Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32332d3233203d3e20323637333437.roa
File:                     34352e3233332e3138302e302f32332d3233203d3e20323637333437.roa (raw, json)
Hash identifier:          mcM+szzAJfaLBt/NmjmW6lh7XuDtrcTY+1F8aJatlfY=
Subject key identifier:   FF:E4:0E:23:5A:09:6B:61:6F:5B:1C:75:5F:49:DC:1B:19:CA:6C:69
Certificate issuer:       /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial:       7DF07866DEF256910A5263E4469546CB460FB221
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32332d3233203d3e20323637333437.roa
Signing time:             Fri 21 Jun 2024 16:37:06 +0000
ROA not before:           Fri 21 Jun 2024 16:32:06 +0000
ROA not after:            Fri 20 Jun 2025 16:37:06 +0000
asID:                     267347
IP address blocks:        45.233.180.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f0:78:66:de:f2:56:91:0a:52:63:e4:46:95:46:cb:46:0f:b2:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
        Validity
            Not Before: Jun 21 16:32:06 2024 GMT
            Not After : Jun 20 16:37:06 2025 GMT
        Subject: CN=FFE40E235A096B616F5B1C755F49DC1B19CA6C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:17:bd:06:51:f9:dc:a8:b5:0c:73:10:ef:
                    c7:4d:73:ff:0d:5e:d2:5f:99:f7:2c:39:82:02:06:
                    f5:bd:4b:c8:5c:f8:ef:24:28:ac:c3:91:36:1f:29:
                    72:bf:8f:bb:34:52:9d:ee:cf:e6:8f:17:32:58:1d:
                    fd:2f:9b:c4:7e:77:06:84:19:71:f8:9c:9c:93:e2:
                    a1:72:b5:e7:2e:fd:f0:48:9a:17:9e:8d:a7:00:87:
                    4f:2a:63:9b:b8:87:42:8a:bf:2e:68:c6:1a:04:70:
                    20:7d:11:8c:e9:a9:99:d2:5b:e4:e5:20:85:6d:4b:
                    7a:33:e2:41:bc:a8:0e:21:e4:52:a4:97:34:fc:65:
                    8f:67:29:47:83:b8:ad:13:2a:36:11:94:f0:46:cc:
                    23:d3:b4:3e:83:c7:3e:ff:1c:4b:5f:a1:09:8b:42:
                    64:0d:84:46:17:03:72:8a:b6:41:db:73:b1:70:b0:
                    5c:38:f7:1e:94:a0:36:06:98:8d:0e:48:fc:da:22:
                    c6:28:4a:7e:a9:4a:2d:5b:30:f9:99:82:ac:bc:cf:
                    92:34:d2:85:ae:30:1a:89:59:48:6f:c4:2a:93:84:
                    a2:2a:70:25:06:94:9a:61:16:b5:8b:00:61:e0:47:
                    70:6d:78:11:ce:2e:7f:08:18:64:2b:9d:ba:d1:a3:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:0E:23:5A:09:6B:61:6F:5B:1C:75:5F:49:DC:1B:19:CA:6C:69
            X509v3 Authority Key Identifier:
                keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32332d3233203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:e4:bb:03:23:29:42:b5:5d:dd:9f:7b:b2:b6:bf:16:7d:
         26:d9:62:65:25:fa:bf:9e:32:08:fa:8f:01:6d:50:ec:c4:e7:
         34:15:1a:9f:cb:a0:37:60:41:54:53:d1:8a:58:7d:22:ba:a7:
         db:24:d1:88:49:0d:ca:d7:1e:00:82:c4:64:14:77:0d:a7:9f:
         8d:a8:77:e8:df:86:b7:c0:5d:84:4f:1d:85:30:84:6c:03:3e:
         09:a5:73:dc:cc:df:82:15:fd:01:0a:e5:12:ad:4c:fa:0d:3c:
         7d:b3:fc:13:e2:f4:16:e2:4e:f0:e0:e2:6d:c6:b3:d6:f8:bd:
         ba:1a:00:7f:eb:d6:98:7d:07:75:80:b1:60:11:3a:0c:9f:c7:
         2a:3b:69:23:1b:96:07:7b:61:d5:07:a8:ed:c1:b9:25:f5:a0:
         f9:a9:ba:8b:47:50:f3:3e:a7:2f:e6:b1:3b:72:df:6c:07:6f:
         07:7a:ac:28:c8:fc:b2:3b:8d:78:37:bd:c1:0e:df:2c:d7:00:
         02:98:d0:f6:42:c3:94:a0:61:4a:c0:32:fd:de:ed:2f:eb:1e:
         bf:84:c1:6e:5a:69:ee:33:81:f5:48:28:c4:f5:c8:96:6d:5c:
         58:98:ca:23:b8:ec:db:20:ec:0f:71:e0:d8:fc:24:03:c7:22:
         cd:3b:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----