Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38322e302f32332d3233203d3e20323731363237.roa
File:                     34352e3137382e38322e302f32332d3233203d3e20323731363237.roa (raw, json)
Hash identifier:          uj0nm6SnuHMFjb5Moq+b+auKyHFh9f7cNnJtenOFybA=
Subject key identifier:   95:48:7F:10:76:4B:AA:AE:45:A2:39:AB:BB:66:A3:F5:47:F0:1A:DB
Certificate issuer:       /CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
Certificate serial:       0BB31D998EEA0FDB6ADD1C571F15608D582E7749
Authority key identifier: AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38322e302f32332d3233203d3e20323731363237.roa
Signing time:             Mon 18 Nov 2024 16:00:40 +0000
ROA not before:           Mon 18 Nov 2024 15:55:40 +0000
ROA not after:            Mon 17 Nov 2025 16:00:40 +0000
asID:                     271627
IP address blocks:        45.178.82.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b3:1d:99:8e:ea:0f:db:6a:dd:1c:57:1f:15:60:8d:58:2e:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
        Validity
            Not Before: Nov 18 15:55:40 2024 GMT
            Not After : Nov 17 16:00:40 2025 GMT
        Subject: CN=95487F10764BAAAE45A239ABBB66A3F547F01ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:07:06:19:6c:01:71:b3:4f:24:9c:35:a7:
                    c0:30:80:e2:c8:00:de:aa:50:c1:cb:8d:93:3d:90:
                    a5:1d:ac:83:b5:df:02:13:c4:57:f9:cb:b0:cf:f1:
                    d9:f6:a3:2c:b8:af:3d:41:69:65:ec:70:1b:78:94:
                    7b:f3:06:36:cb:f3:56:40:53:d2:92:0c:02:fb:38:
                    b2:eb:b8:27:9e:d3:63:4d:c6:6c:3f:1c:44:eb:89:
                    38:b8:76:81:d9:10:e6:0a:92:fe:f2:f0:c4:1b:17:
                    40:b6:80:90:9a:fe:e6:7f:23:89:b5:e9:f3:2b:ab:
                    80:e7:02:1e:ae:f3:2b:57:fc:11:ee:15:22:47:c3:
                    1d:01:47:e7:e6:06:39:9d:05:1e:fd:6a:0c:58:0a:
                    e8:be:cf:89:c5:6f:94:42:ba:ad:4e:52:5e:48:2f:
                    60:24:7c:e2:15:4e:4d:93:a0:31:d0:f9:33:80:0a:
                    d9:18:0c:99:20:02:ea:66:e2:5c:b4:22:c4:88:87:
                    aa:c8:e1:6c:28:36:f6:f9:95:17:ca:2c:bf:c1:09:
                    fb:1f:46:2d:94:48:44:e5:3b:52:81:31:10:f4:13:
                    5d:3e:00:57:b3:6a:30:a8:aa:85:d2:b9:af:1f:4d:
                    cf:8d:eb:96:a3:b0:85:1e:86:59:12:64:bc:6d:db:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:7F:10:76:4B:AA:AE:45:A2:39:AB:BB:66:A3:F5:47:F0:1A:DB
            X509v3 Authority Key Identifier:
                keyid:AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38322e302f32332d3233203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:6a:9c:0e:e3:3d:d1:aa:11:4c:36:ee:11:44:f7:cd:48:
