Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e382e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          aF1uUqjVbsdWvFNSr1XHt/eeMRUCk0et9l4/uV5F/uM=
Subject key identifier:   C4:22:6E:9D:B4:4F:E5:76:A3:5F:17:EC:6E:54:D1:71:36:4F:80:92
Certificate issuer:       /CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
Certificate serial:       61BB40976667CFFAB26205B1587D2B17A48B2D12
Authority key identifier: B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
Signing time:             Wed 05 Jun 2024 18:33:35 +0000
ROA not before:           Wed 05 Jun 2024 18:28:35 +0000
ROA not after:            Wed 04 Jun 2025 18:33:35 +0000
asID:                     268213
IP address blocks:        45.236.8.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:bb:40:97:66:67:cf:fa:b2:62:05:b1:58:7d:2b:17:a4:8b:2d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
        Validity
            Not Before: Jun  5 18:28:35 2024 GMT
            Not After : Jun  4 18:33:35 2025 GMT
        Subject: CN=C4226E9DB44FE576A35F17EC6E54D171364F8092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:31:e4:54:b8:b9:8c:11:aa:c2:78:d6:67:
                    b7:96:0d:3a:b4:b9:02:1d:81:c7:a3:d7:dc:fd:70:
                    25:84:44:bd:47:29:90:42:6f:98:b6:4f:d5:22:41:
                    68:64:3b:fc:5a:9b:34:48:2e:64:b4:79:e8:31:c6:
                    18:47:ed:60:6b:34:41:60:97:ab:d6:d2:6f:b5:fc:
                    ef:50:ed:c8:4f:aa:b5:cd:09:80:29:99:5e:74:46:
                    18:ba:78:e6:cd:02:73:be:b5:3d:58:60:13:ac:1e:
                    68:f4:81:aa:fe:57:08:21:41:78:4e:b1:40:b1:eb:
                    61:82:b6:c3:77:7f:b9:ba:ab:1b:a8:c0:13:0c:52:
                    a8:c4:7a:62:d7:78:25:1e:6c:3f:54:16:96:73:a6:
                    58:e4:0c:f2:4f:a5:89:6e:e0:dc:6f:aa:02:62:30:
                    29:9b:0e:51:0b:0b:1a:82:00:79:13:25:22:8a:d3:
                    ff:ad:ce:b2:25:69:b8:8c:f1:c3:87:58:d3:e1:73:
                    64:96:06:c5:f4:f2:b7:a5:be:5b:6e:63:a0:cf:b3:
                    fb:15:d3:05:41:0a:20:3c:25:2b:62:32:1e:f3:7a:
                    3e:cd:39:e4:c8:ad:65:6c:20:e7:39:8a:ae:cf:3a:
                    71:e1:7c:e0:1f:82:ee:1c:01:95:43:ab:b5:12:f3:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:6E:9D:B4:4F:E5:76:A3:5F:17:EC:6E:54:D1:71:36:4F:80:92
            X509v3 Authority Key Identifier:
                keyid:B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e382e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f5:d8:70:d0:cf:08:1e:27:1a:55:97:0e:d0:0d:f6:83:25:
         ef:de:41:31:8e:d0:98:9a:ce:b7:90:a9:66:f4:e2:05:a2:28:
         33:31:b2:2d:54:3a:49:1d:b0:21:d9:7f:a2:cb:3c:58:e6:4a:
         ab:0c:b5:e1:2a:22:a3:e1:c2:39:2c:b8:db:a1:f5:a7:f6:84:
         06:10:db:a0:cd:79:24:1d:38:c0:bd:2d:80:d5:e7:7d:5e:13:
         26:c1:fd:df:98:5d:5f:a9:8e:b6:63:68:4b:62:4a:2d:75:2c:
         68:87:e7:09:d8:d2:a6:f3:ca:3b:95:48:e4:fe:5d:e3:0b:0f:
         5e:f0:6a:97:b2:5d:7f:a3:70:f2:21:c5:aa:4c:fb:d4:e9:7c:
         95:5f:ae:d6:c9:a2:22:fc:61:5f:5f:ef:ed:e8:46:54:0a:18:
         52:6a:c4:61:0f:0e:fd:4b:fb:fa:71:4a:91:aa:48:23:45:e6:
         e5:a8:8d:84:4d:3f:ef:e9:cf:e6:34:11:0e:58:3e:ab:86:ad:
         2b:9c:0c:f1:40:fe:86:d7:49:4e:4f:5e:52:43:9f:31:18:35:
         9c:87:7e:6e:07:27:17:c7:02:fb:f3:4a:d2:77:a4:5d:ae:19:
         f9:b9:96:59:4d:c2:13:ee:60:19:bf:76:49:25:93:68:b5:8f:
         45:a8:aa:02
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUYbtAl2Znz/qyYgWxWH0rF6SLLRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxN0Y0OEExMTI4NzY5QTRDOTNFQTdCRDUzRTcyMDEz
NTlGNEFBQTAeFw0yNDA2MDUxODI4MzVaFw0yNTA2MDQxODMzMzVaMDMxMTAvBgNV
BAMTKEM0MjI2RTlEQjQ0RkU1NzZBMzVGMTdFQzZFNTREMTcxMzY0RjgwOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjjHkVLi5jBGqwnjWZ7eWDTq0
uQIdgcej19z9cCWERL1HKZBCb5i2T9UiQWhkO/xamzRILmS0eegxxhhH7WBrNEFg
l6vW0m+1/O9Q7chPqrXNCYApmV50Rhi6eObNAnO+tT1YYBOsHmj0gar+VwghQXhO
sUCx62GCtsN3f7m6qxuowBMMUqjEemLXeCUebD9UFpZzpljkDPJPpYlu4NxvqgJi
MCmbDlELCxqCAHkTJSKK0/+tzrIlabiM8cOHWNPhc2SWBsX08relvltuY6DPs/sV
0wVBCiA8JStiMh7zej7NOeTIrWVsIOc5iq7POnHhfOAfgu4cAZVDq7US80SxAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUxCJunbRP5XajXxfsblTRcTZPgJIwHwYDVR0j
BBgwFoAUthf0ihEodppMk+p71T5yATWfSqowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV
LzEvQjYxN0Y0OEExMTI4NzY5QTRDOTNFQTdCRDUzRTcyMDEzNTlGNEFBQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNjE3RjQ4QTExMjg3NjlBNEM5
M0VBN0JENTNFNzIwMTM1OUY0QUFBLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
QlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hVLzEvMzQz
NTJlMzIzMzM2MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMyMzEz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3sCDANBgkqhkiG9w0BAQsFAAOCAQEAQvXYcNDPCB4nGlWX
DtAN9oMl795BMY7QmJrOt5CpZvTiBaIoMzGyLVQ6SR2wIdl/oss8WOZKqwy14Soi
o+HCOSy426H1p/aEBhDboM15JB04wL0tgNXnfV4TJsH935hdX6mOtmNoS2JKLXUs
aIfnCdjSpvPKO5VI5P5d4wsPXvBql7Jdf6Nw8iHFqkz71Ol8lV+u1smiIvxhX1/v
7ehGVAoYUmrEYQ8O/Uv7+nFKkapII0Xm5aiNhE0/7+nP5jQRDlg+q4atK5wM8UD+
htdJTk9eUkOfMRg1nId+bgcnF8cC+/NK0nekXa4Z+bmWWU3CE+5gGb92SSWTaLWP
RaiqAg==
-----END CERTIFICATE-----
Generated at Sun Aug 25 08:39:49 2024 by rpki-client on console-ams.rpki-client.org