Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
File:                     34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier:          N+LU0/Y8TdUErD3vhg/kfRemsyvz67/MzDCyjVJW644=
Subject key identifier:   E5:A7:7C:78:E7:02:BD:32:4F:8F:1B:FC:02:FA:33:9F:A9:A2:49:5A
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       203EE33816F1533FD3D5717F385581BCA5672B04
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:44 +0000
ROA not before:           Mon 29 Jul 2024 15:47:44 +0000
ROA not after:            Mon 28 Jul 2025 15:52:44 +0000
asID:                     269096
IP address blocks:        45.175.248.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3e:e3:38:16:f1:53:3f:d3:d5:71:7f:38:55:81:bc:a5:67:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:44 2024 GMT
            Not After : Jul 28 15:52:44 2025 GMT
        Subject: CN=E5A77C78E702BD324F8F1BFC02FA339FA9A2495A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:7d:6d:52:be:8a:28:12:0f:9d:9d:fa:ca:
                    7e:a3:88:1f:c0:d6:8f:62:cb:58:c7:2c:d2:3c:cb:
                    ee:bb:28:b0:b9:fd:03:fc:81:b6:aa:7c:bc:bd:f5:
                    9a:d9:72:93:0c:7f:84:0c:ef:93:a0:aa:fc:4f:43:
                    32:3e:26:f0:49:31:e2:1b:1d:54:d3:2a:ba:e9:d2:
                    b9:bc:ea:fc:68:4c:ea:7d:f7:7d:20:b9:5f:25:9d:
                    98:2e:8e:a4:59:08:79:13:da:d5:51:91:10:0d:65:
                    a6:5f:2c:a4:43:ed:ab:cd:8c:6a:aa:7d:1f:2c:e3:
                    ba:07:fc:68:76:22:4b:da:84:89:c8:18:1a:d7:f1:
                    e3:29:93:14:81:8e:e4:49:6a:1f:9c:94:18:95:6c:
                    9d:52:10:83:6a:13:4b:cd:ae:75:4e:27:0c:38:93:
                    ec:9c:81:fa:f0:e4:37:4b:6e:aa:ef:0f:cf:ca:15:
                    85:b9:8c:78:ba:23:2a:b8:33:7b:96:a1:bb:b0:d4:
                    28:69:68:ee:75:bb:f5:a4:30:c0:14:ab:aa:de:a6:
                    72:6c:35:5f:21:d8:17:c7:1b:5e:cb:e4:ca:96:0e:
                    cf:08:c8:10:e6:98:1e:c3:a8:68:3d:19:88:a5:35:
                    2c:4a:84:8b:2e:74:a2:70:37:5a:f8:fb:15:6e:5e:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A7:7C:78:E7:02:BD:32:4F:8F:1B:FC:02:FA:33:9F:A9:A2:49:5A
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3137352e3234382e302f32322d3232203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:4f:e1:bb:40:f2:ee:1d:7b:24:87:45:34:9c:8f:26:ed:6d:
         13:92:24:0b:07:1d:76:ca:50:7b:5f:1c:4e:69:18:f9:12:12:
         6a:49:4e:af:f6:37:ef:4b:ba:dc:12:1c:cb:15:78:38:f3:82:
         b0:c4:7a:d8:0a:9b:e3:de:a5:42:88:95:41:05:e4:4c:2c:0c:
         c5:05:08:8e:e2:5b:08:d3:c0:d8:c0:99:70:78:bb:7e:ff:45:
         61:64:62:36:46:db:1a:c5:90:45:e3:e0:74:1a:b1:7f:20:99:
         98:6a:1a:a7:8e:f2:61:ca:f0:3a:d4:46:32:49:52:ff:ee:ac:
         6f:21:43:7f:9e:c9:ec:a6:39:b0:8d:f8:dd:26:f8:12:9d:78:
         04:c9:45:0f:28:b0:53:a4:93:11:d7:85:a3:2d:43:ce:dd:b9:
         d9:d6:8a:5f:ed:f7:10:6f:64:52:8b:a9:85:08:12:e5:92:9a:
         cc:d9:aa:2e:3e:97:45:40:d7:f6:d3:07:ad:94:9b:05:97:e2:
         a9:20:8e:68:07:3d:e9:a9:a0:2f:cc:be:ab:34:6e:a9:c8:f5:
         61:d0:b9:4e:20:ff:bb:a2:19:8b:52:75:15:d1:95:42:e6:5f:
         e7:0e:5e:02:28:b7:5c:62:43:03:4c:5b:02:e1:a1:2c:77:9e:
         7f:d2:55:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUID7jOBbxUz/T1XF/OFWBvKVnKwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDZBOTY4QjM5NDkyMzI4RjE2NEYxODUzMzkxMjk3RkI5
NzUyMjcyQTAeFw0yNDA3MjkxNTQ3NDRaFw0yNTA3MjgxNTUyNDRaMDMxMTAvBgNV
BAMTKEU1QTc3Qzc4RTcwMkJEMzI0RjhGMUJGQzAyRkEzMzlGQTlBMjQ5NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6n1tUr6KKBIPnZ36yn6jiB/A
1o9iy1jHLNI8y+67KLC5/QP8gbaqfLy99ZrZcpMMf4QM75OgqvxPQzI+JvBJMeIb
HVTTKrrp0rm86vxoTOp9930guV8lnZgujqRZCHkT2tVRkRANZaZfLKRD7avNjGqq
fR8s47oH/Gh2IkvahInIGBrX8eMpkxSBjuRJah+clBiVbJ1SEINqE0vNrnVOJww4
k+ycgfrw5DdLbqrvD8/KFYW5jHi6Iyq4M3uWobuw1ChpaO51u/WkMMAUq6repnJs
NV8h2BfHG17L5MqWDs8IyBDmmB7DqGg9GYilNSxKhIsudKJwN1r4+xVuXuG5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5ad8eOcCvTJPjxv8Avozn6miSVowHwYDVR0j
BBgwFoAU1qlos5SSMo8WTxhTORKX+5dSJyowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMC9ENkE5NjhCMzk0OTIzMjhGMTY0RjE4NTMzOTEyOTdGQjk3NTIyNzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2QTk2OEIzOTQ5MjMyOEYx
NjRGMTg1MzM5MTI5N0ZCOTc1MjI3MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzAv
MzQzNTJlMzEzNzM1MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItr/gwDQYJKoZIhvcNAQELBQADggEBAKBP4btA
8u4deySHRTScjybtbROSJAsHHXbKUHtfHE5pGPkSEmpJTq/2N+9LutwSHMsVeDjz
grDEetgKm+PepUKIlUEF5EwsDMUFCI7iWwjTwNjAmXB4u37/RWFkYjZG2xrFkEXj
4HQasX8gmZhqGqeO8mHK8DrURjJJUv/urG8hQ3+eyeymObCN+N0m+BKdeATJRQ8o
sFOkkxHXhaMtQ87dudnWil/t9xBvZFKLqYUIEuWSmszZqi4+l0VA1/bTB62UmwWX
4qkgjmgHPempoC/Mvqs0bqnI9WHQuU4g/7uiGYtSdRXRlULmX+cOXgIot1xiQwNM
WwLhoSx3nn/SVQU=
-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:12 2024 by rpki-client on console-fra.rpki-client.org