Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32332d3233203d3e20323639343536.roa
File:                     34352e3138372e35322e302f32332d3233203d3e20323639343536.roa (raw, json)
Hash identifier:          MS63CynOTSsWyf1UqTBDKvbYyy0ytEpyGsqXmKcjYqA=
Subject key identifier:   73:A9:24:D0:B9:CE:21:45:D2:8A:28:F8:F8:47:E2:EC:5B:37:77:6C
Certificate issuer:       /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial:       7CEFEAC0E88EB18B02DE3F8B5D21BA8846106AFF
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32332d3233203d3e20323639343536.roa
Signing time:             Tue 26 Dec 2023 15:27:23 +0000
ROA not before:           Tue 26 Dec 2023 15:22:23 +0000
ROA not after:            Tue 24 Dec 2024 15:27:23 +0000
asID:                     269456
IP address blocks:        45.187.52.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ef:ea:c0:e8:8e:b1:8b:02:de:3f:8b:5d:21:ba:88:46:10:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
        Validity
            Not Before: Dec 26 15:22:23 2023 GMT
            Not After : Dec 24 15:27:23 2024 GMT
        Subject: CN=73A924D0B9CE2145D28A28F8F847E2EC5B37776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:c3:72:95:02:a4:ca:9d:7f:78:cf:77:4c:
                    37:02:81:c4:e9:b7:95:2c:59:5d:17:fb:0b:d4:04:
                    5c:bf:93:55:41:14:31:f5:94:a5:ea:10:08:19:86:
                    81:6d:7a:7c:b6:36:f7:c9:12:6b:99:58:1a:b6:a7:
                    3d:f8:4d:ae:8b:08:5c:27:7c:3e:ef:1c:34:40:4a:
                    10:5d:90:d2:db:0d:86:eb:ee:dc:8a:eb:e1:96:18:
                    d7:f1:f6:32:3f:e2:1a:43:7c:18:63:7e:2e:8e:25:
                    b2:e8:f9:ed:50:f0:94:97:56:5d:49:47:7b:72:e4:
                    b6:21:8c:9e:57:09:1e:48:d4:c2:30:ba:47:88:6b:
                    12:e3:2d:29:e7:9b:c6:ab:e5:71:a2:73:05:2b:1a:
                    06:ff:cb:a9:c4:7a:bb:92:de:9a:9c:f4:ec:49:d1:
                    c1:55:57:77:e6:88:e2:f7:6e:4f:3d:11:5a:02:74:
                    26:da:af:c3:62:bc:48:88:6a:f7:2b:ee:9f:5a:46:
                    69:89:ca:d3:18:20:27:a1:6d:26:0a:ac:d6:09:26:
                    2e:b9:12:cb:b7:63:8a:dc:2c:fa:52:f4:88:af:d4:
                    f1:a2:c1:1a:7f:42:2a:51:0d:3f:33:c6:df:c2:76:
                    b1:a2:ad:5a:9c:e6:a6:b7:03:33:a5:0e:f3:52:70:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A9:24:D0:B9:CE:21:45:D2:8A:28:F8:F8:47:E2:EC:5B:37:77:6C
            X509v3 Authority Key Identifier:
                keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32332d3233203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:f9:03:04:57:4b:ac:76:8d:c6:d3:0a:f7:97:80:ec:64:07:
