Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32342d3234203d3e20323637353735.roa
File:                     34352e37302e3136322e302f32342d3234203d3e20323637353735.roa (raw, json)
Hash identifier:          kuJVPk/WUJLjJ05lsm20u5FbLRU4/BRzogAg1n3HpsA=
Subject key identifier:   9C:70:43:01:3D:46:B1:2C:FC:1A:D6:B9:24:95:F9:5D:21:F5:5D:88
Certificate issuer:       /CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
Certificate serial:       53E621D2603D5DAC3FE74F3F979521AF081915C9
Authority key identifier: E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32342d3234203d3e20323637353735.roa
Signing time:             Wed 18 Sep 2024 12:17:31 +0000
ROA not before:           Wed 18 Sep 2024 12:12:31 +0000
ROA not after:            Wed 17 Sep 2025 12:17:31 +0000
asID:                     267575
IP address blocks:        45.70.162.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e6:21:d2:60:3d:5d:ac:3f:e7:4f:3f:97:95:21:af:08:19:15:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6E033681DC6E1958D9D3974EBB609A1AB57CB49
        Validity
            Not Before: Sep 18 12:12:31 2024 GMT
            Not After : Sep 17 12:17:31 2025 GMT
        Subject: CN=9C7043013D46B12CFC1AD6B92495F95D21F55D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:e0:1f:d0:3e:7d:4f:c8:47:ff:f8:d7:d4:
                    7b:d2:ef:dc:98:a9:f3:87:06:fd:9f:a8:a7:a7:90:
                    26:0c:06:70:02:70:b1:df:e9:31:81:be:42:0d:b0:
                    39:25:52:9e:4f:53:b7:f4:3c:fb:ff:2c:a6:0b:d2:
                    cd:33:c3:a9:a5:b0:49:24:99:c0:6d:5e:b3:ef:6d:
                    43:40:64:44:dc:65:fc:ed:00:1a:01:e8:50:e5:1d:
                    9e:c5:3f:9f:db:a0:a0:50:c5:94:3e:47:4d:39:a3:
                    b6:1a:1c:7d:5a:b2:3d:82:20:69:37:0b:a4:31:bc:
                    17:86:ce:7a:47:99:a4:0e:61:a9:fb:87:b1:01:c2:
                    6f:2c:39:2b:05:d6:8b:3a:fe:01:02:d9:e8:e6:7b:
                    fb:fa:ed:cd:7f:4d:ff:3f:f3:43:da:b9:bc:12:4c:
                    c8:fc:12:0c:70:3a:1f:42:c9:4f:07:e3:39:36:60:
                    ad:53:2e:00:ff:42:77:36:9b:1b:74:93:5c:49:83:
                    3e:d8:ef:db:3f:fc:f2:9e:a0:3e:29:36:69:77:fb:
                    90:e1:c3:45:94:37:d3:03:3a:6b:5d:64:b6:4f:4f:
                    f2:6d:db:ae:04:e6:05:32:dd:1b:56:ee:06:31:33:
                    3e:a9:e5:ce:f4:a8:a4:2b:ad:de:e4:26:75:d8:90:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:70:43:01:3D:46:B1:2C:FC:1A:D6:B9:24:95:F9:5D:21:F5:5D:88
            X509v3 Authority Key Identifier:
                keyid:E6:E0:33:68:1D:C6:E1:95:8D:9D:39:74:EB:B6:09:A1:AB:57:CB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6E033681DC6E1958D9D3974EBB609A1AB57CB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/34352e37302e3136322e302f32342d3234203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:bc:f6:7b:be:14:4f:89:ce:37:88:bd:47:e4:06:a3:f7:4d:
