Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa
File:                     34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa (raw, json)
Hash identifier:          6QP8YsAitozHz7sAWDceXDIkmUk8uaL3/yhr2znnxL0=
Subject key identifier:   0C:FF:BB:84:7A:2A:16:5C:99:72:E9:BB:22:38:67:61:86:37:B2:4B
Certificate issuer:       /CN=A2547B4C7F3DCE9C068800E0B79911EA899B73D1
Certificate serial:       2DAE40008CE5A842252BB0CEB41A8CE04CF33F7F
Authority key identifier: A2:54:7B:4C:7F:3D:CE:9C:06:88:00:E0:B7:99:11:EA:89:9B:73:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa
Signing time:             Thu 04 Apr 2024 00:57:54 +0000
ROA not before:           Thu 04 Apr 2024 00:52:54 +0000
ROA not after:            Thu 03 Apr 2025 00:57:54 +0000
asID:                     266970
IP address blocks:        45.226.156.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ae:40:00:8c:e5:a8:42:25:2b:b0:ce:b4:1a:8c:e0:4c:f3:3f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2547B4C7F3DCE9C068800E0B79911EA899B73D1
        Validity
            Not Before: Apr  4 00:52:54 2024 GMT
            Not After : Apr  3 00:57:54 2025 GMT
        Subject: CN=0CFFBB847A2A165C9972E9BB223867618637B24B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:b2:f0:09:07:bc:8a:46:4f:90:36:f6:f2:
                    dc:bc:98:71:25:03:ae:d3:5e:f9:ba:b6:4f:36:38:
                    ad:d3:93:64:bd:42:3a:8d:e2:01:a6:8f:96:f8:de:
                    48:55:2f:f7:92:10:b0:19:93:ea:0a:79:b0:7a:04:
                    ff:e0:4e:e3:eb:f1:be:5e:d4:d0:b4:f3:2b:47:44:
                    e4:90:21:a7:36:4b:3a:f8:4c:fe:1d:3d:14:e0:0e:
                    d0:70:9c:37:63:da:3f:2b:5c:57:91:79:28:4b:c6:
                    67:96:04:06:d6:79:fc:a5:8f:cb:cd:c6:43:7b:75:
                    ac:5f:d3:e5:2c:7f:48:d4:72:43:74:bb:e8:e9:41:
                    8c:f9:7e:5f:5b:65:80:19:17:69:b1:a8:a3:8e:3b:
                    4b:f8:0a:3a:14:c4:e9:9d:00:f2:2b:02:fe:43:c2:
                    20:8d:5b:e0:c9:5e:13:cb:31:85:4f:ab:70:55:7d:
                    c4:92:7a:a6:4d:d9:15:ee:02:ca:75:8a:17:6b:2f:
                    30:f9:6c:93:2a:c9:f2:eb:9e:e2:53:ca:ae:a8:58:
                    01:e5:c3:5b:cb:a7:d2:2e:43:69:60:8a:ec:7f:73:
                    8a:d3:02:fb:be:fa:50:b4:c8:0e:1b:a9:85:db:7e:
                    8d:a1:31:41:49:bf:68:c0:12:69:48:07:a2:ab:28:
                    03:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:BB:84:7A:2A:16:5C:99:72:E9:BB:22:38:67:61:86:37:B2:4B
            X509v3 Authority Key Identifier:
                keyid:A2:54:7B:4C:7F:3D:CE:9C:06:88:00:E0:B7:99:11:EA:89:9B:73:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/34352e3232362e3135362e302f32322d3232203d3e20323636393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:29:77:e5:9b:39:90:b8:34:17:75:cf:1c:e3:c0:5c:21:f2:
