Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
File:                     34352e3233302e38352e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          F+hiBRE2mbc/7a+7zEybe1r7DCEHmYEPVDk0SQSDSbA=
Subject key identifier:   5A:80:1F:E0:93:58:CF:A2:CD:37:A8:4C:A9:3A:E9:12:CF:B9:70:65
Certificate issuer:       /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial:       1D0A30C978BCA74509785A17CEF78D21EF5C180E
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa
Signing time:             Mon 26 Aug 2024 19:33:06 +0000
ROA not before:           Mon 26 Aug 2024 19:28:06 +0000
ROA not after:            Mon 25 Aug 2025 19:33:06 +0000
asID:                     269359
IP address blocks:        45.230.85.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0a:30:c9:78:bc:a7:45:09:78:5a:17:ce:f7:8d:21:ef:5c:18:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
        Validity
            Not Before: Aug 26 19:28:06 2024 GMT
            Not After : Aug 25 19:33:06 2025 GMT
        Subject: CN=5A801FE09358CFA2CD37A84CA93AE912CFB97065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:83:89:77:53:21:6f:e5:15:85:26:42:15:
                    8a:f6:85:49:1c:ea:e5:2f:bc:7e:c0:4c:52:f3:53:
                    cb:2c:21:5f:e9:8f:f9:3c:85:e0:25:ea:12:81:05:
                    84:fb:20:80:72:9b:e3:54:1d:76:5f:1c:a1:5a:3d:
                    bc:ae:3d:3d:34:dc:45:db:d1:af:80:dd:16:3d:f2:
                    d7:84:36:8b:7f:88:cb:11:32:59:6a:20:d1:3a:dc:
                    99:d2:09:50:97:9e:f6:c8:3d:ec:d0:1f:10:12:17:
                    90:77:44:df:f5:3f:92:ea:e3:53:21:0f:a3:79:03:
                    a7:13:ea:e3:fb:25:69:0f:f7:df:01:83:63:39:4c:
                    6c:04:95:89:6e:6d:0b:c6:1b:2d:22:f3:a1:ae:81:
                    e5:a5:d5:65:0a:b4:ff:cd:37:cf:4a:5b:4d:43:26:
                    06:4e:43:aa:36:b0:24:e6:d7:5b:96:10:91:2d:af:
                    3c:7c:8f:1d:7e:35:43:54:89:a1:77:5a:7c:4a:3f:
                    ba:0f:0e:70:c8:9d:c1:9e:1c:2b:90:c5:f1:1d:92:
                    a8:45:85:89:05:9a:32:d9:58:4f:f8:8d:a6:6c:19:
                    af:9a:e1:d4:7f:65:58:64:04:4a:3c:34:d3:e1:e2:
                    f5:39:95:10:c8:18:46:14:c3:4c:ab:8d:82:83:04:
                    a9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:1F:E0:93:58:CF:A2:CD:37:A8:4C:A9:3A:E9:12:CF:B9:70:65
            X509v3 Authority Key Identifier:
                keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38352e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:fd:75:af:70:45:db:f8:7d:7a:ba:52:3f:99:cc:4c:00:
         90:ea:79:48:39:03:ed:45:25:b1:27:73:12:f2:e6:02:64:ca:
         6b:e2:35:93:68:c6:5e:0a:f3:06:26:c6:76:37:ea:ba:b4:98:
         23:0e:62:c0:ab:8e:5f:52:8c:76:d2:25:0e:23:0b:dc:29:77:
         2e:0d:54:15:14:b6:92:a9:ad:f6:3c:1e:bd:4d:ab:56:65:d9:
         d2:19:6b:86:19:e5:b1:90:82:ce:68:a9:6f:d1:ae:18:77:80:
         82:bd:5d:9f:fc:7f:44:1e:ac:4d:a9:b9:f1:40:35:97:2f:bb:
         4a:07:b2:b3:c0:3d:3a:46:f5:13:67:3e:e2:a2:ec:0e:80:45:
         72:27:70:f7:ed:a5:b5:fe:16:88:76:ae:24:5c:e2:02:b0:c6:
         a4:cb:99:e1:2d:86:ca:54:4d:a5:9e:d1:62:dd:f2:b8:5a:a1:
         47:97:5e:56:be:d9:a2:f8:c0:54:0d:39:8c:93:3a:32:64:df:
         b9:34:06:c3:e6:4f:a1:dd:29:dc:56:5d:85:b4:1d:76:10:65:
         09:56:9f:62:12:47:31:12:27:fa:6d:ae:1d:22:31:c0:e6:70:
         d2:8c:6f:f1:3b:d7:2f:b4:2f:29:85:ee:ae:7e:76:cf:98:a3:
         89:54:b8:0c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHQowyXi8p0UJeFoXzveNIe9cGA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFMDgxOTMyNzNFRUEyNkE4OUI4MzM0Mjg3OThBOUU2
RkZEMjk2QzAeFw0yNDA4MjYxOTI4MDZaFw0yNTA4MjUxOTMzMDZaMDMxMTAvBgNV
BAMTKDVBODAxRkUwOTM1OENGQTJDRDM3QTg0Q0E5M0FFOTEyQ0ZCOTcwNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuoOJd1Mhb+UVhSZCFYr2hUkc
6uUvvH7ATFLzU8ssIV/pj/k8heAl6hKBBYT7IIBym+NUHXZfHKFaPbyuPT003EXb
0a+A3RY98teENot/iMsRMllqINE63JnSCVCXnvbIPezQHxASF5B3RN/1P5Lq41Mh
D6N5A6cT6uP7JWkP998Bg2M5TGwElYlubQvGGy0i86GugeWl1WUKtP/NN89KW01D
JgZOQ6o2sCTm11uWEJEtrzx8jx1+NUNUiaF3WnxKP7oPDnDIncGeHCuQxfEdkqhF
hYkFmjLZWE/4jaZsGa+a4dR/ZVhkBEo8NNPh4vU5lRDIGEYUw0yrjYKDBKkdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWoAf4JNYz6LNN6hMqTrpEs+5cGUwHwYDVR0j
BBgwFoAUZOCBkyc+6iaom4M0KHmKnm/9KWwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC82NEUwODE5MzI3M0VFQTI2QTg5QjgzMzQyODc5OEE5RTZGRkQyOTZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RTA4MTkzMjczRUVBMjZB
ODlCODMzNDI4Nzk4QTlFNkZGRDI5NkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzQzNTJlMzIzMzMwMmUzODM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeZVMA0GCSqGSIb3DQEBCwUAA4IBAQB5o/11r3BF
2/h9erpSP5nMTACQ6nlIOQPtRSWxJ3MS8uYCZMpr4jWTaMZeCvMGJsZ2N+q6tJgj
DmLAq45fUox20iUOIwvcKXcuDVQVFLaSqa32PB69TatWZdnSGWuGGeWxkILOaKlv
0a4Yd4CCvV2f/H9EHqxNqbnxQDWXL7tKB7KzwD06RvUTZz7iouwOgEVyJ3D37aW1
/haIdq4kXOICsMaky5nhLYbKVE2lntFi3fK4WqFHl15Wvtmi+MBUDTmMkzoyZN+5
NAbD5k+h3SncVl2FtB12EGUJVp9iEkcxEif6ba4dIjHA5nDSjG/xO9cvtC8phe6u
fnbPmKOJVLgM
-----END CERTIFICATE-----
Generated at Mon Sep 2 12:49:58 2024 by rpki-client on console-ams.rpki-client.org