         3a:2b:a8:e8:13:6b:4b:6d:af:ee:90:c4:d6:3b:ef:3f:74:39:
         1d:53:8e:95:7b:6c:e5:43:26:da:31:7d:6d:c0:14:22:c7:c2:
         f8:d1:88:7a:5c:18:6d:90:93:af:b8:b3:64:28:f2:7d:b6:47:
         cb:21:3c:35:b9:9f:a0:ca:6a:57:20:7f:f7:33:4d:ec:08:bc:
         2f:96:6a:7c:68:b1:dc:36:df:c2:2a:18:b3:47:ae:69:0d:6c:
         c4:46:52:c3:10:cf:08:02:44:e6:82:6d:4e:5a:b5:0d:6d:36:
         f8:48:a7:64:54:e2:36:68:3c:11:9f:50:0c:f1:9d:a5:00:9d:
         5c:c3:bd:c5:59:f1:a6:cc:df:15:ca:2e:3c:d5:48:e9:63:e9:
         95:52:e0:24:ee:ba:9b:85:6d:50:4f:75:40:0e:a8:1a:f5:95:
         59:de:6b:e2:97:85:fe:8d:e0:83:f9:77:90:87:b3:0d:c8:af:
         3a:74:70:82:f4:33:71:de:90:fa:4d:cc:5a:c9:8b:be:cf:ef:
         e0:b6:ec:5c:81:6f:a5:4f:c1:01:e5:1f:49:d3:17:1a:48:b5:
         ca:59:c0:f2:75:4f:ab:0f:fd:be:15:46:f1:78:2a:21:2c:94:
         c5:3f:28:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU+Yh0mA9Xaw/508/l5UhrwgZFckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZFMDMzNjgxREM2RTE5NThEOUQzOTc0RUJCNjA5QTFB
QjU3Q0I0OTAeFw0yNDA5MTgxMjEyMzFaFw0yNTA5MTcxMjE3MzFaMDMxMTAvBgNV
BAMTKDlDNzA0MzAxM0Q0NkIxMkNGQzFBRDZCOTI0OTVGOTVEMjFGNTVEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/uAf0D59T8hH//jX1HvS79yY
qfOHBv2fqKenkCYMBnACcLHf6TGBvkINsDklUp5PU7f0PPv/LKYL0s0zw6mlsEkk
mcBtXrPvbUNAZETcZfztABoB6FDlHZ7FP5/boKBQxZQ+R005o7YaHH1asj2CIGk3
C6QxvBeGznpHmaQOYan7h7EBwm8sOSsF1os6/gEC2ejme/v67c1/Tf8/80PaubwS
TMj8EgxwOh9CyU8H4zk2YK1TLgD/Qnc2mxt0k1xJgz7Y79s//PKeoD4pNml3+5Dh
w0WUN9MDOmtdZLZPT/Jt264E5gUy3RtW7gYxMz6p5c70qKQrrd7kJnXYkAz7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnHBDAT1GsSz8Gta5JJX5XSH1XYgwHwYDVR0j
BBgwFoAU5uAzaB3G4ZWNnTl067YJoatXy0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVNnZFZyeG53VlBidFFoazY1a0xZR3c1WkpBMzk3ZzZmQ0RQeWF6TW11
UjcvMC9FNkUwMzM2ODFEQzZFMTk1OEQ5RDM5NzRFQkI2MDlBMUFCNTdDQjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2RTAzMzY4MURDNkUxOTU4
RDlEMzk3NEVCQjYwOUExQUI1N0NCNDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VTZ2RWcnhud1ZQYnRRaGs2NWtMWUd3NVpKQTM5N2c2ZkNEUHlhek1tdVI3LzAv
MzQzNTJlMzczMDJlMzEzNjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzUzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUaiMA0GCSqGSIb3DQEBCwUAA4IBAQBcvPZ7vhRP
ic43iL1H5Aaj9006K6joE2tLba/ukMTWO+8/dDkdU46Ve2zlQybaMX1twBQix8L4
0Yh6XBhtkJOvuLNkKPJ9tkfLITw1uZ+gympXIH/3M03sCLwvlmp8aLHcNt/CKhiz
R65pDWzERlLDEM8IAkTmgm1OWrUNbTb4SKdkVOI2aDwRn1AM8Z2lAJ1cw73FWfGm
zN8Vyi481UjpY+mVUuAk7rqbhW1QT3VADqga9ZVZ3mvil4X+jeCD+XeQh7MNyK86
dHCC9DNx3pD6TcxayYu+z+/gtuxcgW+lT8EB5R9J0xcaSLXKWcDydU+rD/2+FUbx
eCohLJTFPyjS
-----END CERTIFICATE-----
Generated at Wed Oct 16 06:29:38 2024 by rpki-client on console-fra.rpki-client.org