Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa
File:                     34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa (raw, json)
Hash identifier:          HACWoP6hMzRmzwcsml4QkYHAfCHu0kECJDzfkgr8vSM=
Subject key identifier:   78:B0:96:2F:4A:F5:8D:33:16:7C:D9:49:F9:51:F6:B0:2B:4D:17:0C
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       3E7210555E6D487423AE14949DE5F54CAC696FDA
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:05 +0000
ROA not before:           Thu 04 Apr 2024 15:21:05 +0000
ROA not after:            Thu 03 Apr 2025 15:26:05 +0000
asID:                     267369
IP address blocks:        45.234.178.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:10:55:5e:6d:48:74:23:ae:14:94:9d:e5:f5:4c:ac:69:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:05 2024 GMT
            Not After : Apr  3 15:26:05 2025 GMT
        Subject: CN=78B0962F4AF58D33167CD949F951F6B02B4D170C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:98:ae:6a:3b:31:49:4c:95:42:d8:dd:1d:
                    d3:78:c2:8b:eb:27:f1:90:64:a2:9f:d9:89:1f:fe:
                    3a:d2:e0:1a:25:ed:b6:f3:95:8b:21:3f:95:b8:c1:
                    f1:28:43:f0:c9:d6:7b:3c:3a:1e:20:af:e5:d1:86:
                    5d:f5:dd:78:5c:fc:63:c0:a2:b7:19:de:5e:1a:69:
                    e5:2a:2b:72:8a:9d:61:b6:be:27:cf:80:f6:7a:19:
                    22:e9:e0:7d:f0:f4:20:4e:f9:f5:4f:1e:b8:07:7f:
                    48:09:39:80:64:e4:f4:82:64:5b:0e:b7:c5:1f:48:
                    15:52:a5:37:8d:c2:53:23:4e:3b:ee:d8:19:16:36:
                    89:62:5c:90:44:7d:d7:b5:bb:5e:a2:48:3e:a9:84:
                    9e:5e:06:04:b5:34:67:f5:6e:5b:f1:4e:f1:83:52:
                    07:92:26:dc:6c:c7:22:e7:41:c8:46:f7:c6:f1:f9:
                    9c:c3:a0:5b:6f:2f:f1:48:cf:c6:0a:a9:66:9d:1a:
                    a2:41:2d:27:9c:45:e4:39:20:33:68:af:a8:4f:7f:
                    d1:af:8d:b2:e9:9e:ab:1a:fd:5c:f5:70:0a:a9:0c:
                    50:67:92:59:5f:36:16:37:5f:2f:50:8a:df:e0:76:
                    c6:c5:bc:3b:ed:6e:d7:55:33:18:d9:80:b3:8e:dc:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B0:96:2F:4A:F5:8D:33:16:7C:D9:49:F9:51:F6:B0:2B:4D:17:0C
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137382e302f32332d3233203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:c7:09:af:80:93:e6:64:03:67:93:6d:00:61:97:f5:5e:
         a2:be:12:63:66:1a:15:66:a4:1e:07:ad:be:29:75:d1:e5:ae:
         5b:66:8d:3e:cf:01:fa:97:7c:f2:d0:7e:74:19:b0:4f:a4:6b:
         ed:81:c5:b4:d3:b7:6c:4d:68:38:e8:f4:b5:ec:f8:2c:c3:8c:
         1b:5e:e7:d8:14:2a:92:69:23:c5:fe:07:68:59:ba:23:d7:c5:
         91:ed:d6:d6:f9:57:48:2f:c9:b3:9d:0c:c8:c9:be:62:7e:85:
         ec:a6:30:af:f5:8a:64:28:55:1e:02:88:99:5b:d5:58:5e:e2:
         67:5f:b5:31:f1:0c:ec:13:b7:eb:52:78:04:ba:0a:0a:9a:b9:
         55:60:42:e5:59:9d:51:c3:8e:93:b2:08:c6:ed:bf:f5:87:71:
         0c:23:e0:ba:67:62:e8:02:36:62:c3:13:3e:70:7a:bf:df:ec:
         ef:4c:2a:86:17:f6:4a:ed:fb:c1:5b:11:de:68:54:bb:2c:b6:
         1c:60:8a:26:ed:f0:98:11:cf:c7:ab:83:99:f2:ad:05:78:de:
         63:29:7b:5c:e1:62:a0:3e:f9:ea:c7:b3:09:93:93:2d:56:6e:
         c0:07:cc:b7:cc:4f:8e:c8:d0:ba:e8:d8:6a:68:36:ee:37:76:
         c7:fb:6d:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPnIQVV5tSHQjrhSUneX1TKxpb9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NGNUYxRTYxQzE3RTc2NDdFMkIxQTQ4ODlBRUI5MzVB
QjgwQUY4MTAeFw0yNDA0MDQxNTIxMDVaFw0yNTA0MDMxNTI2MDVaMDMxMTAvBgNV
BAMTKDc4QjA5NjJGNEFGNThEMzMxNjdDRDk0OUY5NTFGNkIwMkI0RDE3MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh5iuajsxSUyVQtjdHdN4wovr
J/GQZKKf2Ykf/jrS4Bol7bbzlYshP5W4wfEoQ/DJ1ns8Oh4gr+XRhl313Xhc/GPA
orcZ3l4aaeUqK3KKnWG2vifPgPZ6GSLp4H3w9CBO+fVPHrgHf0gJOYBk5PSCZFsO
t8UfSBVSpTeNwlMjTjvu2BkWNoliXJBEfde1u16iSD6phJ5eBgS1NGf1blvxTvGD
UgeSJtxsxyLnQchG98bx+ZzDoFtvL/FIz8YKqWadGqJBLSecReQ5IDNor6hPf9Gv
jbLpnqsa/Vz1cAqpDFBnkllfNhY3Xy9Qit/gdsbFvDvtbtdVMxjZgLOO3MhrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUeLCWL0r1jTMWfNlJ+VH2sCtNFwwwHwYDVR0j
BBgwFoAUzPXx5hwX52R+KxpIia65NauAr4EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRExVU0N4U21FRzdqTlFkUGt5cXFCamJyTkF2TFBDUnVucVhMQzFveEFl
QWsvMS9DQ0Y1RjFFNjFDMTdFNzY0N0UyQjFBNDg4OUFFQjkzNUFCODBBRjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NDRjVGMUU2MUMxN0U3NjQ3
RTJCMUE0ODg5QUVCOTM1QUI4MEFGODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RMVVNDeFNtRUc3ak5RZFBreXFxQmpick5BdkxQQ1J1bnFYTEMxb3hBZUFrLzEv
MzQzNTJlMzIzMzM0MmUzMTM3MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6rIwDQYJKoZIhvcNAQELBQADggEBAEHjxwmv
gJPmZANnk20AYZf1XqK+EmNmGhVmpB4Hrb4pddHlrltmjT7PAfqXfPLQfnQZsE+k
a+2BxbTTt2xNaDjo9LXs+CzDjBte59gUKpJpI8X+B2hZuiPXxZHt1tb5V0gvybOd
DMjJvmJ+heymMK/1imQoVR4CiJlb1Vhe4mdftTHxDOwTt+tSeAS6CgqauVVgQuVZ
nVHDjpOyCMbtv/WHcQwj4LpnYugCNmLDEz5wer/f7O9MKoYX9krt+8FbEd5oVLss
thxgiibt8JgRz8erg5nyrQV43mMpe1zhYqA++erHswmTky1WbsAHzLfMT47I0Lro
2GpoNu43dsf7bUk=
-----END CERTIFICATE-----
Generated at Sun Jun 16 16:55:06 2024 by rpki-client on console-fra.rpki-client.org