Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa
File:                     34352e3233392e37342e302f32332d3233203d3e20323638333535.roa (raw, json)
Hash identifier:          rIZhgHLlehqlEZGJoe1MwJR8O1yDoP6DdckQU+7H0us=
Subject key identifier:   E9:62:7B:35:BE:8F:99:44:84:6C:99:9C:98:14:86:C7:34:9F:D4:92
Certificate issuer:       /CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
Certificate serial:       38F332161C111A17FEF3E3D23BB05566D22008DD
Authority key identifier: 62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa
Signing time:             Thu 04 Apr 2024 23:20:50 +0000
ROA not before:           Thu 04 Apr 2024 23:15:50 +0000
ROA not after:            Thu 03 Apr 2025 23:20:50 +0000
asID:                     268355
IP address blocks:        45.239.74.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f3:32:16:1c:11:1a:17:fe:f3:e3:d2:3b:b0:55:66:d2:20:08:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C6D96B0353576AEDABEF468623ACB8BB355EB2
        Validity
            Not Before: Apr  4 23:15:50 2024 GMT
            Not After : Apr  3 23:20:50 2025 GMT
        Subject: CN=E9627B35BE8F9944846C999C981486C7349FD492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:eb:4e:88:25:6e:44:69:5d:ff:3c:b5:eb:
                    fb:2a:4f:56:d7:be:a7:44:ae:68:c3:e8:ce:ab:22:
                    c9:75:34:bd:ae:6f:27:5a:aa:c5:0d:96:86:b7:9f:
                    fd:ae:c9:64:ca:ae:74:1a:cc:ba:ce:f5:d4:6b:c5:
                    40:d1:30:43:63:48:81:b0:6f:b3:b2:05:f8:8c:5d:
                    12:0a:26:13:1d:f3:99:8d:9a:a1:45:cf:a1:0e:b4:
                    52:03:ab:89:d5:f8:d0:de:ac:ff:34:6e:1a:33:58:
                    0e:cc:e5:08:00:bc:82:b7:e6:56:e5:32:f9:19:2a:
                    94:cd:be:6d:36:a4:3d:c0:27:0c:25:61:44:e7:b0:
                    e6:15:81:ab:47:88:7e:40:14:a7:b3:33:e0:a1:c6:
                    4a:04:30:aa:6d:01:fc:63:31:6e:3e:62:09:ae:cf:
                    13:a7:69:63:ed:fb:2d:51:1f:be:bb:09:6d:5a:db:
                    63:67:1e:44:fe:84:db:c0:f1:49:34:4f:aa:75:fd:
                    0a:b4:57:02:f6:6e:1a:aa:a4:75:a6:80:43:37:f2:
                    01:bb:a2:5b:58:68:22:95:26:71:23:c1:48:20:57:
                    b7:7b:9a:89:07:dd:db:47:fb:fc:ba:ad:07:cd:17:
                    15:84:0b:5c:4b:f6:fe:71:7d:3b:7d:5b:6a:29:4b:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:62:7B:35:BE:8F:99:44:84:6C:99:9C:98:14:86:C7:34:9F:D4:92
            X509v3 Authority Key Identifier:
                keyid:62:C6:D9:6B:03:53:57:6A:ED:AB:EF:46:86:23:AC:B8:BB:35:5E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62C6D96B0353576AEDABEF468623ACB8BB355EB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrNTwKVdenTRK7dXVPcC31SpRrTHQyiwEvyXhQUBYti9/1/34352e3233392e37342e302f32332d3233203d3e20323638333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:4f:01:a6:e8:19:a8:a3:ac:4f:e5:15:04:1d:44:d1:66:
