Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          J49k9EEG4xKqbUASQcnJz8Gy2nrIM2Uc9QCxBPAk7Ec=
Subject key identifier:   31:FF:6B:99:75:F3:F4:90:D6:23:7E:01:6A:C0:83:AD:F4:4F:46:12
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       059F0AEE3DD8444ED1ACFF4C36DBF26CF069A288
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:06 +0000
ROA not before:           Mon 26 Aug 2024 19:28:06 +0000
ROA not after:            Mon 25 Aug 2025 19:33:06 +0000
asID:                     269359
IP address blocks:        45.230.84.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:0a:ee:3d:d8:44:4e:d1:ac:ff:4c:36:db:f2:6c:f0:69:a2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:06 2024 GMT
            Not After : Aug 25 19:33:06 2025 GMT
        Subject: CN=31FF6B9975F3F490D6237E016AC083ADF44F4612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:70:4e:51:f2:0f:05:17:66:f5:fa:78:c7:
                    4f:06:ba:61:38:cc:5f:24:c1:01:92:8a:c3:d7:31:
                    7e:2c:80:a3:cc:2b:04:50:a6:e2:6a:50:c4:7e:a3:
                    3d:6e:73:7f:fb:f5:27:79:71:40:74:4d:e0:a6:44:
                    c4:52:eb:d5:09:ee:e4:7f:8e:58:5b:52:f6:38:f6:
                    ca:17:92:6e:5b:b3:7f:d8:5b:f4:60:ab:01:4b:fa:
                    fa:74:96:2d:a7:53:f9:dc:fc:b2:ac:40:16:7b:ee:
                    19:30:3a:a5:50:dd:2d:d6:35:f4:f5:45:28:c4:fe:
                    da:99:51:6c:90:f4:55:04:d1:e0:c0:76:90:07:71:
                    69:df:2b:99:a4:b7:3c:4c:a3:4b:78:69:bc:1a:64:
                    aa:02:1a:e9:e3:f3:c1:20:a8:5b:29:e7:ff:46:33:
                    95:b1:90:fe:1a:20:bd:e8:b7:70:97:57:14:9a:f2:
                    bd:1b:d9:f6:7d:cc:88:43:18:f6:0b:99:07:56:2e:
                    e5:35:9b:a7:37:1e:9a:60:69:93:6c:65:b1:a3:45:
                    2a:e3:86:5f:bc:92:70:ee:f2:8b:14:d2:a8:25:46:
                    a9:0e:69:37:1a:b6:23:ff:26:78:a6:95:d2:28:1d:
                    4f:9b:86:bd:29:38:5d:88:24:0f:c9:17:2f:41:d3:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:6B:99:75:F3:F4:90:D6:23:7E:01:6A:C0:83:AD:F4:4F:46:12
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:46:76:fe:91:d0:50:9c:9c:d1:0a:aa:88:23:87:84:16:cc:
         34:53:a4:00:58:6f:bd:7a:35:1e:29:65:8b:ca:e2:03:e0:62:
         dc:23:38:b2:e6:fb:c1:92:9b:01:93:45:06:43:65:5e:48:c4:
         5a:99:73:5c:3a:d2:07:cf:1b:49:fb:d2:98:4d:c5:fa:38:e2:
         bf:14:98:56:55:5c:11:c3:cb:95:df:27:d5:1f:25:98:e7:af:
         3f:4d:4d:b0:e7:51:15:f8:ae:1f:67:2d:ec:c7:71:73:32:3f:
         7a:e2:8f:36:bc:58:f4:7a:d7:c0:11:60:de:ea:a3:9d:05:c8:
         10:8c:4f:74:5d:2a:18:f5:4b:79:02:65:2a:78:6a:3e:39:7b:
         ec:7e:ed:84:6a:0a:eb:e3:20:34:ca:43:64:d9:38:96:ee:5c:
         8d:5a:64:b7:bc:98:9f:bc:6a:25:05:e4:57:02:1a:e9:bf:3f:
         34:9d:66:93:5d:fa:31:13:30:a6:e8:6c:4b:20:bd:6c:bb:5a:
         d7:f4:b3:af:e9:06:63:ec:e1:30:64:e1:30:1f:2c:94:52:61:
         a2:0e:1a:6f:e4:83:95:af:4c:e8:52:5f:56:a3:e8:dd:8d:91:
         22:84:66:9d:1f:7c:af:20:ed:46:d0:70:1a:b3:8a:b6:23:27:
         f0:0d:47:4c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBZ8K7j3YRE7RrP9MNtvybPBpoogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFMDgxOTMyNzNFRUEyNkE4OUI4MzM0Mjg3OThBOUU2
RkZEMjk2QzAeFw0yNDA4MjYxOTI4MDZaFw0yNTA4MjUxOTMzMDZaMDMxMTAvBgNV
BAMTKDMxRkY2Qjk5NzVGM0Y0OTBENjIzN0UwMTZBQzA4M0FERjQ0RjQ2MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IXBOUfIPBRdm9fp4x08GumE4
zF8kwQGSisPXMX4sgKPMKwRQpuJqUMR+oz1uc3/79Sd5cUB0TeCmRMRS69UJ7uR/
jlhbUvY49soXkm5bs3/YW/RgqwFL+vp0li2nU/nc/LKsQBZ77hkwOqVQ3S3WNfT1
RSjE/tqZUWyQ9FUE0eDAdpAHcWnfK5mktzxMo0t4abwaZKoCGunj88EgqFsp5/9G
M5WxkP4aIL3ot3CXVxSa8r0b2fZ9zIhDGPYLmQdWLuU1m6c3HppgaZNsZbGjRSrj
hl+8knDu8osU0qglRqkOaTcatiP/JnimldIoHU+bhr0pOF2IJA/JFy9B08ftAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMf9rmXXz9JDWI34BasCDrfRPRhIwHwYDVR0j
BBgwFoAUZOCBkyc+6iaom4M0KHmKnm/9KWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC82NEUwODE5MzI3M0VFQTI2QTg5QjgzMzQyODc5OEE5RTZGRkQyOTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RTA4MTkzMjczRUVBMjZB
ODlCODMzNDI4Nzk4QTlFNkZGRDI5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzQzNTJlMzIzMzMwMmUzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeZUMA0GCSqGSIb3DQEBCwUAA4IBAQA1Rnb+kdBQ
nJzRCqqII4eEFsw0U6QAWG+9ejUeKWWLyuID4GLcIziy5vvBkpsBk0UGQ2VeSMRa
mXNcOtIHzxtJ+9KYTcX6OOK/FJhWVVwRw8uV3yfVHyWY568/TU2w51EV+K4fZy3s
x3FzMj964o82vFj0etfAEWDe6qOdBcgQjE90XSoY9Ut5AmUqeGo+OXvsfu2Eagrr
4yA0ykNk2TiW7lyNWmS3vJifvGolBeRXAhrpvz80nWaTXfoxEzCm6GxLIL1su1rX
9LOv6QZj7OEwZOEwHyyUUmGiDhpv5IOVr0zoUl9Wo+jdjZEihGadH3yvIO1G0HAa
s4q2IyfwDUdM
-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org