Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa (raw, json)
Hash identifier:          pHQZMOttoSZqU6gOsJsmwVG2LMnsiX9R0GtzNiTYv+U=
Subject key identifier:   2E:1E:1A:0A:5E:EB:78:FD:44:ED:90:B6:95:92:2B:99:CC:82:BA:CD
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       608C666EB429CCE3F0839CF987341E859A654178
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa
Signing time:             Thu 04 Apr 2024 13:20:11 +0000
ROA not before:           Thu 04 Apr 2024 13:15:11 +0000
ROA not after:            Thu 03 Apr 2025 13:20:11 +0000
asID:                     268364
IP address blocks:        45.238.240.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8c:66:6e:b4:29:cc:e3:f0:83:9c:f9:87:34:1e:85:9a:65:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Apr  4 13:15:11 2024 GMT
            Not After : Apr  3 13:20:11 2025 GMT
        Subject: CN=2E1E1A0A5EEB78FD44ED90B695922B99CC82BACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:c3:5b:5f:b2:74:9b:c4:ce:96:f5:98:bb:
                    ce:07:d6:80:2f:1b:3a:04:da:59:54:22:d8:46:77:
                    5d:cd:be:ef:b0:95:c3:b5:a6:e6:03:03:90:08:01:
                    43:ac:ef:a6:12:47:94:87:69:45:5b:c5:d0:3b:4d:
                    ab:39:7f:23:f4:2f:4b:2e:da:c5:8d:83:4c:4f:8f:
                    ad:9e:f1:ad:53:cf:af:a6:e2:01:6c:70:77:c2:98:
                    9e:d5:c8:3e:9f:20:c5:84:91:1a:43:e6:f9:09:73:
                    7c:2a:5a:9a:60:72:74:42:03:df:00:44:44:e4:c8:
                    9f:20:26:56:6b:a7:b1:ab:26:9d:9f:95:be:c7:8d:
                    58:ae:b2:77:c7:de:65:43:c9:d3:99:ce:8c:df:90:
                    96:1d:78:ab:66:0e:9f:25:13:5a:30:f5:10:3b:cf:
                    7a:7f:8a:1e:42:1d:e9:a3:3f:1e:02:00:83:7c:1b:
                    35:8c:b7:02:76:0a:e2:6c:04:b1:c0:20:c0:41:2c:
                    14:dd:29:85:75:7c:0e:83:55:ae:6f:85:79:f5:ff:
                    8e:9b:5f:90:cf:2b:46:ac:a7:3c:4e:c3:d2:d7:f4:
                    b4:20:49:b6:d9:cd:e5:bf:8f:37:7f:77:f8:83:53:
                    c9:81:59:ed:31:48:47:f7:41:b8:13:81:07:1d:85:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1E:1A:0A:5E:EB:78:FD:44:ED:90:B6:95:92:2B:99:CC:82:BA:CD
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32332d3233203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:32:c3:59:ac:03:6c:09:cb:f6:70:8e:42:b2:45:92:02:
         5b:c9:2b:29:44:b8:cf:aa:1a:d8:1e:16:86:51:95:ba:52:2f:
         63:67:24:be:23:05:de:ab:80:ab:70:e0:5e:5f:ef:87:f4:6d:
         13:6f:4d:7f:9c:fe:17:2f:1b:25:f5:d1:f3:01:47:ab:ae:ba:
         4c:74:69:02:13:d4:6c:14:0e:65:03:e2:de:32:64:1f:87:06:
         38:5f:94:f5:50:15:e7:df:29:0d:03:b7:7c:03:e0:d8:15:f9:
         b4:a5:3a:1e:3b:0b:a7:ea:a4:c8:62:ce:8e:6e:0c:11:c1:93:
         63:9b:af:0a:af:22:a3:6b:fc:a5:88:97:ec:d7:7b:b7:e0:46:
         31:5a:a4:c2:2f:49:5e:24:86:04:5c:15:40:58:ac:fb:85:53:
         79:42:7e:ab:1f:66:c6:ab:f0:13:f6:ef:c3:f5:56:d2:cc:a9:
         2c:ca:1d:1e:a4:9b:f6:9b:5f:04:e9:01:79:0a:d4:8c:fb:a5:
         35:3f:b6:d5:f9:85:47:88:bc:a2:2d:f4:e5:73:b7:7e:b2:82:
         40:55:2c:77:ba:77:b7:08:88:f0:39:30:0f:2d:f3:54:69:72:
         2d:13:53:63:b5:e4:45:35:73:32:65:98:75:e7:d6:e2:97:7c:
         24:17:cd:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYIxmbrQpzOPwg5z5hzQehZplQXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ0NUEyOTQwNjM0RURDOTcxRDQxODVFODgzNzk2RjFG
RkEwNTNEMTAeFw0yNDA0MDQxMzE1MTFaFw0yNTA0MDMxMzIwMTFaMDMxMTAvBgNV
BAMTKDJFMUUxQTBBNUVFQjc4RkQ0NEVEOTBCNjk1OTIyQjk5Q0M4MkJBQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7sNbX7J0m8TOlvWYu84H1oAv
GzoE2llUIthGd13Nvu+wlcO1puYDA5AIAUOs76YSR5SHaUVbxdA7Tas5fyP0L0su
2sWNg0xPj62e8a1Tz6+m4gFscHfCmJ7VyD6fIMWEkRpD5vkJc3wqWppgcnRCA98A
RETkyJ8gJlZrp7GrJp2flb7HjViusnfH3mVDydOZzozfkJYdeKtmDp8lE1ow9RA7
z3p/ih5CHemjPx4CAIN8GzWMtwJ2CuJsBLHAIMBBLBTdKYV1fA6DVa5vhXn1/46b
X5DPK0aspzxOw9LX9LQgSbbZzeW/jzd/d/iDU8mBWe0xSEf3QbgTgQcdhT6dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULh4aCl7reP1E7ZC2lZIrmcyCus0wHwYDVR0j
BBgwFoAUtEWilAY07clx1BheiDeW8f+gU9EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMS9CNDQ1QTI5NDA2MzRFREM5NzFENDE4NUU4ODM3OTZGMUZGQTA1M0QxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0NDVBMjk0MDYzNEVEQzk3
MUQ0MTg1RTg4Mzc5NkYxRkZBMDUzRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxaEU3aXhwdXRGTmt6N1Rpa05pTGVxbldjU0VuaW9FaUdKU2t3SFkzWkJMLzEv
MzQzNTJlMzIzMzM4MmUzMjM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7vAwDQYJKoZIhvcNAQELBQADggEBAArAMsNZ
rANsCcv2cI5CskWSAlvJKylEuM+qGtgeFoZRlbpSL2NnJL4jBd6rgKtw4F5f74f0
bRNvTX+c/hcvGyX10fMBR6uuukx0aQIT1GwUDmUD4t4yZB+HBjhflPVQFeffKQ0D
t3wD4NgV+bSlOh47C6fqpMhizo5uDBHBk2ObrwqvIqNr/KWIl+zXe7fgRjFapMIv
SV4khgRcFUBYrPuFU3lCfqsfZsar8BP278P1VtLMqSzKHR6km/abXwTpAXkK1Iz7
pTU/ttX5hUeIvKIt9OVzt36ygkBVLHe6d7cIiPA5MA8t81Rpci0TU2O15EU1czJl
mHXn1uKXfCQXzQ4=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:54:43 2024 by rpki-client on console-ams.rpki-client.org