         38:1d:c1:0d:57:66:d0:08:05:f4:62:5c:9a:91:13:b5:41:6d:
         39:d8:d7:2a:97:5e:bc:cd:82:7a:03:df:e6:c6:d7:a1:1a:21:
         3b:51:92:de:d9:8e:45:5c:e5:eb:f1:10:29:75:3f:6c:7f:36:
         f1:ef:b4:47:c3:7b:3f:f8:6b:de:89:15:fb:72:31:23:38:4c:
         19:97:68:39:24:0b:40:39:07:cd:3b:e8:ca:fe:03:fd:90:b2:
         11:57:f3:0b:ce:f2:43:da:55:0b:7b:fb:78:ce:b4:5c:b0:02:
         8d:8c:a1:a8:ae:6c:92:fc:41:bf:9d:6d:8c:a7:ba:6c:65:2f:
         81:99:44:2d:3c:88:d2:34:5e:3b:c6:27:e1:35:e1:13:03:ca:
         6b:84:13:5d:8b:40:78:ea:21:8e:32:0a:e0:04:10:e5:13:ca:
         62:12:d8:d3:e7:3e:96:cb:5c:c8:4b:40:04:c1:39:e2:1c:74:
         6f:a5:88:58:aa:a6:56:d9:5c:fa:e3:db:17:9f:38:3e:6d:02:
         1d:84:18:3f:42:a9:e7:11:de:35:37:7a:9b:5e:e8:db:c1:f8:
         ba:96:f1:bd:24:8d:cb:88:a5:34:9e:91:c5:8d:5d:c6:e6:1f:
         41:91:6e:c5
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIULa5AAIzlqEIlK7DOtBqM4EzzP38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1NDdCNEM3RjNEQ0U5QzA2ODgwMEUwQjc5OTExRUE4
OTlCNzNEMTAeFw0yNDA0MDQwMDUyNTRaFw0yNTA0MDMwMDU3NTRaMDMxMTAvBgNV
BAMTKDBDRkZCQjg0N0EyQTE2NUM5OTcyRTlCQjIyMzg2NzYxODYzN0IyNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC557LwCQe8ikZPkDb28ty8mHEl
A67TXvm6tk82OK3Tk2S9QjqN4gGmj5b43khVL/eSELAZk+oKebB6BP/gTuPr8b5e
1NC08ytHROSQIac2Szr4TP4dPRTgDtBwnDdj2j8rXFeReShLxmeWBAbWefylj8vN
xkN7daxf0+Usf0jUckN0u+jpQYz5fl9bZYAZF2mxqKOOO0v4CjoUxOmdAPIrAv5D
wiCNW+DJXhPLMYVPq3BVfcSSeqZN2RXuAsp1ihdrLzD5bJMqyfLrnuJTyq6oWAHl
w1vLp9IuQ2lgiux/c4rTAvu++lC0yA4bqYXbfo2hMUFJv2jAEmlIB6KrKAMvAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDP+7hHoqFlyZcum7IjhnYYY3skswHwYDVR0j
BBgwFoAUolR7TH89zpwGiADgt5kR6ombc9EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NOGFKNUpHV0RaU2FlWmtOdEVXVHNSRFJLZ1FtejZQVk5yTm1QNVFFdk5O
LzEvQTI1NDdCNEM3RjNEQ0U5QzA2ODgwMEUwQjc5OTExRUE4OTlCNzNEMS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9BMjU0N0I0QzdGM0RDRTlDMDY4
ODAwRTBCNzk5MTFFQTg5OUI3M0QxLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
OGFKNUpHV0RaU2FlWmtOdEVXVHNSRFJLZ1FtejZQVk5yTm1QNVFFdk5OLzEvMzQz
NTJlMzIzMjM2MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzYz
OTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAIt4pwwDQYJKoZIhvcNAQELBQADggEBACQpd+WbOZC4
NBd1zxzjwFwh8jgdwQ1XZtAIBfRiXJqRE7VBbTnY1yqXXrzNgnoD3+bG16EaITtR
kt7ZjkVc5evxECl1P2x/NvHvtEfDez/4a96JFftyMSM4TBmXaDkkC0A5B8076Mr+
A/2QshFX8wvO8kPaVQt7+3jOtFywAo2MoaiubJL8Qb+dbYynumxlL4GZRC08iNI0
XjvGJ+E14RMDymuEE12LQHjqIY4yCuAEEOUTymIS2NPnPpbLXMhLQATBOeIcdG+l
iFiqplbZXPrj2xefOD5tAh2EGD9CqecR3jU3epte6NvB+LqW8b0kjcuIpTSekcWN
XcbmH0GRbsU=
-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org