Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32322d3332203d3e20323636313035.roa
File:                     34352e352e3139362e302f32322d3332203d3e20323636313035.roa (raw, json)
Hash identifier:          Ism3cxIO+PCd0fbvz/Bs2UkCPOZpBpwX3HaO5LfLb0k=
Subject key identifier:   EA:07:90:BF:98:34:36:6A:31:C4:64:32:86:0C:3A:92:DE:2D:2B:6B
Certificate issuer:       /CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
Certificate serial:       62C8F5DBAA3BDAC724111DB376E2973EF1DE8BB0
Authority key identifier: D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32322d3332203d3e20323636313035.roa
Signing time:             Thu 02 May 2024 16:48:56 +0000
ROA not before:           Thu 02 May 2024 16:43:56 +0000
ROA not after:            Thu 01 May 2025 16:48:56 +0000
asID:                     266105
IP address blocks:        45.5.196.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c8:f5:db:aa:3b:da:c7:24:11:1d:b3:76:e2:97:3e:f1:de:8b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F8A8230BE2C0158081FA4A43712D5B68AD3215
        Validity
            Not Before: May  2 16:43:56 2024 GMT
            Not After : May  1 16:48:56 2025 GMT
        Subject: CN=EA0790BF9834366A31C46432860C3A92DE2D2B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:d8:9a:be:c2:79:9a:a2:f9:14:03:72:f2:
                    a1:cd:66:02:1f:b9:e3:ac:94:3d:78:ec:0c:c2:a5:
                    50:a7:32:ba:e1:2f:1a:61:b1:8d:3e:7d:18:87:7b:
                    5e:0f:60:f5:e0:91:5f:8b:74:9c:f4:78:97:49:62:
                    07:d7:2f:8b:00:26:b9:2b:81:28:7f:d6:04:7f:e2:
                    04:1c:60:06:5e:2c:18:0e:d0:7f:46:97:04:9d:6e:
                    78:ad:04:e7:28:2a:b8:16:76:b3:f5:0c:11:e8:b9:
                    5f:74:4f:7c:8f:82:88:73:ba:ba:ce:76:42:ec:e7:
                    b5:df:cf:4e:8c:c3:b8:e9:7e:f3:6a:10:8e:06:b7:
                    54:88:50:98:bc:ca:67:34:e5:af:d7:e9:48:c7:c6:
                    34:75:d2:93:2b:11:e6:bb:27:ba:db:44:64:af:0c:
                    b3:ec:35:2f:c0:6c:3b:fe:17:15:f1:06:7f:48:66:
                    cd:d0:a5:77:85:a1:c3:03:9c:3b:c3:8f:05:1e:69:
                    21:3f:50:18:ed:99:15:41:07:59:d9:19:89:7e:ed:
                    b0:d3:93:80:c1:37:89:e7:7d:60:3e:c0:3b:e2:18:
                    7e:27:42:36:78:b1:53:e2:78:33:7f:25:83:46:d4:
                    6a:38:13:ae:23:08:50:e5:f6:08:80:b5:77:dd:70:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:90:BF:98:34:36:6A:31:C4:64:32:86:0C:3A:92:DE:2D:2B:6B
            X509v3 Authority Key Identifier:
                keyid:D7:F8:A8:23:0B:E2:C0:15:80:81:FA:4A:43:71:2D:5B:68:AD:32:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7F8A8230BE2C0158081FA4A43712D5B68AD3215.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRQrYnt7LbTo9ijxMQ7hVQL6xkCy9dD7qArQ1BJ1N76d/0/34352e352e3139362e302f32322d3332203d3e20323636313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:73:7f:ba:5b:c3:65:aa:04:f1:61:99:6f:73:51:06:98:
