Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa (raw, json)
Hash identifier:          ruVCmPAwDDg8yxiSHT3mSExzsm/RlTPqWNqbp83buHE=
Subject key identifier:   79:DF:EA:35:CD:24:D7:B0:33:A4:B2:6C:12:6F:EA:A2:08:22:92:26
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       192632EB6867543CA4993AC903CDF7021D8F1224
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa
Signing time:             Mon 17 Jun 2024 01:17:06 +0000
ROA not before:           Mon 17 Jun 2024 01:12:06 +0000
ROA not after:            Mon 16 Jun 2025 01:17:06 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:32:eb:68:67:54:3c:a4:99:3a:c9:03:cd:f7:02:1d:8f:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Jun 17 01:12:06 2024 GMT
            Not After : Jun 16 01:17:06 2025 GMT
        Subject: CN=79DFEA35CD24D7B033A4B26C126FEAA208229226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:8e:a5:9b:50:40:a7:cb:32:12:5a:9b:14:
                    92:e9:92:cf:06:ec:e1:75:58:27:d9:c7:18:7d:45:
                    60:6a:b0:fa:85:ed:6e:e0:55:06:db:ed:42:bc:21:
                    ba:c3:b2:f7:9c:6e:54:9c:78:ab:c4:85:f6:b2:8b:
                    98:dd:46:ba:0b:76:d7:42:64:2f:a5:99:08:06:b8:
                    56:5f:3f:dc:ea:0b:1d:b7:29:1a:18:6e:97:f5:8b:
                    db:78:7c:3a:3c:dd:8e:e2:88:b3:a0:d0:47:1e:24:
                    ca:7b:3e:fc:7e:d3:3a:bb:91:b5:20:7f:f9:b3:8b:
                    bb:16:bc:c6:db:5d:a9:f4:5b:14:79:17:00:bc:c0:
                    66:73:68:45:24:b6:f6:da:c7:32:cd:17:b8:e4:14:
                    b4:ab:54:82:2a:b0:72:e2:be:92:aa:e8:1e:1b:f2:
                    a1:fc:53:b8:28:e9:0a:13:68:0e:c3:3c:b1:f2:f0:
                    b2:47:dc:6f:88:b9:9b:f6:50:5b:46:dd:a9:b2:ad:
                    7a:a7:b9:c1:4d:97:53:28:b6:e7:c9:c1:dd:4e:49:
                    84:a4:31:10:6c:14:33:2d:5d:87:49:92:02:ac:84:
                    6c:27:fb:4e:6a:25:fd:69:91:f2:c6:28:a7:83:c2:
                    86:3d:60:6f:a0:d4:12:f4:ee:64:b4:16:b1:a0:96:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DF:EA:35:CD:24:D7:B0:33:A4:B2:6C:12:6F:EA:A2:08:22:92:26
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3234203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:83:0e:75:06:16:0b:d8:2b:1e:17:62:4d:bd:c5:69:b3:ca:
         23:12:5c:00:3c:cd:f2:99:3d:65:ed:4a:04:91:61:f8:58:a4:
         fa:04:31:01:77:79:a2:a2:c1:c1:f2:9e:42:32:bd:fa:5f:20:
         79:a4:a3:59:8f:1d:14:bb:ad:ec:e3:84:fc:9a:7b:0e:58:9e:
         ee:a8:eb:4e:98:45:6e:dc:17:7b:d3:e0:92:5e:f1:a9:a4:63:
         54:97:cc:87:3b:64:43:bd:29:2d:02:0f:b5:e5:e5:b1:84:ce:
         9e:37:3a:b1:0a:55:cc:04:8f:a8:8b:f7:2d:de:bc:11:5c:ad:
         82:11:c2:87:39:d4:7e:cc:a5:ae:c1:48:b2:8e:61:1e:26:a1:
         75:c4:db:e5:28:9a:29:bc:7e:16:fe:a4:85:d7:fc:3d:c7:93:
         21:7b:53:17:df:0c:01:44:c4:27:d1:13:f0:7a:b0:b0:95:41:
         a8:ae:ac:8c:dc:0f:d0:30:f7:ae:a0:d9:aa:8a:5d:f9:4a:ae:
         a2:9e:fe:f1:63:7b:63:47:de:7e:8e:1c:72:d9:18:d9:0d:a1:
         05:0a:df:43:ca:89:f6:38:15:c1:c0:a4:c8:d6:fb:f3:08:fe:
         96:dd:bc:28:3a:f4:16:84:b5:ef:67:f7:39:6b:16:76:bc:0c:
         a1:e9:b8:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGSYy62hnVDykmTrJA833Ah2PEiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ0NUEyOTQwNjM0RURDOTcxRDQxODVFODgzNzk2RjFG
RkEwNTNEMTAeFw0yNDA2MTcwMTEyMDZaFw0yNTA2MTYwMTE3MDZaMDMxMTAvBgNV
BAMTKDc5REZFQTM1Q0QyNEQ3QjAzM0E0QjI2QzEyNkZFQUEyMDgyMjkyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxo6lm1BAp8syElqbFJLpks8G
7OF1WCfZxxh9RWBqsPqF7W7gVQbb7UK8IbrDsvecblSceKvEhfayi5jdRroLdtdC
ZC+lmQgGuFZfP9zqCx23KRoYbpf1i9t4fDo83Y7iiLOg0EceJMp7Pvx+0zq7kbUg
f/mzi7sWvMbbXan0WxR5FwC8wGZzaEUktvbaxzLNF7jkFLSrVIIqsHLivpKq6B4b
8qH8U7go6QoTaA7DPLHy8LJH3G+IuZv2UFtG3amyrXqnucFNl1MotufJwd1OSYSk
MRBsFDMtXYdJkgKshGwn+05qJf1pkfLGKKeDwoY9YG+g1BL07mS0FrGglv3JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUed/qNc0k17AzpLJsEm/qoggikiYwHwYDVR0j
BBgwFoAUtEWilAY07clx1BheiDeW8f+gU9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMS9CNDQ1QTI5NDA2MzRFREM5NzFENDE4NUU4ODM3OTZGMUZGQTA1M0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NDVBMjk0MDYzNEVEQzk3
MUQ0MTg1RTg4Mzc5NkYxRkZBMDUzRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxaEU3aXhwdXRGTmt6N1Rpa05pTGVxbldjU0VuaW9FaUdKU2t3SFkzWkJMLzEv
MzQzNTJlMzIzMzM4MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7vAwDQYJKoZIhvcNAQELBQADggEBAHODDnUG
FgvYKx4XYk29xWmzyiMSXAA8zfKZPWXtSgSRYfhYpPoEMQF3eaKiwcHynkIyvfpf
IHmko1mPHRS7rezjhPyaew5Ynu6o606YRW7cF3vT4JJe8amkY1SXzIc7ZEO9KS0C
D7Xl5bGEzp43OrEKVcwEj6iL9y3evBFcrYIRwoc51H7Mpa7BSLKOYR4moXXE2+Uo
mim8fhb+pIXX/D3HkyF7UxffDAFExCfRE/B6sLCVQaiurIzcD9Aw966g2aqKXflK
rqKe/vFje2NH3n6OHHLZGNkNoQUK30PKifY4FcHApMjW+/MI/pbdvCg69BaEte9n
9zlrFna8DKHpuAc=
-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:15 2024 by rpki-client on console-fra.rpki-client.org