Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa
File:                     34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa (raw, json)
Hash identifier:          /dYGaJrqMWlp0SCujRDZevrA8iLoAEL2CpUoWdZiiTI=
Subject key identifier:   E2:C0:4A:8C:32:88:6F:11:66:8F:AD:F9:37:E3:DE:9B:7F:0F:8E:21
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       685EEE4D890C376EB03777C87FACA55851871DC6
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:07 +0000
ROA not before:           Thu 04 Apr 2024 15:21:07 +0000
ROA not after:            Thu 03 Apr 2025 15:26:07 +0000
asID:                     267369
IP address blocks:        45.234.176.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5e:ee:4d:89:0c:37:6e:b0:37:77:c8:7f:ac:a5:58:51:87:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:07 2024 GMT
            Not After : Apr  3 15:26:07 2025 GMT
        Subject: CN=E2C04A8C32886F11668FADF937E3DE9B7F0F8E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:07:26:1d:73:fd:2c:11:51:54:6b:93:2f:
                    df:e6:4f:c9:86:14:fa:f7:10:7e:88:b7:46:f7:73:
                    94:e4:6d:ea:fc:5a:f6:68:8b:22:ae:c7:8a:28:2e:
                    2d:26:54:b0:a0:57:40:1a:3c:46:9e:46:f6:32:23:
                    cd:a4:83:db:cf:ff:40:59:c4:d8:dc:ad:99:71:6b:
                    f9:d7:56:2a:5c:53:00:59:5a:7e:bc:16:20:df:e6:
                    be:90:ec:52:8a:3a:66:e7:28:ce:5d:3a:2e:88:46:
                    6e:77:07:a5:8f:07:fd:67:f1:4c:b1:67:99:30:c3:
                    1a:b3:f3:ef:bf:11:9c:08:05:77:65:f2:ed:f4:68:
                    32:74:22:50:ca:03:85:07:1f:2e:8a:17:f0:ba:20:
                    6d:ca:29:22:40:62:6a:4f:b8:03:a0:58:52:ee:6e:
                    fd:ac:30:f1:eb:89:99:e8:55:ee:45:c3:ad:a3:78:
                    80:2d:59:e3:74:1a:46:57:2e:ac:dd:ae:b1:9f:40:
                    77:20:94:ec:3f:a4:0d:8c:5d:ac:d6:26:32:0c:c1:
                    13:66:0e:aa:65:c0:95:70:c5:ab:ac:9a:4d:4d:12:
                    0c:70:c3:a8:73:42:ea:70:80:ee:94:2d:fb:6b:4a:
                    19:fe:d6:68:de:6d:c8:23:9e:2e:44:d0:0c:54:a3:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:4A:8C:32:88:6F:11:66:8F:AD:F9:37:E3:DE:9B:7F:0F:8E:21
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32332d3233203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:c0:6a:7e:c8:79:78:e7:29:fb:ab:b9:47:2e:2c:7a:9e:
         ab:3e:2b:31:5c:b5:2d:e0:68:27:4c:08:07:8b:4c:ff:2a:9a:
         bd:f9:11:ad:df:19:6f:0f:6e:0a:4a:74:d9:23:76:9b:54:ec:
         77:da:21:58:38:d3:8e:5b:7b:d0:51:78:13:45:c5:e2:6d:3b:
         4d:2d:13:e2:3b:8f:8f:79:b8:19:eb:94:5b:30:fe:f2:29:1f:
         d2:b4:69:67:a6:a7:f5:10:31:7b:59:ec:30:d3:5e:76:4c:db:
         b5:71:6e:cb:85:65:13:36:70:8e:f6:67:47:fe:c3:37:50:66:
         f7:98:55:56:5c:2d:3c:4a:e8:f6:10:8f:cf:c8:9a:91:05:87:
         f7:a9:52:74:fe:e1:31:1e:84:ad:1e:c8:34:ef:f1:11:26:c2:
         25:0a:d9:18:22:14:0c:36:92:24:ca:2b:90:a0:64:59:67:5c:
         ad:9a:32:73:80:84:c3:79:46:7c:70:01:13:51:bc:35:1a:61:
         90:eb:6c:93:ac:03:92:af:17:00:e3:9c:7a:a3:fb:ab:e3:dd:
         53:eb:e4:b5:d0:76:12:71:af:c1:2d:d6:f1:07:8d:e8:41:fc:
         28:36:2e:0e:a3:8f:c2:bd:b4:7a:c8:5a:73:e1:aa:8c:45:60:
         15:b4:58:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaF7uTYkMN26wN3fIf6ylWFGHHcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NGNUYxRTYxQzE3RTc2NDdFMkIxQTQ4ODlBRUI5MzVB
QjgwQUY4MTAeFw0yNDA0MDQxNTIxMDdaFw0yNTA0MDMxNTI2MDdaMDMxMTAvBgNV
BAMTKEUyQzA0QThDMzI4ODZGMTE2NjhGQURGOTM3RTNERTlCN0YwRjhFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6gcmHXP9LBFRVGuTL9/mT8mG
FPr3EH6It0b3c5Tkber8WvZoiyKux4ooLi0mVLCgV0AaPEaeRvYyI82kg9vP/0BZ
xNjcrZlxa/nXVipcUwBZWn68FiDf5r6Q7FKKOmbnKM5dOi6IRm53B6WPB/1n8Uyx
Z5kwwxqz8++/EZwIBXdl8u30aDJ0IlDKA4UHHy6KF/C6IG3KKSJAYmpPuAOgWFLu
bv2sMPHriZnoVe5Fw62jeIAtWeN0GkZXLqzdrrGfQHcglOw/pA2MXazWJjIMwRNm
DqplwJVwxausmk1NEgxww6hzQupwgO6ULftrShn+1mjebcgjni5E0AxUo9ZdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU4sBKjDKIbxFmj635N+Pem38PjiEwHwYDVR0j
BBgwFoAUzPXx5hwX52R+KxpIia65NauAr4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExVU0N4U21FRzdqTlFkUGt5cXFCamJyTkF2TFBDUnVucVhMQzFveEFl
QWsvMS9DQ0Y1RjFFNjFDMTdFNzY0N0UyQjFBNDg4OUFFQjkzNUFCODBBRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRjVGMUU2MUMxN0U3NjQ3
RTJCMUE0ODg5QUVCOTM1QUI4MEFGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMVVNDeFNtRUc3ak5RZFBreXFxQmpick5BdkxQQ1J1bnFYTEMxb3hBZUFrLzEv
MzQzNTJlMzIzMzM0MmUzMTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6rAwDQYJKoZIhvcNAQELBQADggEBADuXwGp+
yHl45yn7q7lHLix6nqs+KzFctS3gaCdMCAeLTP8qmr35Ea3fGW8PbgpKdNkjdptU
7HfaIVg4045be9BReBNFxeJtO00tE+I7j495uBnrlFsw/vIpH9K0aWemp/UQMXtZ
7DDTXnZM27VxbsuFZRM2cI72Z0f+wzdQZveYVVZcLTxK6PYQj8/ImpEFh/epUnT+
4TEehK0eyDTv8REmwiUK2RgiFAw2kiTKK5CgZFlnXK2aMnOAhMN5RnxwARNRvDUa
YZDrbJOsA5KvFwDjnHqj+6vj3VPr5LXQdhJxr8Et1vEHjehB/Cg2Lg6jj8K9tHrI
WnPhqoxFYBW0WCA=
-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:43 2024 by rpki-client on console-ams.rpki-client.org