Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa
File:                     34352e3137322e33392e302f32342d3234203d3e20323638383436.roa (raw, json)
Hash identifier:          ROS/23Fv4ctZPdLAIxAE8AgqsK8zs5flEQtXsTlVFrY=
Subject key identifier:   72:91:0D:37:58:06:6D:43:D0:A8:54:B0:EA:8F:80:B6:A2:4E:50:CC
Certificate issuer:       /CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
Certificate serial:       144E9731E7D3CD54A16A8C19D84ECC7DEEF38DB9
Authority key identifier: 2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa
Signing time:             Wed 03 Apr 2024 18:29:06 +0000
ROA not before:           Wed 03 Apr 2024 18:24:06 +0000
ROA not after:            Wed 02 Apr 2025 18:29:06 +0000
asID:                     268846
IP address blocks:        45.172.39.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4e:97:31:e7:d3:cd:54:a1:6a:8c:19:d8:4e:cc:7d:ee:f3:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
        Validity
            Not Before: Apr  3 18:24:06 2024 GMT
            Not After : Apr  2 18:29:06 2025 GMT
        Subject: CN=72910D3758066D43D0A854B0EA8F80B6A24E50CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:08:37:b6:1b:8a:94:42:90:e3:05:3e:ef:
                    51:50:31:6e:f1:33:02:00:79:9c:80:e5:54:66:cb:
                    b6:64:ed:f9:fb:c6:9a:2b:b2:53:db:a5:1e:7d:a3:
                    60:8f:00:9b:85:61:92:3b:ed:da:4b:c5:3f:9d:5f:
                    db:68:fe:76:b4:6b:31:0c:4d:f8:41:5b:28:16:ac:
                    c1:55:5e:91:a6:52:d8:c6:90:a7:de:ff:07:f2:23:
                    f1:f3:df:25:80:65:90:61:0f:16:44:9e:7c:6a:44:
                    fb:6e:fa:cd:94:cd:9f:cd:37:1b:a0:a4:77:5a:44:
                    89:a6:ca:9f:60:3a:b3:93:4b:89:e6:2b:5f:3d:1e:
                    9f:00:88:92:14:72:5d:2b:85:77:1a:3f:ba:e0:22:
                    7e:85:1b:0b:d6:34:fa:c2:b7:90:07:94:5c:21:b9:
                    41:b1:f7:1f:c3:45:49:ad:dd:7c:75:dc:c6:20:e1:
                    95:77:5d:87:db:9f:43:7a:e0:80:5c:39:60:89:80:
                    af:fa:ff:02:35:49:6e:6e:13:aa:8c:f2:1a:d0:1c:
                    7f:3c:a9:a6:33:67:f0:23:86:34:f1:4e:72:d6:5d:
                    49:bb:ec:f7:ff:e2:5f:8e:f0:ce:e4:69:ef:b4:ef:
                    93:8f:86:d3:19:33:de:f4:06:ea:52:1c:bb:ca:9e:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:91:0D:37:58:06:6D:43:D0:A8:54:B0:EA:8F:80:B6:A2:4E:50:CC
            X509v3 Authority Key Identifier:
                keyid:2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:72:39:6b:7c:e2:11:68:73:d5:a7:99:69:69:c2:a2:07:72:
         8b:7a:4f:4c:a5:59:ec:84:63:01:c7:52:13:ba:bf:13:f1:3e:
