Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa
File:                     34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa (raw, json)
Hash identifier:          jCbRCmEHfU+808o/nU+TuJi8rgJdH6jT41gL2pQkZ18=
Subject key identifier:   D5:4E:EE:82:5B:3A:8D:84:7D:EC:6C:3E:08:C4:46:E0:DE:DC:47:F4
Certificate issuer:       /CN=09A777C93AD197CE3C74B4E53C10D9AA6E308485
Certificate serial:       3926488F07702D362D885015C0ACFF6B24857640
Authority key identifier: 09:A7:77:C9:3A:D1:97:CE:3C:74:B4:E5:3C:10:D9:AA:6E:30:84:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa
Signing time:             Thu 04 Apr 2024 16:45:03 +0000
ROA not before:           Thu 04 Apr 2024 16:40:03 +0000
ROA not after:            Thu 03 Apr 2025 16:45:03 +0000
asID:                     268770
IP address blocks:        45.172.128.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:26:48:8f:07:70:2d:36:2d:88:50:15:c0:ac:ff:6b:24:85:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A777C93AD197CE3C74B4E53C10D9AA6E308485
        Validity
            Not Before: Apr  4 16:40:03 2024 GMT
            Not After : Apr  3 16:45:03 2025 GMT
        Subject: CN=D54EEE825B3A8D847DEC6C3E08C446E0DEDC47F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:bf:e5:b0:2b:3c:8b:02:33:21:c2:2f:08:
                    23:db:1f:99:db:c0:aa:8e:b2:e1:a1:67:53:03:f2:
                    99:2d:be:cd:05:7f:1a:76:61:60:96:65:43:87:7b:
                    cd:46:f6:e8:1c:15:42:41:d9:e9:04:32:6d:b1:3b:
                    56:81:b9:15:d6:54:9e:d0:c2:b9:fd:17:b3:73:91:
                    bc:22:f6:ac:12:1e:b6:10:8a:c6:2a:d5:dd:7b:4e:
                    ee:70:8a:5d:55:ca:c2:49:c4:09:d6:c8:93:09:5b:
                    5c:14:03:87:25:1e:91:fb:28:c4:e6:11:87:05:2c:
                    63:1b:d4:fb:40:28:85:f9:1a:c8:c7:d9:9f:13:82:
                    33:0a:3b:27:44:e0:e2:97:20:71:b0:da:b4:6f:4c:
                    0f:ec:08:8d:cd:51:ad:f8:71:bd:24:b6:d7:99:8a:
                    36:5c:b8:6a:e0:ea:8a:c8:35:1c:36:bb:7b:43:09:
                    23:4f:00:e2:ed:24:71:c3:05:00:18:fc:d9:10:3a:
                    94:23:c9:88:c5:7d:6f:51:3f:35:7f:1a:d3:cd:b5:
                    42:15:06:06:f8:03:17:a3:a0:a6:0b:39:0d:2d:1b:
                    bd:a3:27:59:01:2d:29:22:1f:69:f6:75:66:9e:e5:
                    0f:a3:9a:6f:01:7b:85:eb:f2:a8:9c:23:16:0a:da:
                    d6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4E:EE:82:5B:3A:8D:84:7D:EC:6C:3E:08:C4:46:E0:DE:DC:47:F4
            X509v3 Authority Key Identifier:
                keyid:09:A7:77:C9:3A:D1:97:CE:3C:74:B4:E5:3C:10:D9:AA:6E:30:84:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09A777C93AD197CE3C74B4E53C10D9AA6E308485.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjsbkHEGm7A7rGnEQkESYFgApErpRCYF6V2fCzJcA7Ra/1/34352e3137322e3132382e302f32322d3234203d3e20323638373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:16:2d:1b:7d:9a:ee:1c:ec:24:9a:da:45:b9:b4:ed:d1:ea:
