Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233312e302f32342d3234203d3e20323637363234.roa
File:                     34352e37312e3233312e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier:          8cVBAyR0XzRrTXKVroE/HHEoPEBXGXy5DR0cyQPLzRA=
Subject key identifier:   63:C8:A5:7D:82:B8:6D:3A:D0:1B:7E:07:B8:02:BE:E0:75:5E:E7:E7
Certificate issuer:       /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial:       690AE45C5457270651E56CEE0349F4D5ADE4B1CB
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233312e302f32342d3234203d3e20323637363234.roa
Signing time:             Tue 27 Aug 2024 12:53:28 +0000
ROA not before:           Tue 27 Aug 2024 12:48:28 +0000
ROA not after:            Tue 26 Aug 2025 12:53:28 +0000
asID:                     267624
IP address blocks:        45.71.231.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0a:e4:5c:54:57:27:06:51:e5:6c:ee:03:49:f4:d5:ad:e4:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
        Validity
            Not Before: Aug 27 12:48:28 2024 GMT
            Not After : Aug 26 12:53:28 2025 GMT
        Subject: CN=63C8A57D82B86D3AD01B7E07B802BEE0755EE7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:df:55:5b:2a:60:91:3a:d6:4e:ec:1e:1c:ce:
                    5d:98:f4:d6:5a:2d:71:0f:01:f7:88:0c:43:c3:15:
                    1c:08:d1:06:b1:f9:f0:36:f0:7d:67:5f:0d:2d:34:
                    80:03:a3:77:dc:05:0f:55:b1:11:8a:ef:f1:bf:2a:
                    16:4a:0d:6b:62:68:10:9d:ec:83:b4:a7:48:e9:8b:
                    e9:fb:1f:fa:62:7a:97:2c:e9:1d:3e:06:fe:fd:17:
                    6d:86:04:fe:72:18:e1:06:bc:b3:27:ad:1e:35:23:
                    f2:20:0d:06:b3:fc:6d:dc:12:ca:49:57:51:a5:fb:
                    2d:af:45:82:ad:cc:d7:f6:21:4d:2c:ec:87:82:0a:
                    77:79:85:3b:8a:db:de:0c:a7:2a:d2:b4:b8:9c:21:
                    b3:ab:60:2f:63:26:ed:d7:b4:2c:09:01:2b:49:a3:
                    00:be:52:e2:90:d5:d1:db:e9:64:72:07:cf:ae:fc:
                    15:cb:be:80:a9:15:7c:47:2b:41:2c:b4:23:f6:a4:
                    77:c4:f8:3f:77:b3:22:73:14:a0:f7:53:d9:e8:e8:
                    1a:f1:e9:f1:74:fc:70:74:da:09:01:19:8b:59:77:
                    44:ee:71:a2:45:7d:52:a0:e0:4b:f0:66:bc:45:31:
                    ee:2e:ef:11:fe:84:1b:e5:83:a3:2e:03:e1:f7:c5:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C8:A5:7D:82:B8:6D:3A:D0:1B:7E:07:B8:02:BE:E0:75:5E:E7:E7
            X509v3 Authority Key Identifier:
                keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233312e302f32342d3234203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:d6:58:bf:92:e9:05:f0:4e:f0:e3:4c:fa:af:74:eb:7c:
         6f:82:cd:5a:36:a4:1e:0e:d8:9b:cc:b6:ce:5e:94:24:90:09:
         32:0e:32:00:90:23:84:1c:89:5c:2d:44:c9:d8:65:3a:25:1d:
         54:1d:26:72:c4:e9:0f:a2:38:82:c6:b0:75:de:51:84:e6:58:
         21:e9:94:d8:8e:2f:09:9d:07:97:4a:00:2a:6e:6d:41:82:4d:
         f8:92:e8:2a:ea:81:30:75:52:d0:59:b2:d9:1d:17:97:ab:bd:
         bf:6a:72:68:7e:c8:23:d1:6a:8d:38:0a:81:6d:cc:38:48:1b:
         f2:06:0a:3d:f3:c6:bc:94:fc:dd:9e:ad:b4:43:cc:a2:02:45:
         8a:d2:1d:a6:2e:56:5f:de:89:85:10:b1:c3:e6:81:b9:1c:ce:
         ac:b3:87:91:ca:1b:c7:19:3f:92:73:7c:6a:8f:e2:ab:61:5e:
         57:f1:49:4a:d7:e2:cb:f3:57:f5:5f:c2:4a:85:7b:a5:d1:27:
         c3:24:38:e3:d8:eb:4e:28:a7:0c:24:55:c7:50:fa:dd:0c:2f:
         0e:a9:24:39:6f:d9:b7:60:b2:64:33:c0:19:ff:5e:d9:5b:52:
         3b:83:f7:2c:a5:c8:9a:1d:f4:0d:d1:67:b4:92:06:1d:ef:4b:
         03:a0:d9:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaQrkXFRXJwZR5WzuA0n01a3kscswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzIzNTI4QTEzRkUyQUQzQkY0OEYzMjQyN0VBOUJCREQ4
N0MxMkEwMTAeFw0yNDA4MjcxMjQ4MjhaFw0yNTA4MjYxMjUzMjhaMDMxMTAvBgNV
BAMTKDYzQzhBNTdEODJCODZEM0FEMDFCN0UwN0I4MDJCRUUwNzU1RUU3RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn31VbKmCROtZO7B4czl2Y9NZa
LXEPAfeIDEPDFRwI0Qax+fA28H1nXw0tNIADo3fcBQ9VsRGK7/G/KhZKDWtiaBCd
7IO0p0jpi+n7H/piepcs6R0+Bv79F22GBP5yGOEGvLMnrR41I/IgDQaz/G3cEspJ
V1Gl+y2vRYKtzNf2IU0s7IeCCnd5hTuK294MpyrStLicIbOrYC9jJu3XtCwJAStJ
owC+UuKQ1dHb6WRyB8+u/BXLvoCpFXxHK0EstCP2pHfE+D93syJzFKD3U9no6Brx
6fF0/HB02gkBGYtZd0TucaJFfVKg4EvwZrxFMe4u7xH+hBvlg6MuA+H3xQVVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY8ilfYK4bTrQG34HuAK+4HVe5+cwHwYDVR0j
BBgwFoAUwjUooT/irTv0jzJCfqm73YfBKgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2NDZWlFS1Jic2Z3VnZxMlBmNncyMWFmRFd1WDF5cmVISHU2ZFJWOTU0
NWQvMS9DMjM1MjhBMTNGRTJBRDNCRjQ4RjMyNDI3RUE5QkJERDg3QzEyQTAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MyMzUyOEExM0ZFMkFEM0JG
NDhGMzI0MjdFQTlCQkREODdDMTJBMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NjQ2VpRUtSYnNmd1Z2cTJQZjZ3MjFhZkRXdVgxeXJlSEh1NmRSVjk1NDVkLzEv
MzQzNTJlMzczMTJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUfnMA0GCSqGSIb3DQEBCwUAA4IBAQCKUtZYv5Lp
BfBO8ONM+q9063xvgs1aNqQeDtibzLbOXpQkkAkyDjIAkCOEHIlcLUTJ2GU6JR1U
HSZyxOkPojiCxrB13lGE5lgh6ZTYji8JnQeXSgAqbm1Bgk34kugq6oEwdVLQWbLZ
HReXq72/anJofsgj0WqNOAqBbcw4SBvyBgo988a8lPzdnq20Q8yiAkWK0h2mLlZf
3omFELHD5oG5HM6ss4eRyhvHGT+Sc3xqj+KrYV5X8UlK1+LL81f1X8JKhXul0SfD
JDjj2OtOKKcMJFXHUPrdDC8OqSQ5b9m3YLJkM8AZ/17ZW1I7g/cspciaHfQN0We0
kgYd70sDoNm3
-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:16 2024 by rpki-client on console-ams.rpki-client.org