         73:5a:7c:f0:a7:6b:05:4c:e6:86:de:55:3d:3c:9f:53:55:6b:
         5f:84:69:b2:35:27:45:12:e0:1e:07:60:01:e2:f9:58:e5:b8:
         89:fe:67:47:1a:2f:bc:09:ab:76:d7:d2:f0:46:05:e6:0b:bd:
         70:dc:26:2d:42:28:37:c2:a6:c6:f9:f2:a9:a9:c9:6e:a5:54:
         da:d4:95:f1:bd:a4:a9:01:75:45:ef:0d:5a:ab:91:b0:1e:55:
         09:23:ca:6a:a8:1e:62:ee:99:43:ad:4d:4b:14:f8:1d:cf:f6:
         e8:fe:6c:f0:64:a9:6b:ea:b3:13:94:84:13:c1:09:74:58:ce:
         7d:f4:a2:5c:db:0f:b8:18:fc:fa:0f:5e:c8:c0:34:51:4b:2b:
         6e:14:15:d1:1a:01:6a:99:c4:7b:28:e5:be:f7:75:c7:3e:15:
         64:16:04:79:52:d5:63:be:64:6a:a5:80:cf:a7:ef:bc:e1:e7:
         74:78:54:7b:53:ff:10:2d:5f:ae:2e:b7:87:0e:f6:9b:a3:62:
         84:20:1b:38:9f:b1:43:1d:0f:9e:3d:85:4e:67:83:2d:26:84:
         72:22:38:14:72:3f:63:6a:42:c6:4e:47:a0:02:c8:bd:75:26:
         e7:94:4b:ba
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfO/qwOiOsYsC3j+LXSG6iEYQav8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5NkRENjZGRDc4NUJCRkUwRjE0QjZDODNBN0I1RjY5
RjM3NDM5RTAeFw0yMzEyMjYxNTIyMjNaFw0yNDEyMjQxNTI3MjNaMDMxMTAvBgNV
BAMTKDczQTkyNEQwQjlDRTIxNDVEMjhBMjhGOEY4NDdFMkVDNUIzNzc3NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNsNylQKkyp1/eM93TDcCgcTp
t5UsWV0X+wvUBFy/k1VBFDH1lKXqEAgZhoFteny2NvfJEmuZWBq2pz34Ta6LCFwn
fD7vHDRAShBdkNLbDYbr7tyK6+GWGNfx9jI/4hpDfBhjfi6OJbLo+e1Q8JSXVl1J
R3ty5LYhjJ5XCR5I1MIwukeIaxLjLSnnm8ar5XGicwUrGgb/y6nEeruS3pqc9OxJ
0cFVV3fmiOL3bk89EVoCdCbar8NivEiIavcr7p9aRmmJytMYICehbSYKrNYJJi65
Esu3Y4rcLPpS9Iiv1PGiwRp/QipRDT8zxt/CdrGirVqc5qa3AzOlDvNScAy1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUc6kk0LnOIUXSiij4+Efi7Fs3d2wwHwYDVR0j
BBgwFoAUS5bdZv14W7/g8Utsg6e19p83Q54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBKaU1MZDc3b2tlOWlUU0Rua1UxSHlnWEtxZDdYMmR0OXpxeVBEMWhY
dVIvMC80Qjk2REQ2NkZENzg1QkJGRTBGMTRCNkM4M0E3QjVGNjlGMzc0MzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCOTZERDY2RkQ3ODVCQkZF
MEYxNEI2QzgzQTdCNUY2OUYzNzQzOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwSmlNTGQ3N29rZTlpVFNEbmtVMUh5Z1hLcWQ3WDJkdDl6cXlQRDFoWHVSLzAv
MzQzNTJlMzEzODM3MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbs0MA0GCSqGSIb3DQEBCwUAA4IBAQCu+QMEV0us
do3G0wr3l4DsZAdzWnzwp2sFTOaG3lU9PJ9TVWtfhGmyNSdFEuAeB2AB4vlY5biJ
/mdHGi+8Cat219LwRgXmC71w3CYtQig3wqbG+fKpqclupVTa1JXxvaSpAXVF7w1a
q5GwHlUJI8pqqB5i7plDrU1LFPgdz/bo/mzwZKlr6rMTlIQTwQl0WM599KJc2w+4
GPz6D17IwDRRSytuFBXRGgFqmcR7KOW+93XHPhVkFgR5UtVjvmRqpYDPp++84ed0
eFR7U/8QLV+uLreHDvabo2KEIBs4n7FDHQ+ePYVOZ4MtJoRyIjgUcj9jakLGTkeg
Asi9dSbnlEu6
-----END CERTIFICATE-----
Generated at Wed Feb 21 00:23:08 2024 by rpki-client on console-fra.rpki-client.org