Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33382e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          OEOAgn9HMqcvtrt4mI4dIBsepIOHq/MWi+C6gz/ZbEY=
Subject key identifier:   8C:D0:4A:FF:AE:60:A0:03:EF:54:31:2C:5A:32:0F:6C:1A:B3:66:1E
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       063D46E8262EB623DC3410C32492F26594676CE5
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32342d3234203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:15 +0000
ROA not before:           Mon 27 May 2024 21:08:15 +0000
ROA not after:            Mon 26 May 2025 21:13:15 +0000
asID:                     269508
IP address blocks:        45.188.38.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:3d:46:e8:26:2e:b6:23:dc:34:10:c3:24:92:f2:65:94:67:6c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:15 2024 GMT
            Not After : May 26 21:13:15 2025 GMT
        Subject: CN=8CD04AFFAE60A003EF54312C5A320F6C1AB3661E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:73:82:47:fe:c9:cb:1b:87:a7:e6:fc:00:
                    ca:00:a7:df:20:7f:f3:c2:e5:29:77:3d:cd:60:76:
                    7d:93:b5:3b:c3:32:87:5a:8c:d9:18:94:dc:28:e0:
                    3b:be:98:fc:73:73:e4:36:4d:c9:a8:4a:a8:17:bd:
                    33:1c:62:59:54:90:e3:c5:4f:ef:b8:4e:e9:ae:b2:
                    88:a0:37:1f:04:ed:dc:1f:2d:fb:56:8f:9f:b4:bc:
                    de:f2:5f:cf:a0:1b:24:90:66:9e:f2:f3:5a:fc:1a:
                    ee:42:4a:c8:38:6f:09:22:be:95:ab:58:dd:67:41:
                    9a:00:45:95:1a:93:05:16:94:11:c6:62:c1:66:26:
                    15:7b:bf:88:02:90:89:6f:1b:bb:cb:79:93:9b:a1:
                    11:01:7e:52:1c:5e:53:0b:79:2e:ce:7d:db:c3:3a:
                    54:b5:dd:2e:07:58:14:19:5b:d8:3a:75:b6:a6:75:
                    da:bf:8e:aa:c3:4e:af:36:25:d9:bb:2a:7d:b9:86:
                    0e:28:81:cb:db:4a:d8:5a:eb:ef:a8:c6:c1:e2:a9:
                    e8:2a:2d:98:81:91:0f:12:ae:28:ea:51:d3:6b:ed:
                    1a:77:a3:23:f9:14:9d:d3:e8:81:1b:be:ee:cb:1c:
                    d6:ad:c7:0f:17:12:88:da:60:6a:76:a7:5e:03:0f:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:4A:FF:AE:60:A0:03:EF:54:31:2C:5A:32:0F:6C:1A:B3:66:1E
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33382e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:50:92:a8:ba:06:95:5c:cb:be:c9:cf:07:1e:0a:ab:80:
         dd:bb:c0:52:35:e2:1b:25:c9:82:b9:a9:9f:cd:f3:7a:2c:15:
         6b:1e:28:6d:e5:89:da:02:66:16:40:4e:24:72:c6:98:95:47:
         f0:ce:eb:8d:87:ff:64:1b:5e:90:ee:86:bb:4f:c8:1b:8c:41:
         89:f9:24:fc:ee:07:4d:2c:e8:75:e0:2d:dd:6c:75:cc:29:ad:
         73:55:be:6f:d1:14:5e:90:a8:66:35:3b:bb:2a:fd:0c:8f:19:
         bd:28:1d:20:e8:6b:76:dc:d8:3b:85:94:c7:2e:a6:6e:48:ee:
         32:9f:5e:6c:db:57:4b:a6:c6:5f:16:0d:e3:8c:c1:54:b5:34:
         32:76:ef:b3:db:04:6c:cf:8f:1d:8c:45:c2:d3:4c:3e:53:58:
         c1:fa:aa:6d:42:0b:90:75:db:20:17:50:55:28:e0:d9:49:94:
         f3:7e:e2:63:38:26:c4:b4:83:64:ed:3d:86:bd:c8:85:c1:6d:
         a8:50:c0:52:30:ab:65:fc:55:07:98:93:0c:a7:14:f7:34:85:
         15:7e:b4:4a:46:71:5e:11:e8:88:1e:f1:bb:7a:a2:03:64:0a:
         a6:8c:9a:0a:78:de:a7:f8:eb:1d:68:fc:03:2a:de:69:fb:5e:
         4c:57:90:74
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBj1G6CYutiPcNBDDJJLyZZRnbOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNTA3QTM0NDlCMzUyOTdDMkUwODUxRjA5NTc2NTcw
MjY5QjUzOTAeFw0yNDA1MjcyMTA4MTVaFw0yNTA1MjYyMTEzMTVaMDMxMTAvBgNV
BAMTKDhDRDA0QUZGQUU2MEEwMDNFRjU0MzEyQzVBMzIwRjZDMUFCMzY2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqXOCR/7JyxuHp+b8AMoAp98g
f/PC5Sl3Pc1gdn2TtTvDModajNkYlNwo4Du+mPxzc+Q2TcmoSqgXvTMcYllUkOPF
T++4TumusoigNx8E7dwfLftWj5+0vN7yX8+gGySQZp7y81r8Gu5CSsg4bwkivpWr
WN1nQZoARZUakwUWlBHGYsFmJhV7v4gCkIlvG7vLeZOboREBflIcXlMLeS7OfdvD
OlS13S4HWBQZW9g6dbamddq/jqrDTq82Jdm7Kn25hg4ogcvbStha6++oxsHiqegq
LZiBkQ8SrijqUdNr7Rp3oyP5FJ3T6IEbvu7LHNatxw8XEojaYGp2p14DD8LbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjNBK/65goAPvVDEsWjIPbBqzZh4wHwYDVR0j
BBgwFoAUtKUHo0SbNSl8LghR8JV2VwJptTkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkU1elFVTWp1dzVXTFg3NUZLVGZOcTloOGtxZlpyNXo3RVFtZTdtYTg5
RGMvMC9CNEE1MDdBMzQ0OUIzNTI5N0MyRTA4NTFGMDk1NzY1NzAyNjlCNTM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0QTUwN0EzNDQ5QjM1Mjk3
QzJFMDg1MUYwOTU3NjU3MDI2OUI1MzkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZFNXpRVU1qdXc1V0xYNzVGS1RmTnE5aDhrcWZacjV6N0VRbWU3bWE4OURjLzAv
MzQzNTJlMzEzODM4MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbwmMA0GCSqGSIb3DQEBCwUAA4IBAQAfrFCSqLoG
lVzLvsnPBx4Kq4Ddu8BSNeIbJcmCuamfzfN6LBVrHiht5YnaAmYWQE4kcsaYlUfw
zuuNh/9kG16Q7oa7T8gbjEGJ+ST87gdNLOh14C3dbHXMKa1zVb5v0RRekKhmNTu7
Kv0Mjxm9KB0g6Gt23Ng7hZTHLqZuSO4yn15s21dLpsZfFg3jjMFUtTQydu+z2wRs
z48djEXC00w+U1jB+qptQguQddsgF1BVKODZSZTzfuJjOCbEtINk7T2GvciFwW2o
UMBSMKtl/FUHmJMMpxT3NIUVfrRKRnFeEeiIHvG7eqIDZAqmjJoKeN6n+OsdaPwD
Kt5p+15MV5B0
-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org