         ad:1f:85:ac:41:0a:f5:3b:a4:61:73:d7:da:02:1d:9f:5b:fe:
         b2:00:4c:8c:cd:03:ba:7f:9b:01:e7:23:b9:5b:b1:8a:4a:c1:
         d7:3b:f8:24:8d:5c:83:9b:4f:e0:02:68:a8:ca:d4:0f:34:0e:
         8e:f7:f3:38:eb:99:d8:e0:be:d0:bd:b5:5c:d5:e6:33:ed:b7:
         0f:08:6a:14:01:4d:54:08:48:c2:0c:47:a6:dd:4d:13:1e:4a:
         6c:63:d2:aa:bb:e7:72:da:16:e4:b2:ac:6b:01:fc:0d:94:fa:
         45:9a:2e:d5:b4:ea:4b:a1:ca:f8:da:aa:b8:c5:a4:0a:d7:7d:
         ed:b2:35:60:fd:61:5b:e5:0b:b9:b3:a2:ee:d2:63:f3:24:92:
         88:32:15:2d:18:9b:d3:14:a0:57:af:ee:89:53:da:5d:72:bb:
         d3:66:94:a3:0d:0c:3e:ca:a8:38:25:be:77:71:66:62:be:82:
         25:62:9c:24:01:c9:69:59:f4:74:fa:29:1c:c0:4c:7d:2a:68:
         f7:07:5f:70:fe:f4:14:59:33:7c:2c:7c:9a:c9:70:c0:eb:5a:
         23:e1:9f:79:70:89:0f:23:c4:90:a9:13:17:d9:15:b4:a4:6b:
         65:da:4a:39
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYsj126o72sckER2zduKXPvHei7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGOEE4MjMwQkUyQzAxNTgwODFGQTRBNDM3MTJENUI2
OEFEMzIxNTAeFw0yNDA1MDIxNjQzNTZaFw0yNTA1MDExNjQ4NTZaMDMxMTAvBgNV
BAMTKEVBMDc5MEJGOTgzNDM2NkEzMUM0NjQzMjg2MEMzQTkyREUyRDJCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHtiavsJ5mqL5FANy8qHNZgIf
ueOslD147AzCpVCnMrrhLxphsY0+fRiHe14PYPXgkV+LdJz0eJdJYgfXL4sAJrkr
gSh/1gR/4gQcYAZeLBgO0H9GlwSdbnitBOcoKrgWdrP1DBHouV90T3yPgohzurrO
dkLs57Xfz06Mw7jpfvNqEI4Gt1SIUJi8ymc05a/X6UjHxjR10pMrEea7J7rbRGSv
DLPsNS/AbDv+FxXxBn9IZs3QpXeFocMDnDvDjwUeaSE/UBjtmRVBB1nZGYl+7bDT
k4DBN4nnfWA+wDviGH4nQjZ4sVPieDN/JYNG1Go4E64jCFDl9giAtXfdcIuvAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU6geQv5g0NmoxxGQyhgw6kt4tK2swHwYDVR0j
BBgwFoAU1/ioIwviwBWAgfpKQ3EtW2itMhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJRclludDdMYlRvOWlqeE1RN2hWUUw2eGtDeTlkRDdxQXJRMUJKMU43
NmQvMC9EN0Y4QTgyMzBCRTJDMDE1ODA4MUZBNEE0MzcxMkQ1QjY4QUQzMjE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RjhBODIzMEJFMkMwMTU4
MDgxRkE0QTQzNzEyRDVCNjhBRDMyMTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUXJZbnQ3TGJUbzlpanhNUTdoVlFMNnhrQ3k5ZEQ3cUFyUTFCSjFONzZkLzAv
MzQzNTJlMzUyZTMxMzkzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMx
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0FxDANBgkqhkiG9w0BAQsFAAOCAQEAiyxzf7pbw2Wq
BPFhmW9zUQaYrR+FrEEK9TukYXPX2gIdn1v+sgBMjM0Dun+bAecjuVuxikrB1zv4
JI1cg5tP4AJoqMrUDzQOjvfzOOuZ2OC+0L21XNXmM+23DwhqFAFNVAhIwgxHpt1N
Ex5KbGPSqrvnctoW5LKsawH8DZT6RZou1bTqS6HK+NqquMWkCtd97bI1YP1hW+UL
ubOi7tJj8ySSiDIVLRib0xSgV6/uiVPaXXK702aUow0MPsqoOCW+d3FmYr6CJWKc
JAHJaVn0dPopHMBMfSpo9wdfcP70FFkzfCx8mslwwOtaI+GfeXCJDyPEkKkTF9kV
tKRrZdpKOQ==
-----END CERTIFICATE-----
Generated at Tue Jul 23 09:47:44 2024 by rpki-client on console-fra.rpki-client.org