         2c:15:c2:b1:b5:dd:79:6f:8f:05:b7:60:02:02:93:01:1e:9e:
         7a:2c:88:4d:05:6f:6c:17:bf:17:65:34:f1:36:20:9e:be:1f:
         24:b8:ef:63:78:2b:c6:93:40:3e:6a:ed:60:f6:18:97:7f:e5:
         fd:98:16:5c:ed:8d:c1:06:a3:24:3f:92:3d:45:6b:15:ef:eb:
         68:f9:75:ce:78:a0:18:f3:39:63:77:bf:0b:58:bf:76:fd:21:
         ce:69:05:b4:ba:76:36:9e:98:9f:bb:02:62:37:9c:60:f3:81:
         c8:37:4a:f3:fd:34:48:f9:fa:5f:ae:e9:64:2b:99:88:4a:b5:
         c2:09:c9:fb:b1:35:ba:a4:80:23:5e:c3:cb:cd:89:c1:e4:fa:
         b7:03:47:e2:3d:25:9d:77:7d:84:5b:d3:1e:88:c8:eb:21:aa:
         4b:a5:67:84:99:4b:c2:da:5d:59:cf:fd:b5:ae:5d:d1:f4:36:
         fb:a6:1a:bc:b9:5a:e2:27:f3:6b:50:bd:11:1d:de:ca:66:85:
         1a:8d:1e:77:9c:c5:d5:74:83:27:25:99:29:ef:09:99:10:4b:
         3b:e6:eb:26:af:07:33:47:8b:a6:4f:77:64:c2:e0:10:6f:0a:
         0e:88:bc:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOPMyFhwRGhf+8+PSO7BVZtIgCN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJDNkQ5NkIwMzUzNTc2QUVEQUJFRjQ2ODYyM0FDQjhC
QjM1NUVCMjAeFw0yNDA0MDQyMzE1NTBaFw0yNTA0MDMyMzIwNTBaMDMxMTAvBgNV
BAMTKEU5NjI3QjM1QkU4Rjk5NDQ4NDZDOTk5Qzk4MTQ4NkM3MzQ5RkQ0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5+tOiCVuRGld/zy16/sqT1bX
vqdErmjD6M6rIsl1NL2ubydaqsUNloa3n/2uyWTKrnQazLrO9dRrxUDRMENjSIGw
b7OyBfiMXRIKJhMd85mNmqFFz6EOtFIDq4nV+NDerP80bhozWA7M5QgAvIK35lbl
MvkZKpTNvm02pD3AJwwlYUTnsOYVgatHiH5AFKezM+ChxkoEMKptAfxjMW4+Ygmu
zxOnaWPt+y1RH767CW1a22NnHkT+hNvA8Uk0T6p1/Qq0VwL2bhqqpHWmgEM38gG7
oltYaCKVJnEjwUggV7d7mokH3dtH+/y6rQfNFxWEC1xL9v5xfTt9W2opS5cPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6WJ7Nb6PmUSEbJmcmBSGxzSf1JIwHwYDVR0j
BBgwFoAUYsbZawNTV2rtq+9GhiOsuLs1XrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHJOVHdLVmRlblRSSzdkWFZQY0MzMVNwUnJUSFF5aXdFdnlYaFFVQll0
aTkvMS82MkM2RDk2QjAzNTM1NzZBRURBQkVGNDY4NjIzQUNCOEJCMzU1RUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyQzZEOTZCMDM1MzU3NkFF
REFCRUY0Njg2MjNBQ0I4QkIzNTVFQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hyTlR3S1ZkZW5UUks3ZFhWUGNDMzFTcFJyVEhReWl3RXZ5WGhRVUJZdGk5LzEv
MzQzNTJlMzIzMzM5MmUzNzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe9KMA0GCSqGSIb3DQEBCwUAA4IBAQB9a08BpugZ
qKOsT+UVBB1E0WYsFcKxtd15b48Ft2ACApMBHp56LIhNBW9sF78XZTTxNiCevh8k
uO9jeCvGk0A+au1g9hiXf+X9mBZc7Y3BBqMkP5I9RWsV7+to+XXOeKAY8zljd78L
WL92/SHOaQW0unY2npifuwJiN5xg84HIN0rz/TRI+fpfrulkK5mISrXCCcn7sTW6
pIAjXsPLzYnB5Pq3A0fiPSWdd32EW9MeiMjrIapLpWeEmUvC2l1Zz/21rl3R9Db7
phq8uVriJ/NrUL0RHd7KZoUajR53nMXVdIMnJZkp7wmZEEs75usmrwczR4umT3dk
wuAQbwoOiLzT
-----END CERTIFICATE-----
Generated at Wed Jul 3 21:23:36 2024 by rpki-client on console-ams.rpki-client.org