         04:b0:32:4f:29:e6:e3:49:01:07:f8:ba:47:03:0b:5e:bd:01:
         a1:93:25:de:48:94:fe:ba:f3:81:1b:8b:d2:7a:59:f9:a4:16:
         fc:2c:b5:6d:7f:19:c7:b4:ed:fb:e1:3b:47:08:c3:a5:13:8b:
         10:00:d7:b8:38:ea:34:a4:00:c4:f1:64:0a:f0:9f:cb:61:f8:
         d1:73:19:7a:50:b4:a2:fc:67:cd:e5:81:9b:7a:98:46:88:1c:
         da:d5:04:93:b8:10:26:82:38:66:7d:f0:77:fb:47:12:21:11:
         a9:05:a6:94:6f:fd:25:e5:46:79:5c:5b:ec:f0:4f:42:3f:bf:
         ad:cd:56:9a:b7:dd:46:ee:a3:b7:3e:c1:62:64:2f:03:5b:07:
         db:52:50:82:2b:3e:a7:3f:2b:80:d2:3f:0f:7e:be:2c:44:1b:
         ed:25:91:9a:de:35:86:b4:eb:ce:9e:92:fd:fe:94:51:7e:c9:
         58:2e:6d:be:c3:8b:de:71:ab:43:95:fc:69:36:06:d3:cd:33:
         62:13:e9:6a:e3:7a:d1:61:79:ad:f2:e4:5b:53:a1:a2:06:18:
         f5:78:da:3d:50:4d:ad:a7:7f:30:35:8e:b3:5d:fb:82:72:7b:
         bd:eb:e8:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOSZIjwdwLTYtiFAVwKz/aySFdkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNzc3QzkzQUQxOTdDRTNDNzRCNEU1M0MxMEQ5QUE2
RTMwODQ4NTAeFw0yNDA0MDQxNjQwMDNaFw0yNTA0MDMxNjQ1MDNaMDMxMTAvBgNV
BAMTKEQ1NEVFRTgyNUIzQThEODQ3REVDNkMzRTA4QzQ0NkUwREVEQzQ3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgDL/lsCs8iwIzIcIvCCPbH5nb
wKqOsuGhZ1MD8pktvs0Ffxp2YWCWZUOHe81G9ugcFUJB2ekEMm2xO1aBuRXWVJ7Q
wrn9F7Nzkbwi9qwSHrYQisYq1d17Tu5wil1VysJJxAnWyJMJW1wUA4clHpH7KMTm
EYcFLGMb1PtAKIX5GsjH2Z8TgjMKOydE4OKXIHGw2rRvTA/sCI3NUa34cb0ktteZ
ijZcuGrg6orINRw2u3tDCSNPAOLtJHHDBQAY/NkQOpQjyYjFfW9RPzV/GtPNtUIV
Bgb4AxejoKYLOQ0tG72jJ1kBLSkiH2n2dWae5Q+jmm8Be4Xr8qicIxYK2tZBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1U7ugls6jYR97Gw+CMRG4N7cR/QwHwYDVR0j
BBgwFoAUCad3yTrRl848dLTlPBDZqm4whIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGpzYmtIRUdtN0E3ckduRVFrRVNZRmdBcEVycFJDWUY2VjJmQ3pKY0E3
UmEvMS8wOUE3NzdDOTNBRDE5N0NFM0M3NEI0RTUzQzEwRDlBQTZFMzA4NDg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5QTc3N0M5M0FEMTk3Q0Uz
Qzc0QjRFNTNDMTBEOUFBNkUzMDg0ODUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hqc2JrSEVHbTdBN3JHbkVRa0VTWUZnQXBFcnBSQ1lGNlYyZkN6SmNBN1JhLzEv
MzQzNTJlMzEzNzMyMmUzMTMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrIAwDQYJKoZIhvcNAQELBQADggEBALEWLRt9
mu4c7CSa2kW5tO3R6gSwMk8p5uNJAQf4ukcDC169AaGTJd5IlP6684Ebi9J6Wfmk
FvwstW1/Gce07fvhO0cIw6UTixAA17g46jSkAMTxZArwn8th+NFzGXpQtKL8Z83l
gZt6mEaIHNrVBJO4ECaCOGZ98Hf7RxIhEakFppRv/SXlRnlcW+zwT0I/v63NVpq3
3Ubuo7c+wWJkLwNbB9tSUIIrPqc/K4DSPw9+vixEG+0lkZreNYa0686ekv3+lFF+
yVgubb7Di95xq0OV/Gk2BtPNM2IT6WrjetFhea3y5FtToaIGGPV42j1QTa2nfzA1
jrNd+4Jye73r6Ks=
-----END CERTIFICATE-----
Generated at Thu Aug 1 04:29:55 2024 by rpki-client on console-ams.rpki-client.org