc:39:68:ab:bc:0c:6c:0b:f2:5b:69:3b:05:d5:bc:70:f3:
         9e:5f:33:cb:dd:51:f3:d6:24:d9:54:cd:c6:e0:6e:e3:8f:97:
         a8:60:4b:94:42:9e:44:05:73:96:f9:14:0c:00:48:45:e0:54:
         a5:81:9d:8d:73:dd:6c:78:7a:18:fa:c3:4c:72:9b:30:5f:4f:
         d5:48:fe:4b:ae:2b:68:4d:1a:f9:5d:f4:b5:d7:4e:7e:3f:bf:
         8e:8d:f1:e8:cd:0e:37:73:67:db:e7:1e:be:22:9c:44:72:39:
         f4:0d:ef:bb:bb:7a:8b:77:df:4b:b5:60:3b:fd:ee:ca:38:fe:
         7f:59:1c:63:35:8c:54:ad:3c:1f:f4:87:ad:63:2a:8a:38:c4:
         d5:2d:df:3b:c7:6c:d3:1f:2c:bc:aa:8c:0f:5f:79:02:dc:64:
         f6:3f:cc:97:09:71:2e:fe:30:42:85:5a:ac:d8:4d:8b:90:ef:
         0a:dc:d4:e4:1a:a4:c4:f1:87:d2:ee:92:69:e1:aa:54:21:95:
         ab:9e:bd:03:e6:8a:01:7e:c2:76:5b:5a:b5:09:e4:37:b6:c0:
         93:eb:7a:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEwfKEM8QFuSNvzgczaGkWemgTsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEwNjcyQjUwRUEwNDBBNUJBMEREMkNDRjExOUUxRDBF
NzFEMTA3NTAeFw0yMzEwMDkxMzE3NTZaFw0yNDEwMDcxMzIyNTZaMDMxMTAvBgNV
BAMTKDk0OEY5QUQ4MEFGNjAyN0FERDVFQUU4RUI3M0QwRjIyODdFRURDMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfPRE2Zq8oIjrGOPpqiG5NO+b
Od2Bl473aMXwmLhmdp2RINwbwBg2cwDO8+tP97cnBUqLmOTzmYlj6Ibyg5/K2CCk
ajMVJ4zDCmPCS803NaKT/a4pjnJWseKPJwRHwQSa0+h48QhzWBzi//qL3oXWIgTX
M5VCJFsTps5gCUU8LENoAQPa3iAhhXxFPmP5F6+jg5OiKSNjscQgnwJuaG1ke18K
iyojjga7KZLOa5m4zetRIDyQTP3cyxXmUEOxoLnk9H6sthTw9+wheajPB/G3w0Mt
arnIwMR6RvqhBvteUCrl2LvvXIzIrVU0NlgAQidAxmaedZsPOZrjxpAnpK8zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlI+a2Ar2AnrdXq6Otz0PIofu3A4wHwYDVR0j
BBgwFoAUMQZytQ6gQKW6DdLM8Rnh0OcdEHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmEzaWRmQWZjTGdnRE1DcXc5QUdMS0o4ZnhEamFUbm1Qb3EzeGlzVTMz
VXMvMC8zMTA2NzJCNTBFQTA0MEE1QkEwREQyQ0NGMTE5RTFEMEU3MUQxMDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxMDY3MkI1MEVBMDQwQTVC
QTBERDJDQ0YxMTlFMUQwRTcxRDEwNzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhM2lkZkFmY0xnZ0RNQ3F3OUFHTEtKOGZ4RGphVG5tUG9xM3hpc1UzM1VzLzAv
MzQzNTJlMzIzMjM1MmUzMjM0MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4fQwDQYJKoZIhvcNAQELBQADggEBAJfoDROX
RlIjrdEhyK6nN2LvTBLmMMDnAp2T4/EmZ4cqnRVC14j8OWirvAxsC/JbaTsF1bxw
855fM8vdUfPWJNlUzcbgbuOPl6hgS5RCnkQFc5b5FAwASEXgVKWBnY1z3Wx4ehj6
w0xymzBfT9VI/kuuK2hNGvld9LXXTn4/v46N8ejNDjdzZ9vnHr4inERyOfQN77u7
eot330u1YDv97so4/n9ZHGM1jFStPB/0h61jKoo4xNUt3zvHbNMfLLyqjA9feQLc
ZPY/zJcJcS7+MEKFWqzYTYuQ7wrc1OQapMTxh9LukmnhqlQhlauevQPmigF+wnZb
WrUJ5De2wJPresY=
-----END CERTIFICATE-----
Generated at Fri Jan 19 00:54:45 2024 by rpki-client on console-fra.rpki-client.org