Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa
File:                     34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa (raw, json)
Hash identifier:          BEzVWxRKivrVqMvmnzRBkZhiD14WLtOxilYg4bwOvvI=
Subject key identifier:   5E:DB:5C:B8:D2:7E:1D:AE:3C:7E:FB:5D:A7:77:D8:BA:8E:97:06:A4
Certificate issuer:       /CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
Certificate serial:       1167416A57A7F729EAE40D237BA982EB3D57CF04
Authority key identifier: 1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa
Signing time:             Thu 04 Apr 2024 00:14:55 +0000
ROA not before:           Thu 04 Apr 2024 00:09:55 +0000
ROA not after:            Thu 03 Apr 2025 00:14:55 +0000
asID:                     268291
IP address blocks:        45.237.226.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:41:6a:57:a7:f7:29:ea:e4:0d:23:7b:a9:82:eb:3d:57:cf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C6262C56D476D946C8A383ABB0259E00F71E55D
        Validity
            Not Before: Apr  4 00:09:55 2024 GMT
            Not After : Apr  3 00:14:55 2025 GMT
        Subject: CN=5EDB5CB8D27E1DAE3C7EFB5DA777D8BA8E9706A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:81:9a:a9:82:7a:9c:a4:28:a8:d5:65:24:51:
                    ab:1f:28:da:5e:01:7b:5c:e7:af:fe:2a:f1:fb:67:
                    89:88:cf:38:e3:6c:3d:cb:c8:39:d2:1b:19:29:88:
                    e0:44:ec:e6:b2:cf:f9:5a:ca:08:d6:a6:22:e0:c8:
                    ad:91:dd:a0:9b:e3:b4:34:5d:16:d1:0c:fd:98:6e:
                    c1:9b:67:b4:8c:1e:49:2a:fa:dd:36:96:d8:d7:54:
                    2b:30:53:15:0d:84:2c:ea:35:eb:f7:54:a7:60:1c:
                    bf:4e:7f:1c:9e:0f:a8:4e:80:84:f5:51:09:d2:59:
                    f4:18:a6:2e:f8:d6:b6:3f:f1:6e:08:43:0f:f5:92:
                    83:2d:b3:86:a7:f6:ca:d4:fa:86:5c:0c:95:43:94:
                    ee:5a:fe:31:cb:1b:3d:08:65:f0:8e:ff:28:a9:d0:
                    af:0f:b7:8d:90:06:b9:18:5d:7a:0e:3a:96:43:32:
                    35:f9:d6:4a:b2:a8:a1:b2:bb:95:97:f0:ad:b4:79:
                    55:e2:e2:48:52:05:f8:e9:ac:d0:69:1a:2a:62:b4:
                    2a:bf:50:f4:ea:4b:73:92:ce:5e:93:1c:32:ba:fb:
                    72:5f:59:92:44:22:1b:00:36:42:ff:5a:0e:cf:ff:
                    04:78:22:9e:9f:ca:ed:97:78:bc:8f:49:77:92:fa:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DB:5C:B8:D2:7E:1D:AE:3C:7E:FB:5D:A7:77:D8:BA:8E:97:06:A4
            X509v3 Authority Key Identifier:
                keyid:1C:62:62:C5:6D:47:6D:94:6C:8A:38:3A:BB:02:59:E0:0F:71:E5:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C6262C56D476D946C8A383ABB0259E00F71E55D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/De48rWiEDQY7MpceA1CFQkVvaNLwwFeiRU1tWGDigfVQ/1/34352e3233372e3232362e302f32342d3234203d3e20323638323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:8b:22:fd:66:63:ba:76:e7:ab:37:96:a0:f4:89:34:65:
         c3:f1:24:9b:94:c1:43:ff:31:23:14:28:ac:ce:5f:05:c5:94:
         d1:f3:b2:94:5e:3a:f0:26:c3:d9:95:59:c8:1a:dd:8a:76:76:
         96:44:cb:f3:35:d9:14:7a:f0:bd:f5:6f:ed:b0:a9:3f:e0:a9:
         5b:73:87:25:73:0d:c9:8b:96:5c:11:d8:2a:4d:b7:a6:28:c0:
         3f:ae:a3:f5:8a:05:e2:f5:ee:71:82:d2:1b:2c:49:6b:bf:74:
         87:4d:a0:9e:57:ee:ed:63:80:98:c0:8c:3e:ac:aa:c5:7e:ad:
         e4:62:01:2f:c6:eb:24:6c:07:77:16:b1:21:24:5d:75:a1:2e:
         22:7d:ef:25:e9:b6:54:d5:4e:94:dd:d7:19:7b:1e:b8:e9:10:
         54:e6:18:ec:f8:56:e9:15:d1:63:c0:c4:24:b5:8a:18:78:ab:
         82:15:33:2e:53:b8:78:e2:69:c9:6b:05:52:bf:13:ae:af:be:
         90:5f:1e:87:78:19:76:05:9b:09:29:6c:84:2c:ff:67:fb:bf:
         94:25:2c:76:83:fa:6f:6b:1b:14:fa:c0:76:2f:bc:a2:ed:de:
         a0:43:2f:8c:ba:b3:50:6c:c3:0a:2c:c2:c0:ce:7d:9b:05:8b:
         01:8c:2b:c1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEWdBalen9ynq5A0je6mC6z1XzwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM2MjYyQzU2RDQ3NkQ5NDZDOEEzODNBQkIwMjU5RTAw
RjcxRTU1RDAeFw0yNDA0MDQwMDA5NTVaFw0yNTA0MDMwMDE0NTVaMDMxMTAvBgNV
BAMTKDVFREI1Q0I4RDI3RTFEQUUzQzdFRkI1REE3NzdEOEJBOEU5NzA2QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPgZqpgnqcpCio1WUkUasfKNpe
AXtc56/+KvH7Z4mIzzjjbD3LyDnSGxkpiOBE7Oayz/laygjWpiLgyK2R3aCb47Q0
XRbRDP2YbsGbZ7SMHkkq+t02ltjXVCswUxUNhCzqNev3VKdgHL9OfxyeD6hOgIT1
UQnSWfQYpi741rY/8W4IQw/1koMts4an9srU+oZcDJVDlO5a/jHLGz0IZfCO/yip
0K8Pt42QBrkYXXoOOpZDMjX51kqyqKGyu5WX8K20eVXi4khSBfjprNBpGipitCq/
UPTqS3OSzl6THDK6+3JfWZJEIhsANkL/Wg7P/wR4Ip6fyu2XeLyPSXeS+qL/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXttcuNJ+Ha48fvtdp3fYuo6XBqQwHwYDVR0j
BBgwFoAUHGJixW1HbZRsijg6uwJZ4A9x5V0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGU0OHJXaUVEUVk3TXBjZUExQ0ZRa1Z2YU5Md3dGZWlSVTF0V0dEaWdm
VlEvMS8xQzYyNjJDNTZENDc2RDk0NkM4QTM4M0FCQjAyNTlFMDBGNzFFNTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFDNjI2MkM1NkQ0NzZEOTQ2
QzhBMzgzQUJCMDI1OUUwMEY3MUU1NUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RlNDhyV2lFRFFZN01wY2VBMUNGUWtWdmFOTHd3RmVpUlUxdFdHRGlnZlZRLzEv
MzQzNTJlMzIzMzM3MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7eIwDQYJKoZIhvcNAQELBQADggEBAFyNiyL9
ZmO6duerN5ag9Ik0ZcPxJJuUwUP/MSMUKKzOXwXFlNHzspReOvAmw9mVWcga3Yp2
dpZEy/M12RR68L31b+2wqT/gqVtzhyVzDcmLllwR2CpNt6YowD+uo/WKBeL17nGC
0hssSWu/dIdNoJ5X7u1jgJjAjD6sqsV+reRiAS/G6yRsB3cWsSEkXXWhLiJ97yXp
tlTVTpTd1xl7HrjpEFTmGOz4VukV0WPAxCS1ihh4q4IVMy5TuHjiaclrBVK/E66v
vpBfHod4GXYFmwkpbIQs/2f7v5QlLHaD+m9rGxT6wHYvvKLt3qBDL4y6s1Bswwos
wsDOfZsFiwGMK8E=
-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org