Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
File:                     34352e3233362e37322e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier:          RIBle7ejTBJOT47RbDdHNakz/uQSJRfFcnO8FP2Gy5E=
Subject key identifier:   79:91:73:21:B3:84:7E:67:61:DA:99:DC:F3:5F:70:C2:B2:1F:46:6A
Certificate issuer:       /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial:       47226BCE9C4FADA02112A96C278203488C5D6134
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa
Signing time:             Thu 04 Apr 2024 17:02:48 +0000
ROA not before:           Thu 04 Apr 2024 16:57:48 +0000
ROA not after:            Thu 03 Apr 2025 17:02:48 +0000
asID:                     271478
IP address blocks:        45.236.72.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:22:6b:ce:9c:4f:ad:a0:21:12:a9:6c:27:82:03:48:8c:5d:61:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
        Validity
            Not Before: Apr  4 16:57:48 2024 GMT
            Not After : Apr  3 17:02:48 2025 GMT
        Subject: CN=79917321B3847E6761DA99DCF35F70C2B21F466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:96:9b:97:39:e7:d6:d3:37:b8:9d:24:8c:08:
                    75:a3:5f:62:78:e7:e5:29:22:46:ad:5c:c0:10:21:
                    78:f4:2f:d2:08:25:79:07:5f:f4:62:c4:4b:d1:03:
                    bd:09:ce:28:ba:30:0c:4a:df:ff:17:21:21:87:0a:
                    94:f0:e4:27:3c:a8:9c:fa:b4:99:96:15:3e:ba:02:
                    6a:6b:63:75:0d:88:5e:95:8c:41:cd:68:72:36:19:
                    b8:8f:d9:36:1d:d0:27:b2:46:14:7f:a7:0a:27:13:
                    3a:9f:03:54:28:b9:7e:66:93:87:a4:15:2d:0e:f0:
                    0d:96:e1:ea:1c:98:dc:a7:dc:bc:c7:0b:d2:34:84:
                    33:b0:d7:26:de:6d:4a:9b:ba:ec:f8:98:c3:3e:00:
                    ab:e1:b7:13:94:1f:04:30:53:5a:10:47:9f:9b:ba:
                    7d:4d:5f:50:88:07:ac:b4:f4:75:a8:b7:f4:63:2c:
                    2d:b3:1c:d7:a9:33:90:a1:7c:68:87:19:eb:34:fd:
                    2c:12:8e:2f:1d:e9:4a:db:7f:ff:5d:6f:b5:b1:16:
                    39:a6:4d:1c:59:34:bc:c2:ce:45:a5:7c:bd:e5:4b:
                    7c:9e:19:3a:e5:e0:b9:06:15:0c:27:b9:70:45:ff:
                    9d:80:bb:0e:a0:88:86:b5:e5:6a:b4:28:3b:53:1a:
                    d9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:91:73:21:B3:84:7E:67:61:DA:99:DC:F3:5F:70:C2:B2:1F:46:6A
            X509v3 Authority Key Identifier:
                keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37322e302f32332d3234203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:80:fd:23:a2:ce:6d:80:0d:2f:f1:56:14:f2:1e:21:c6:7f:
         2e:d2:0c:8e:1d:78:e2:9f:97:37:3e:8d:92:cc:7e:28:90:b1:
         bc:9b:39:b9:ec:12:ac:85:ec:6d:1a:2d:20:ba:29:3f:db:a0:
         bd:a0:28:3e:b1:3f:e2:e6:99:8a:c5:9e:a5:9e:38:3e:b3:6f:
         03:d5:15:ec:d9:11:6f:ee:50:f6:46:23:36:4f:83:0f:e1:bf:
         7c:77:30:52:03:de:62:7c:ed:66:22:89:cb:dd:07:1c:12:b4:
         15:54:8c:a3:9d:72:88:32:7a:fc:24:84:63:63:c4:94:23:dd:
         39:39:eb:4b:63:1b:a9:d7:c4:59:cc:45:cc:ea:38:74:bf:a3:
         1c:8c:4e:c0:c3:fe:fb:07:f2:d2:6d:17:7b:11:3d:eb:1f:50:
         02:e7:57:93:61:0e:fc:45:63:e7:89:98:0b:87:c3:be:fb:65:
         cf:6f:34:77:4c:73:2b:14:22:27:39:8a:f2:f4:51:2c:f5:ce:
         cd:73:0d:7d:1d:6e:20:1f:8d:19:9e:cb:9e:9c:29:59:8a:38:
         b7:06:50:e7:f2:0e:67:d6:0f:d6:3c:51:d4:ee:1a:eb:ac:25:
         fa:1e:2f:ec:68:3c:02:2c:f3:91:8f:84:81:9b:97:05:44:fc:
         3d:d1:73:27
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURyJrzpxPraAhEqlsJ4IDSIxdYTQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY3NzNBNDg1RUNGOEY5MTIyMkJBRDE3MkJDNzMwNjNC
MEM5MTA3QTAeFw0yNDA0MDQxNjU3NDhaFw0yNTA0MDMxNzAyNDhaMDMxMTAvBgNV
BAMTKDc5OTE3MzIxQjM4NDdFNjc2MURBOTlEQ0YzNUY3MEMyQjIxRjQ2NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvlpuXOefW0ze4nSSMCHWjX2J4
5+UpIkatXMAQIXj0L9IIJXkHX/RixEvRA70Jzii6MAxK3/8XISGHCpTw5Cc8qJz6
tJmWFT66AmprY3UNiF6VjEHNaHI2GbiP2TYd0CeyRhR/pwonEzqfA1QouX5mk4ek
FS0O8A2W4eocmNyn3LzHC9I0hDOw1ybebUqbuuz4mMM+AKvhtxOUHwQwU1oQR5+b
un1NX1CIB6y09HWot/RjLC2zHNepM5ChfGiHGes0/SwSji8d6Urbf/9db7WxFjmm
TRxZNLzCzkWlfL3lS3yeGTrl4LkGFQwnuXBF/52Auw6giIa15Wq0KDtTGtnlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeZFzIbOEfmdh2pnc819wwrIfRmowHwYDVR0j
BBgwFoAUL3c6SF7Pj5EiK60XK8cwY7DJEHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9ENHoxa1FLRnJDOW1kaWtYVm5TTGttdmNCWjN1bW45TDNmZ1FDcGZS
UHcvMS8yRjc3M0E0ODVFQ0Y4RjkxMjIyQkFEMTcyQkM3MzA2M0IwQzkxMDdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGNzczQTQ4NUVDRjhGOTEy
MjJCQUQxNzJCQzczMDYzQjBDOTEwN0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvRDR6MWtRS0ZyQzltZGlrWFZuU0xrbXZjQlozdW1uOUwzZmdRQ3BmUlB3LzEv
MzQzNTJlMzIzMzM2MmUzNzMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMx
MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLexIMA0GCSqGSIb3DQEBCwUAA4IBAQAngP0jos5t
gA0v8VYU8h4hxn8u0gyOHXjin5c3Po2SzH4okLG8mzm57BKshextGi0guik/26C9
oCg+sT/i5pmKxZ6lnjg+s28D1RXs2RFv7lD2RiM2T4MP4b98dzBSA95ifO1mIonL
3QccErQVVIyjnXKIMnr8JIRjY8SUI905OetLYxup18RZzEXM6jh0v6McjE7Aw/77
B/LSbRd7ET3rH1AC51eTYQ78RWPniZgLh8O++2XPbzR3THMrFCInOYry9FEs9c7N
cw19HW4gH40ZnsuenClZiji3BlDn8g5n1g/WPFHU7hrrrCX6Hi/saDwCLPORj4SB
m5cFRPw90XMn
-----END CERTIFICATE-----
Generated at Sat Aug 31 09:16:36 2024 by rpki-client on console-fra.rpki-client.org