Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa
File:                     34352e3138382e33382e302f32332d3233203d3e20323639353038.roa (raw, json)
Hash identifier:          181gWObpOG80Uj3mMRqJTcz50Neo+O9w6LNqm4Jcn8w=
Subject key identifier:   67:6D:77:18:9A:BD:6B:4F:9F:E3:D1:A7:2E:9B:27:5B:85:B4:0C:BB
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       4F693A6B409ABE8553E4EA0423C8DC9AAEE11125
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:13 +0000
ROA not before:           Mon 27 May 2024 21:08:13 +0000
ROA not after:            Mon 26 May 2025 21:13:13 +0000
asID:                     269508
IP address blocks:        45.188.38.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:3a:6b:40:9a:be:85:53:e4:ea:04:23:c8:dc:9a:ae:e1:11:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:13 2024 GMT
            Not After : May 26 21:13:13 2025 GMT
        Subject: CN=676D77189ABD6B4F9FE3D1A72E9B275B85B40CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d0:0d:30:85:ad:af:c0:dd:89:d6:8e:07:6a:
                    68:b5:4a:c6:c5:73:ce:56:03:d6:96:ae:22:8f:10:
                    c3:35:71:ef:44:d4:0d:4b:05:bf:74:b2:8d:17:60:
                    cf:34:bf:dc:9e:24:7a:78:d9:28:fe:3a:d1:da:3a:
                    18:f6:4d:4e:6a:87:88:6d:37:5d:17:48:61:45:5b:
                    d2:c7:ce:0e:b8:50:ad:f9:c8:6b:20:51:17:35:eb:
                    37:81:c3:22:02:3d:dc:ab:95:e3:ef:ef:6c:d5:05:
                    d4:87:ca:61:c9:83:a4:43:d3:dd:c9:b2:3d:6a:46:
                    f1:5c:2e:bd:39:36:de:5e:80:a3:bd:8d:4f:82:7d:
                    6d:31:8b:8d:09:c8:94:cb:7b:5d:c8:67:84:6b:83:
                    16:f4:d2:0e:07:6a:a4:56:17:74:9d:c3:66:5b:60:
                    36:97:b1:ae:72:c2:4d:8b:2f:58:13:99:17:e3:1c:
                    b5:f8:ad:19:bb:2e:67:5a:dc:94:3d:dd:96:f1:9c:
                    74:47:cc:56:b3:79:3a:6c:b1:ec:5e:92:2c:ba:ff:
                    c3:88:71:e4:a3:70:0e:dc:cb:bd:cf:14:fd:51:fa:
                    54:92:df:84:02:d5:76:cb:9a:0a:36:f4:e7:68:7c:
                    d5:bc:c1:97:2d:e3:d4:2f:57:70:80:f9:db:4e:61:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:77:18:9A:BD:6B:4F:9F:E3:D1:A7:2E:9B:27:5B:85:B4:0C:BB
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32332d3233203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:7e:f5:5b:5f:46:b4:b2:bd:a1:ce:40:d4:9c:b9:3c:6f:2d:
         42:da:f4:82:67:ee:28:34:a8:74:05:e3:f7:cd:89:b0:64:27:
         89:42:77:5c:b4:9a:b3:99:38:dc:6f:a9:69:55:fa:cd:e8:42:
         2b:45:e6:6c:d8:68:43:86:c9:dd:bf:e5:64:3e:5b:8a:0d:f2:
         a5:83:67:19:9e:83:fe:83:00:13:0c:27:ec:ac:63:09:8e:5f:
         6e:6d:1e:39:83:5c:50:fe:8a:30:74:6e:41:9b:cf:c5:d0:56:
         49:61:e8:fc:5d:0f:a9:65:2f:c1:66:26:10:4e:78:62:9d:55:
         16:a6:e6:9d:2f:eb:21:c1:4d:d7:88:db:16:44:a7:dd:0e:4a:
         3a:59:43:18:ec:93:57:71:20:cf:27:a3:13:a8:89:a1:73:92:
         9e:fa:d1:ed:11:4d:44:e9:0e:4f:c0:51:e9:7c:d5:a0:9a:d3:
         67:f8:02:73:3a:ca:41:bb:e8:93:14:70:b9:be:92:d2:42:6c:
         42:be:3e:15:4e:bd:61:5a:b3:8b:81:49:92:28:4d:82:04:21:
         d5:f1:9b:c3:99:ef:45:fd:2a:58:4f:dd:a0:11:a1:07:d4:0d:
         50:68:22:a2:6e:62:20:f8:aa:27:ac:48:31:57:54:a1:05:c6:
         37:82:fe:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUT2k6a0CavoVT5OoEI8jcmq7hESUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNTA3QTM0NDlCMzUyOTdDMkUwODUxRjA5NTc2NTcw
MjY5QjUzOTAeFw0yNDA1MjcyMTA4MTNaFw0yNTA1MjYyMTEzMTNaMDMxMTAvBgNV
BAMTKDY3NkQ3NzE4OUFCRDZCNEY5RkUzRDFBNzJFOUIyNzVCODVCNDBDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP0A0wha2vwN2J1o4Hami1SsbF
c85WA9aWriKPEMM1ce9E1A1LBb90so0XYM80v9yeJHp42Sj+OtHaOhj2TU5qh4ht
N10XSGFFW9LHzg64UK35yGsgURc16zeBwyICPdyrlePv72zVBdSHymHJg6RD093J
sj1qRvFcLr05Nt5egKO9jU+CfW0xi40JyJTLe13IZ4Rrgxb00g4HaqRWF3Sdw2Zb
YDaXsa5ywk2LL1gTmRfjHLX4rRm7Lmda3JQ93ZbxnHRHzFazeTpssexekiy6/8OI
ceSjcA7cy73PFP1R+lSS34QC1XbLmgo29OdofNW8wZct49QvV3CA+dtOYdk9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ213GJq9a0+f49GnLpsnW4W0DLswHwYDVR0j
BBgwFoAUtKUHo0SbNSl8LghR8JV2VwJptTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC9CNEE1MDdBMzQ0OUIzNTI5N0MyRTA4NTFGMDk1NzY1NzAyNjlCNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QTUwN0EzNDQ5QjM1Mjk3
QzJFMDg1MUYwOTU3NjU3MDI2OUI1MzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzQzNTJlMzEzODM4MmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbwmMA0GCSqGSIb3DQEBCwUAA4IBAQAafvVbX0a0
sr2hzkDUnLk8by1C2vSCZ+4oNKh0BeP3zYmwZCeJQndctJqzmTjcb6lpVfrN6EIr
ReZs2GhDhsndv+VkPluKDfKlg2cZnoP+gwATDCfsrGMJjl9ubR45g1xQ/oowdG5B
m8/F0FZJYej8XQ+pZS/BZiYQTnhinVUWpuadL+shwU3XiNsWRKfdDko6WUMY7JNX
cSDPJ6MTqImhc5Ke+tHtEU1E6Q5PwFHpfNWgmtNn+AJzOspBu+iTFHC5vpLSQmxC
vj4VTr1hWrOLgUmSKE2CBCHV8ZvDme9F/SpYT92gEaEH1A1QaCKibmIg+KonrEgx
V1ShBcY3gv4d
-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org