Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          hqz+ePNyi6qZ7TfQ/aNUm9elIMHZ8aeRdWaH3QdqLNM=
Subject key identifier:   E8:2C:9E:A6:8D:9C:07:8A:06:4C:EE:0A:15:E5:64:A8:C3:F6:94:00
Certificate issuer:       /CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
Certificate serial:       7B77D795372806FB3B78462F14D0A520EC405060
Authority key identifier: 1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa
Signing time:             Thu 04 Apr 2024 00:14:55 +0000
ROA not before:           Thu 04 Apr 2024 00:09:55 +0000
ROA not after:            Thu 03 Apr 2025 00:14:55 +0000
asID:                     268291
IP address blocks:        45.237.225.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:77:d7:95:37:28:06:fb:3b:78:46:2f:14:d0:a5:20:ec:40:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
        Validity
            Not Before: Apr  4 00:09:55 2024 GMT
            Not After : Apr  3 00:14:55 2025 GMT
        Subject: CN=E82C9EA68D9C078A064CEE0A15E564A8C3F69400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:56:94:c9:73:e3:20:2d:43:74:7f:b0:0d:
                    6e:91:eb:00:fd:49:dc:2f:7f:85:b6:ba:a6:82:a6:
                    8f:2a:a5:3c:5b:4c:91:1f:31:be:3f:b3:1b:8b:7e:
                    f7:81:f0:10:4d:80:19:30:63:c2:54:a6:ba:d6:d8:
                    8d:54:49:45:15:78:23:30:3a:03:f5:5b:8f:d0:83:
                    de:f5:8c:c4:77:c3:d5:3f:3f:2c:3d:ff:8c:0b:d6:
                    0a:23:93:ad:6b:7b:f1:8b:46:19:9e:e2:70:50:df:
                    b5:2d:84:67:ac:e2:08:11:5f:1d:4b:f6:d5:ca:89:
                    45:b7:ab:48:ca:1a:c7:e5:3c:2f:63:6f:32:73:f0:
                    b6:c1:e3:02:d7:a4:d6:30:1e:8a:a8:f2:db:b3:12:
                    23:7d:f5:d9:5f:d7:e9:63:1c:8a:5d:19:a1:64:4f:
                    7a:c4:0f:b6:af:93:8e:31:27:84:fc:c9:af:6b:81:
                    97:12:8d:7b:9d:fa:5e:20:1c:83:c9:8f:41:d2:3b:
                    a5:80:50:91:f7:22:6a:3a:a4:a0:db:0a:f5:b4:ab:
                    85:1f:8c:91:be:54:59:05:71:6b:87:70:76:4d:44:
                    0f:63:9c:d4:85:db:7d:f6:57:e8:ed:cc:ca:5f:7c:
                    2e:bb:63:df:91:e6:c7:81:36:ac:3b:f3:7f:0f:e3:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:9E:A6:8D:9C:07:8A:06:4C:EE:0A:15:E5:64:A8:C3:F6:94:00
            X509v3 Authority Key Identifier:
                keyid:1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232352e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:29:bc:8c:99:37:30:68:e3:8a:d3:a6:87:36:f4:88:f4:f3:
         63:cb:95:2f:4a:e0:9b:29:40:53:c7:85:9b:b7:34:63:f7:99:
         75:f2:82:de:00:00:b3:67:ab:5d:39:f2:b3:a1:7c:0e:99:d8:
         2c:3d:ca:d2:2f:9e:f2:56:18:e4:2f:be:f4:d8:e8:b0:90:43:
         23:27:f2:61:4a:10:2e:33:9b:84:29:e5:98:fd:11:1d:3f:44:
         19:84:8b:71:82:e8:43:44:01:a9:79:ca:49:3a:55:b1:2d:29:
         b2:28:dd:a3:f2:03:41:f0:8d:0d:51:b5:83:c1:f0:1a:8c:c4:
         61:fb:a6:6d:d4:5c:11:9d:b3:42:22:68:44:30:02:4b:c7:4b:
         56:f5:19:11:49:91:3f:bd:0b:7a:bf:94:4e:d8:77:5d:e6:4a:
         0e:ca:e6:54:57:3e:00:2f:32:2e:a1:a7:11:2f:13:8b:f1:93:
         ae:19:45:65:e5:20:25:94:02:6b:1f:a0:7e:9e:52:e7:ea:36:
         1c:d5:d7:72:95:e2:0c:1f:37:eb:ab:65:62:4a:c4:24:9e:c9:
         db:de:b2:65:88:11:ba:be:e9:26:8f:7c:1e:14:56:e2:8c:97:
         79:69:e3:06:e6:4f:95:69:3e:db:5d:ec:83:80:10:70:c5:18:
         6e:9f:2f:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUe3fXlTcoBvs7eEYvFNClIOxAUGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2MjYyQzU2RDQ3NkQ5NDZDOEEzODNBQkIwMjU5RTAw
RjcxRTU1RDAeFw0yNDA0MDQwMDA5NTVaFw0yNTA0MDMwMDE0NTVaMDMxMTAvBgNV
BAMTKEU4MkM5RUE2OEQ5QzA3OEEwNjRDRUUwQTE1RTU2NEE4QzNGNjk0MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbFaUyXPjIC1DdH+wDW6R6wD9
Sdwvf4W2uqaCpo8qpTxbTJEfMb4/sxuLfveB8BBNgBkwY8JUprrW2I1USUUVeCMw
OgP1W4/Qg971jMR3w9U/Pyw9/4wL1gojk61re/GLRhme4nBQ37UthGes4ggRXx1L
9tXKiUW3q0jKGsflPC9jbzJz8LbB4wLXpNYwHoqo8tuzEiN99dlf1+ljHIpdGaFk
T3rED7avk44xJ4T8ya9rgZcSjXud+l4gHIPJj0HSO6WAUJH3Imo6pKDbCvW0q4Uf
jJG+VFkFcWuHcHZNRA9jnNSF2332V+jtzMpffC67Y9+R5seBNqw7838P443DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6Cyepo2cB4oGTO4KFeVkqMP2lAAwHwYDVR0j
BBgwFoAUHGJixW1HbZRsijg6uwJZ4A9x5V0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMS8xQzYyNjJDNTZENDc2RDk0NkM4QTM4M0FCQjAyNTlFMDBGNzFFNTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNjI2MkM1NkQ0NzZEOTQ2
QzhBMzgzQUJCMDI1OUUwMEY3MUU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzEv
MzQzNTJlMzIzMzM3MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7eEwDQYJKoZIhvcNAQELBQADggEBAGEpvIyZ
NzBo44rTpoc29Ij082PLlS9K4JspQFPHhZu3NGP3mXXygt4AALNnq1058rOhfA6Z
2Cw9ytIvnvJWGOQvvvTY6LCQQyMn8mFKEC4zm4Qp5Zj9ER0/RBmEi3GC6ENEAal5
ykk6VbEtKbIo3aPyA0HwjQ1RtYPB8BqMxGH7pm3UXBGds0IiaEQwAkvHS1b1GRFJ
kT+9C3q/lE7Yd13mSg7K5lRXPgAvMi6hpxEvE4vxk64ZRWXlICWUAmsfoH6eUufq
NhzV13KV4gwfN+urZWJKxCSeydvesmWIEbq+6SaPfB4UVuKMl3lp4wbmT5VpPttd
7IOAEHDFGG6fL48=
-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org