Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
File:                     34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa (raw, json)
Hash identifier:          0spkoqV9vFmNY3n3xSwSO8wdmgVwgglAs+4GRa8C/LM=
Subject key identifier:   5A:D8:EC:E8:29:C1:98:39:06:15:B4:80:E6:9F:72:CB:1F:EC:E9:87
Certificate issuer:       /CN=0135D1CBDF850A312CEB5E320379EB8164B7FAA1
Certificate serial:       09EF27263B8D2BF07169F16F6A54C73C3C57ED94
Authority key identifier: 01:35:D1:CB:DF:85:0A:31:2C:EB:5E:32:03:79:EB:81:64:B7:FA:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa
Signing time:             Thu 23 May 2024 16:16:26 +0000
ROA not before:           Thu 23 May 2024 16:11:26 +0000
ROA not after:            Thu 22 May 2025 16:16:26 +0000
asID:                     269526
IP address blocks:        45.186.244.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ef:27:26:3b:8d:2b:f0:71:69:f1:6f:6a:54:c7:3c:3c:57:ed:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0135D1CBDF850A312CEB5E320379EB8164B7FAA1
        Validity
            Not Before: May 23 16:11:26 2024 GMT
            Not After : May 22 16:16:26 2025 GMT
        Subject: CN=5AD8ECE829C198390615B480E69F72CB1FECE987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:6a:55:8b:57:64:f0:48:04:11:88:c4:16:
                    59:90:72:94:bc:44:e3:0b:c9:15:56:ac:15:6d:59:
                    0e:18:35:16:2e:70:a4:50:de:25:7a:94:fa:2c:8b:
                    bc:27:2b:23:36:94:61:33:a3:b8:fe:0b:4b:db:b5:
                    03:c3:d1:c9:fb:15:bf:8a:6d:93:d2:70:23:1d:74:
                    f9:ad:5b:dc:7d:d8:5a:86:84:5d:31:ec:e0:19:5b:
                    16:74:42:83:02:f6:5d:52:11:64:82:5e:78:80:8c:
                    cd:b9:e9:1c:63:cb:f6:4d:8f:27:d8:b3:ad:45:05:
                    bb:8e:7a:89:cc:6c:84:7c:86:e1:1a:a0:f3:f4:0f:
                    5c:d6:74:cc:86:15:89:33:8a:9f:55:b1:a8:b5:2c:
                    d4:54:70:11:99:fa:c0:c7:aa:f8:d7:6d:89:b0:85:
                    20:49:72:f2:8c:22:e2:e7:19:cd:5a:16:9e:2d:e4:
                    85:6f:e3:1a:2c:b6:a3:2b:a6:95:56:a3:6e:c8:a8:
                    3d:0a:15:2c:c0:0e:ac:25:d6:d9:59:0f:b6:92:93:
                    b3:83:39:f6:1f:02:19:3c:43:e5:6e:41:62:27:66:
                    eb:7e:be:5a:2f:04:c2:0c:d6:45:b4:1e:17:89:cf:
                    dd:f6:0f:86:b5:db:22:ff:6a:6c:9d:8e:ca:70:e0:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D8:EC:E8:29:C1:98:39:06:15:B4:80:E6:9F:72:CB:1F:EC:E9:87
            X509v3 Authority Key Identifier:
                keyid:01:35:D1:CB:DF:85:0A:31:2C:EB:5E:32:03:79:EB:81:64:B7:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0135D1CBDF850A312CEB5E320379EB8164B7FAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/34352e3138362e3234342e302f32322d3234203d3e20323639353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:50:24:5c:56:d1:60:8a:51:2f:06:81:f8:09:08:f9:1d:d2:
         6a:49:18:51:a0:b3:75:52:e5:d1:dd:e9:55:b8:31:1c:5e:f5:
         86:67:43:60:b7:43:1e:01:f3:df:38:ba:32:61:6e:53:1b:34:
         e0:ab:93:da:18:56:fe:dd:fe:b7:5c:3e:21:3c:48:35:52:02:
         14:f5:33:ae:1c:e6:4a:7c:3b:02:72:15:e1:40:ea:cd:47:c5:
         04:9e:8a:9f:0a:cf:ce:ef:45:ca:00:d6:41:8c:3b:c1:f4:38:
         da:48:9a:ca:a7:22:0a:f9:ca:3b:d0:95:14:3a:56:62:56:ff:
         3c:3d:39:f7:26:44:6a:a0:0b:3c:bb:7b:2c:a6:75:a2:e8:8a:
         02:79:53:d8:f7:39:f4:4d:67:cc:86:b8:40:1a:50:70:d7:5a:
         7f:b3:f0:9c:5e:63:32:79:24:08:b1:fd:bb:25:54:4d:11:3b:
         29:90:1b:4f:db:9d:29:ed:61:e0:6f:6d:dc:d9:af:50:d7:38:
         12:4e:33:a1:50:ae:c5:42:80:42:b4:15:3f:2a:7c:cc:df:0b:
         5e:cc:1c:75:b9:28:dd:31:e9:0a:0e:ad:63:2c:4e:64:35:80:
         56:5e:3d:c9:9f:41:22:22:fc:a1:07:e1:2b:87:d6:0d:a3:12:
         d5:f0:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 09:24:06 2024 by rpki-client on console-ams.rpki-client.org