         8a:2e:74:31:d7:db:7f:ed:a5:69:16:28:80:a9:0b:5f:90:da:
         03:70:5d:1e:b6:9b:c5:02:12:74:c8:16:14:bd:64:5d:98:69:
         6d:57:9b:6d:b0:f8:d0:4d:40:7a:c6:82:78:4f:35:fc:ba:88:
         29:66:4e:3a:b4:2a:16:f0:97:6b:51:f6:6d:ea:bc:f6:11:14:
         73:ef:3b:7d:91:38:75:30:48:be:97:f0:07:e9:46:98:a9:10:
         b8:09:d4:45:8a:7f:3a:48:68:98:22:c5:ef:eb:bf:dc:d1:63:
         aa:47:0e:23:6f:e6:24:4d:8e:98:52:87:f5:9f:18:8a:b4:2a:
         c4:ef:03:a4:2c:b5:1d:5a:20:74:b9:a1:b9:c9:db:6a:5d:ee:
         41:aa:89:7f:61:61:40:c7:ce:6f:ee:60:15:19:9e:bc:f7:7f:
         59:a6:b8:6c:d6:22:38:aa:27:fd:2c:d9:1d:72:ac:1b:62:3b:
         a7:ff:c2:64:59:e4:45:5a:72:d7:cc:f6:eb:42:03:1d:8b:70:
         ab:34:ed:c1:ba:a6:9a:f4:fb:a5:59:81:3d:70:9c:c0:8f:87:
         21:f0:d2:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFE6XMefTzVShaowZ2E7Mfe7zjbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ1NjFDMEQxRTg4NzhBMkQ1OTQwRDE2QzE0NDM5QjAx
NzY0N0IxQTAeFw0yNDA0MDMxODI0MDZaFw0yNTA0MDIxODI5MDZaMDMxMTAvBgNV
BAMTKDcyOTEwRDM3NTgwNjZENDNEMEE4NTRCMEVBOEY4MEI2QTI0RTUwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3Qg3thuKlEKQ4wU+71FQMW7x
MwIAeZyA5VRmy7Zk7fn7xporslPbpR59o2CPAJuFYZI77dpLxT+dX9to/na0azEM
TfhBWygWrMFVXpGmUtjGkKfe/wfyI/Hz3yWAZZBhDxZEnnxqRPtu+s2UzZ/NNxug
pHdaRImmyp9gOrOTS4nmK189Hp8AiJIUcl0rhXcaP7rgIn6FGwvWNPrCt5AHlFwh
uUGx9x/DRUmt3Xx13MYg4ZV3XYfbn0N64IBcOWCJgK/6/wI1SW5uE6qM8hrQHH88
qaYzZ/AjhjTxTnLWXUm77Pf/4l+O8M7kae+075OPhtMZM970BupSHLvKnm2nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcpENN1gGbUPQqFSw6o+AtqJOUMwwHwYDVR0j
BBgwFoAULVYcDR6IeKLVlA0WwUQ5sBdkexowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lVNGRjOHNnekZVTGJZZnpBa0gzVWtiMVZxeW5zYnJVenZnNXpnZWFK
WWUvMS8yRDU2MUMwRDFFODg3OEEyRDU5NDBEMTZDMTQ0MzlCMDE3NjQ3QjFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENTYxQzBEMUU4ODc4QTJE
NTk0MEQxNkMxNDQzOUIwMTc2NDdCMUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N5VTRkYzhzZ3pGVUxiWWZ6QWtIM1VrYjFWcXluc2JyVXp2ZzV6Z2VhSlllLzEv
MzQzNTJlMzEzNzMyMmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALawnMA0GCSqGSIb3DQEBCwUAA4IBAQB+cjlrfOIR
aHPVp5lpacKiB3KLek9MpVnshGMBx1ITur8T8T6KLnQx19t/7aVpFiiAqQtfkNoD
cF0etpvFAhJ0yBYUvWRdmGltV5ttsPjQTUB6xoJ4TzX8uogpZk46tCoW8JdrUfZt
6rz2ERRz7zt9kTh1MEi+l/AH6UaYqRC4CdRFin86SGiYIsXv67/c0WOqRw4jb+Yk
TY6YUof1nxiKtCrE7wOkLLUdWiB0uaG5ydtqXe5Bqol/YWFAx85v7mAVGZ68939Z
prhs1iI4qif9LNkdcqwbYjun/8JkWeRFWnLXzPbrQgMdi3CrNO3Buqaa9PulWYE9
cJzAj4ch8NIp
-----END CERTIFICATE-----
Generated at Sat Oct 26 14:36:35 2024 by rpki-client on console-fra.rpki-client.org