         60:5d:e7:7a:0e:a6:54:08:0f:16:a8:e3:34:5e:bb:1c:b2:c3:
         2e:bd:8c:ef:53:40:ed:5f:49:40:cd:a5:6c:85:7d:0e:fc:5d:
         56:0b:7c:8e:a3:86:94:28:7a:4f:9e:1a:63:5a:95:7e:4b:ff:
         fc:94:d3:b9:e2:6a:05:a4:94:d7:ee:60:53:f8:00:a2:fc:82:
         04:d7:01:6b:33:95:a8:c2:8b:14:41:72:64:80:42:57:b7:23:
         cf:d6:77:84:83:0a:47:0a:dc:7c:49:22:61:bb:be:fb:84:15:
         7b:e4:2b:10:3b:14:1d:dc:8b:15:19:38:f4:c2:bb:0f:47:52:
         a5:6d:31:75:22:9b:a9:29:e0:b6:cc:79:e3:65:00:b1:a7:ca:
         02:9e:12:5a:66:5f:44:03:8d:16:2f:04:ec:08:78:3f:9a:11:
         3b:55:85:0f:8f:1b:58:b6:91:3e:ee:a0:3c:c6:82:cf:43:52:
         fe:5a:40:f6:5e:fd:e9:ad:42:ef:ec:f8:60:1e:29:5b:bc:37:
         b3:77:3d:72:91:1e:a8:c4:59:7f:b3:9f:f1:ff:fe:94:10:75:
         7c:ce:2c:ed:10:0d:c0:22:99:fb:66:3d:bf:11:5f:75:19:8e:
         74:60:60:81
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC7MdmY7qD9tq3RxXHxVgjVgud0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQyMTcxNjNFQjE5NTM4MzlBMTZFNkY3RERBMUY0MjRB
MzA2RDBBQzAeFw0yNDExMTgxNTU1NDBaFw0yNTExMTcxNjAwNDBaMDMxMTAvBgNV
BAMTKDk1NDg3RjEwNzY0QkFBQUU0NUEyMzlBQkJCNjZBM0Y1NDdGMDFBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuAQcGGWwBcbNPJJw1p8AwgOLI
AN6qUMHLjZM9kKUdrIO13wITxFf5y7DP8dn2oyy4rz1BaWXscBt4lHvzBjbL81ZA
U9KSDAL7OLLruCee02NNxmw/HETriTi4doHZEOYKkv7y8MQbF0C2gJCa/uZ/I4m1
6fMrq4DnAh6u8ytX/BHuFSJHwx0BR+fmBjmdBR79agxYCui+z4nFb5RCuq1OUl5I
L2AkfOIVTk2ToDHQ+TOACtkYDJkgAupm4ly0IsSIh6rI4WwoNvb5lRfKLL/BCfsf
Ri2USETlO1KBMRD0E10+AFezajCoqoXSua8fTc+N65ajsIUehlkSZLxt26H7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlUh/EHZLqq5Fojmru2aj9UfwGtswHwYDVR0j
BBgwFoAUrSFxY+sZU4OaFub33aH0JKMG0KwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0czdFNXOVBuRm13OEhGVlphYXNTWTlKZXJuSGJvbmY2NURqZXE3b0E0
cEcvMC9BRDIxNzE2M0VCMTk1MzgzOUExNkU2RjdEREExRjQyNEEzMDZEMEFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FEMjE3MTYzRUIxOTUzODM5
QTE2RTZGN0REQTFGNDI0QTMwNkQwQUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dHM3RTVzlQbkZtdzhIRlZaYWFzU1k5SmVybkhib25mNjVEamVxN29BNHBHLzAv
MzQzNTJlMzEzNzM4MmUzODMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzYzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbJSMA0GCSqGSIb3DQEBCwUAA4IBAQAGw2qcDuM9
0aoRTDbuEUT3zUhgXed6DqZUCA8WqOM0XrscssMuvYzvU0DtX0lAzaVshX0O/F1W
C3yOo4aUKHpPnhpjWpV+S//8lNO54moFpJTX7mBT+ACi/IIE1wFrM5WowosUQXJk
gEJXtyPP1neEgwpHCtx8SSJhu777hBV75CsQOxQd3IsVGTj0wrsPR1KlbTF1Ipup
KeC2zHnjZQCxp8oCnhJaZl9EA40WLwTsCHg/mhE7VYUPjxtYtpE+7qA8xoLPQ1L+
WkD2Xv3prULv7PhgHilbvDezdz1ykR6oxFl/s5/x//6UEHV8ziztEA3AIpn7Zj2/
EV91GY50YGCB
-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:52 2024 by rpki-client on console-ams.rpki-client.org