Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
File:                     34352e362e33322e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          2ZG/14HEBNAIeYpZqY8toofBDEiJZZhrVeh/jKUUItM=
Subject key identifier:   E0:92:F8:C7:D3:85:72:FF:D0:59:D1:6D:C6:CA:6D:6E:82:B5:40:49
Certificate issuer:       /CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
Certificate serial:       29701DEBEE6B8824C0DE3BDAA395553DD76B5C65
Authority key identifier: 7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa
Signing time:             Fri 09 Aug 2024 17:28:56 +0000
ROA not before:           Fri 09 Aug 2024 17:23:56 +0000
ROA not after:            Fri 08 Aug 2025 17:28:56 +0000
asID:                     270814
IP address blocks:        45.6.32.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:70:1d:eb:ee:6b:88:24:c0:de:3b:da:a3:95:55:3d:d7:6b:5c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2
        Validity
            Not Before: Aug  9 17:23:56 2024 GMT
            Not After : Aug  8 17:28:56 2025 GMT
        Subject: CN=E092F8C7D38572FFD059D16DC6CA6D6E82B54049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:ee:f8:bf:16:99:5e:38:2e:20:02:f6:88:
                    db:95:e2:93:15:b9:5f:08:94:a5:41:f6:40:3f:df:
                    54:1e:a3:b3:05:91:97:34:47:f0:b9:09:11:e9:3d:
                    38:59:74:f4:0f:24:33:35:ff:75:b8:53:e3:64:b9:
                    ae:22:55:04:73:36:4d:6c:6d:1e:d9:30:12:8b:4a:
                    80:56:ce:95:15:c5:5b:11:04:03:d8:20:54:44:92:
                    2c:69:1d:20:f8:9b:dc:fe:8a:33:f9:94:0d:4d:3a:
                    0d:da:e3:79:5c:9c:88:53:56:a8:0f:54:88:9b:31:
                    04:ce:59:d7:75:df:13:4e:e3:dc:cf:a7:ff:70:42:
                    b0:ee:1a:70:65:32:8e:9c:4e:20:12:83:39:71:e8:
                    b6:dd:1c:4b:34:ff:24:14:fe:09:82:1d:01:1a:a2:
                    71:57:fd:26:7d:eb:e5:12:31:cd:66:bb:1d:0b:6d:
                    95:75:d6:32:58:27:98:c0:56:63:0e:9d:cf:86:58:
                    dc:17:a3:62:0c:6d:87:0c:1a:37:33:26:5f:4a:53:
                    d2:2a:6a:c0:ec:cf:da:0d:c4:6d:90:64:3b:a5:35:
                    de:fc:b2:6c:b7:84:3b:ce:64:36:9f:ff:d0:36:f8:
                    d1:9b:62:5a:75:7f:d9:82:ba:23:d9:3b:be:01:07:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:F8:C7:D3:85:72:FF:D0:59:D1:6D:C6:CA:6D:6E:82:B5:40:49
            X509v3 Authority Key Identifier:
                keyid:7B:5D:A3:19:0E:D9:BC:D4:FD:B7:23:70:8A:F5:DB:87:52:C2:CA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B5DA3190ED9BCD4FDB723708AF5DB8752C2CAC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/34352e362e33322e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:56:54:e2:48:3e:df:eb:e4:e1:24:ea:d8:76:97:f4:6a:
         a7:c5:1b:d4:56:c4:db:af:09:0e:a0:9a:49:bd:9f:f7:98:ea:
         2a:aa:86:1d:98:03:de:12:30:b1:09:1f:fc:e4:48:0f:03:cc:
         85:8f:e2:0d:13:d8:17:b4:e4:da:76:67:30:86:a0:73:52:c4:
         dd:7e:e5:fb:86:5b:b4:f9:84:a6:2e:0e:26:9c:d7:76:bf:38:
         a2:5e:12:98:7b:83:ea:9f:bc:53:0f:3a:3d:16:aa:d3:a5:b8:
         1c:c0:8f:ba:88:f8:13:19:c1:cd:6c:36:b9:72:87:99:9f:64:
         ae:77:7b:5f:b2:f1:f7:6c:2b:98:c9:4b:e9:20:ad:83:49:c5:
         84:23:d2:3c:3e:db:93:c2:c6:e1:54:5b:8d:e2:ce:d9:03:96:
         75:12:6d:a6:03:58:61:fb:ee:77:09:b5:93:1e:cd:80:8d:ca:
         88:94:8a:6f:7e:3c:39:89:6b:d0:3b:79:d1:7b:5c:49:5d:71:
         9d:5e:16:9e:5b:3b:37:05:54:b5:46:16:b2:0e:b9:f7:93:f2:
         b3:5d:98:72:24:a1:43:c7:95:60:c3:2c:28:77:aa:70:c0:12:
         51:c9:83:06:3e:dc:9d:fe:bd:6a:b2:8f:f5:07:8e:ef:b3:78:
         b6:52:87:7d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUKXAd6+5riCTA3jvao5VVPddrXGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1REEzMTkwRUQ5QkNENEZEQjcyMzcwOEFGNURCODc1
MkMyQ0FDMjAeFw0yNDA4MDkxNzIzNTZaFw0yNTA4MDgxNzI4NTZaMDMxMTAvBgNV
BAMTKEUwOTJGOEM3RDM4NTcyRkZEMDU5RDE2REM2Q0E2RDZFODJCNTQwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDO74vxaZXjguIAL2iNuV4pMV
uV8IlKVB9kA/31Qeo7MFkZc0R/C5CRHpPThZdPQPJDM1/3W4U+Nkua4iVQRzNk1s
bR7ZMBKLSoBWzpUVxVsRBAPYIFREkixpHSD4m9z+ijP5lA1NOg3a43lcnIhTVqgP
VIibMQTOWdd13xNO49zPp/9wQrDuGnBlMo6cTiASgzlx6LbdHEs0/yQU/gmCHQEa
onFX/SZ96+USMc1mux0LbZV11jJYJ5jAVmMOnc+GWNwXo2IMbYcMGjczJl9KU9Iq
asDsz9oNxG2QZDulNd78smy3hDvOZDaf/9A2+NGbYlp1f9mCuiPZO74BB/2nAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU4JL4x9OFcv/QWdFtxsptboK1QEkwHwYDVR0j
BBgwFoAUe12jGQ7ZvNT9tyNwivXbh1LCysIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC83QjVEQTMxOTBFRDlCQ0Q0RkRCNzIzNzA4QUY1REI4NzUyQzJDQUMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCNURBMzE5MEVEOUJDRDRG
REI3MjM3MDhBRjVEQjg3NTJDMkNBQzIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzQzNTJlMzYyZTMzMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAzODMx
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBiAwDQYJKoZIhvcNAQELBQADggEBAJDJVlTiSD7f6+Th
JOrYdpf0aqfFG9RWxNuvCQ6gmkm9n/eY6iqqhh2YA94SMLEJH/zkSA8DzIWP4g0T
2Be05Np2ZzCGoHNSxN1+5fuGW7T5hKYuDiac13a/OKJeEph7g+qfvFMPOj0WqtOl
uBzAj7qI+BMZwc1sNrlyh5mfZK53e1+y8fdsK5jJS+kgrYNJxYQj0jw+25PCxuFU
W43iztkDlnUSbaYDWGH77ncJtZMezYCNyoiUim9+PDmJa9A7edF7XEldcZ1eFp5b
OzcFVLVGFrIOufeT8rNdmHIkoUPHlWDDLCh3qnDAElHJgwY+3J3+vWqyj/UHju+z
eLZSh30=
-----END CERTIFICATE-----
Generated at Thu Sep 26 06:01:40 2024 by rpki-client on console-fra.rpki-client.org