Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36322e302f32332d3233203d3e20323632353639.roa
File:                     34352e3136372e36322e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier:          v+j9XvldkAWV2ZIWY+rKap0s61NkGQ0s7OCbTakfPA8=
Subject key identifier:   22:34:BB:ED:E7:62:8C:5E:E4:E0:36:DC:93:76:3B:37:46:9A:ED:45
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       2170F31D06A967D7AC7D29E29BD74F16C59A58FA
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36322e302f32332d3233203d3e20323632353639.roa
Signing time:             Thu 27 Jun 2024 14:29:18 +0000
ROA not before:           Thu 27 Jun 2024 14:24:18 +0000
ROA not after:            Thu 26 Jun 2025 14:29:18 +0000
asID:                     262569
IP address blocks:        45.167.62.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:70:f3:1d:06:a9:67:d7:ac:7d:29:e2:9b:d7:4f:16:c5:9a:58:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Jun 27 14:24:18 2024 GMT
            Not After : Jun 26 14:29:18 2025 GMT
        Subject: CN=2234BBEDE7628C5EE4E036DC93763B37469AED45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:10:bb:42:c9:2c:fb:36:a6:62:e9:65:b7:
                    3c:57:04:9c:70:ad:86:ad:27:14:5a:d2:8d:cf:f1:
                    9e:94:c4:5a:ef:6b:c0:32:2d:13:a9:58:52:a6:e0:
                    93:8d:cb:67:c0:96:f4:58:f3:21:81:f5:fa:49:12:
                    e0:9e:03:33:64:18:73:14:c2:28:eb:0a:1d:32:b5:
                    11:03:a2:54:29:8e:38:e2:46:fc:11:58:20:43:47:
                    b6:1a:eb:5b:6a:85:86:47:82:a6:56:11:cf:42:a5:
                    fd:58:8c:6b:c0:ea:1d:a1:cd:d9:1d:7b:88:94:42:
                    04:4d:47:cd:22:20:6f:db:1c:c1:29:a0:85:41:a8:
                    d8:d5:0b:b2:4b:b4:83:fd:c9:5f:d1:c9:1f:3c:16:
                    bb:95:17:3f:d0:d5:e7:cb:14:e9:bf:de:1e:fa:8e:
                    2a:83:43:a7:ac:a0:48:9d:ad:45:7a:df:4d:e8:4d:
                    ad:8d:03:4a:1c:df:14:db:44:24:8a:65:b4:11:95:
                    77:47:02:2d:16:63:3a:5b:a6:e8:d8:01:37:40:10:
                    8a:64:af:33:8b:a9:04:64:3e:16:e7:d8:04:16:be:
                    4f:13:f2:91:06:d0:ca:93:b0:b0:87:2d:fe:a7:b5:
                    b3:0d:c9:57:c5:25:91:e7:2b:45:dd:bc:6e:e1:f2:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:BB:ED:E7:62:8C:5E:E4:E0:36:DC:93:76:3B:37:46:9A:ED:45
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36322e302f32332d3233203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:68:eb:f7:7a:7e:c1:cb:e4:8d:02:7f:f6:37:cd:79:13:58:
         30:94:8b:f5:d2:61:40:82:9a:6b:1e:90:7d:f2:0e:da:5b:54:
         b5:cb:65:89:56:9a:bd:ed:d1:d5:e9:bb:2d:a7:0e:41:a3:4a:
         97:2a:33:50:f6:9b:6f:31:ee:c6:2b:1f:e5:c2:42:a7:57:02:
         f8:5f:cc:35:72:75:a6:9b:ce:71:6f:38:40:f5:cf:66:ae:ff:
         9e:61:2d:e9:95:bd:fd:2c:5e:9c:80:b4:6b:3b:e4:c1:a6:2c:
         67:11:34:8f:99:60:62:2d:73:49:68:24:04:63:90:23:16:86:
         1d:4d:d7:e5:ca:41:87:17:89:61:9a:fb:7e:65:a0:51:8a:91:
         9c:d5:8b:a9:06:b3:2f:a9:ba:82:a9:5b:1e:07:a8:b0:9d:a6:
         f5:24:ed:af:47:61:09:68:b9:f3:c2:72:71:89:5c:fb:e3:c6:
         1e:45:bd:23:d4:c2:f7:44:e6:77:ef:62:08:44:39:fa:ac:de:
         dd:d8:6f:74:d0:9b:e8:4b:5b:4c:98:aa:33:7d:c3:72:ee:af:
         fb:bd:be:09:88:cc:75:c8:98:c7:f7:c6:d8:91:7c:74:35:98:
         8b:13:20:f0:2a:bc:68:d8:d9:6c:3f:d5:62:49:3c:37:83:cc:
         7f:6b:d4:c4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUIXDzHQapZ9esfSnim9dPFsWaWPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIxOTFDOTFDNjk5NjI2RjFERjNDM0I3NkQ0NEYyMzVD
NDk3NjExMDAeFw0yNDA2MjcxNDI0MThaFw0yNTA2MjYxNDI5MThaMDMxMTAvBgNV
BAMTKDIyMzRCQkVERTc2MjhDNUVFNEUwMzZEQzkzNzYzQjM3NDY5QUVENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sxC7Qsks+zamYulltzxXBJxw
rYatJxRa0o3P8Z6UxFrva8AyLROpWFKm4JONy2fAlvRY8yGB9fpJEuCeAzNkGHMU
wijrCh0ytREDolQpjjjiRvwRWCBDR7Ya61tqhYZHgqZWEc9Cpf1YjGvA6h2hzdkd
e4iUQgRNR80iIG/bHMEpoIVBqNjVC7JLtIP9yV/RyR88FruVFz/Q1efLFOm/3h76
jiqDQ6esoEidrUV6303oTa2NA0oc3xTbRCSKZbQRlXdHAi0WYzpbpujYATdAEIpk
rzOLqQRkPhbn2AQWvk8T8pEG0MqTsLCHLf6ntbMNyVfFJZHnK0XdvG7h8u6NAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUIjS77edijF7k4Dbck3Y7N0aa7UUwHwYDVR0j
BBgwFoAUIhkckcaZYm8d88O3bUTyNcSXYRAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9SS21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNi
LzEvMjIxOTFDOTFDNjk5NjI2RjFERjNDM0I3NkQ0NEYyMzVDNDk3NjExMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yMjE5MUM5MUM2OTk2MjZGMURG
M0MzQjc2RDQ0RjIzNUM0OTc2MTEwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9S
S21yWkFLRVZlb0g3WVZlN1lHZ1VqVnBKb1lUcVNHS25IVGVYYkVxRjNiLzEvMzQz
NTJlMzEzNjM3MmUzNjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzUz
NjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBLac+MA0GCSqGSIb3DQEBCwUAA4IBAQC0aOv3en7By+SN
An/2N815E1gwlIv10mFAgpprHpB98g7aW1S1y2WJVpq97dHV6bstpw5Bo0qXKjNQ
9ptvMe7GKx/lwkKnVwL4X8w1cnWmm85xbzhA9c9mrv+eYS3plb39LF6cgLRrO+TB
pixnETSPmWBiLXNJaCQEY5AjFoYdTdflykGHF4lhmvt+ZaBRipGc1YupBrMvqbqC
qVseB6iwnab1JO2vR2EJaLnzwnJxiVz748YeRb0j1ML3ROZ372IIRDn6rN7d2G90
0JvoS1tMmKozfcNy7q/7vb4JiMx1yJjH98bYkXx0NZiLEyDwKrxo2NlsP9ViSTw3
g8x/a9TE
-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org