Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa
File:                     34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa (raw, json)
Hash identifier:          Z4gFEO+/BCqVczEB0mr6yIygBVaSXg072thgUYWuVTo=
Subject key identifier:   57:09:2B:19:3B:41:A8:8B:49:66:AF:ED:31:3C:B6:25:09:96:9A:10
Certificate issuer:       /CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
Certificate serial:       7A26A266C59E0EEDBA9691CD07A1AD0FB1588AAD
Authority key identifier: CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa
Signing time:             Mon 13 May 2024 14:05:28 +0000
ROA not before:           Mon 13 May 2024 14:00:28 +0000
ROA not after:            Mon 12 May 2025 14:05:28 +0000
asID:                     269075
IP address blocks:        45.179.108.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:a2:66:c5:9e:0e:ed:ba:96:91:cd:07:a1:ad:0f:b1:58:8a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886
        Validity
            Not Before: May 13 14:00:28 2024 GMT
            Not After : May 12 14:05:28 2025 GMT
        Subject: CN=57092B193B41A88B4966AFED313CB62509969A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:5d:e2:2b:71:41:43:fc:ad:69:a3:a2:9e:
                    59:b9:63:4a:5b:b9:bf:2a:0c:81:f3:77:6a:4b:83:
                    92:19:e2:af:51:94:6e:ab:94:b1:52:4f:06:21:ff:
                    a2:17:63:1c:65:23:f7:47:39:ce:b4:e3:ea:a6:f4:
                    9a:eb:bc:91:0b:f1:89:98:4b:0d:13:72:4c:a3:46:
                    a2:23:fe:cb:b0:e5:e1:10:4b:c0:8a:bb:a2:92:be:
                    11:6a:83:69:e2:e7:7b:c2:fa:37:01:08:11:c8:cb:
                    bc:e8:fe:76:62:7e:c9:93:14:09:8f:1c:b0:8c:72:
                    e3:79:0a:da:cf:ad:c3:51:61:6a:31:a5:ff:07:73:
                    a9:eb:08:e5:5e:93:60:48:44:b5:49:15:74:7b:4d:
                    66:b6:8e:c8:56:3a:cd:d9:14:b3:34:43:7e:d6:30:
                    6d:09:62:2e:91:0f:35:8a:c2:d6:0c:55:ed:e3:24:
                    2e:ee:14:d6:2f:18:f1:2b:01:ff:26:12:e3:e6:4f:
                    4a:b2:3c:e0:a7:54:98:54:86:1e:fd:91:6f:7d:ba:
                    21:88:e4:a6:f5:26:f5:86:52:93:6c:ef:81:be:16:
                    b2:a6:3a:c6:8a:89:c8:26:11:24:05:1c:f4:cf:ce:
                    60:b3:04:af:df:87:63:17:d1:4a:b5:ba:72:a3:39:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:09:2B:19:3B:41:A8:8B:49:66:AF:ED:31:3C:B6:25:09:96:9A:10
            X509v3 Authority Key Identifier:
                keyid:CB:24:60:97:76:F5:A8:FC:CA:A6:FF:9F:F6:D5:4E:A4:FC:71:58:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB24609776F5A8FCCAA6FF9FF6D54EA4FC715886.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/34352e3137392e3130382e302f32322d3332203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:26:20:5b:7b:f8:0b:9a:16:05:c2:79:de:c4:5d:9d:7b:c6:
         f9:b1:2b:1c:25:5e:35:9c:f9:de:76:7e:4c:79:73:1b:f0:9e:
         52:89:b5:2b:e1:1f:15:2f:98:e4:e9:12:ae:73:35:05:93:02:
         a1:af:04:b7:a1:ec:e1:7b:57:ea:ea:01:3f:84:e9:0c:dd:32:
         e5:03:8d:df:61:66:5e:16:6d:5f:a9:61:be:75:8c:17:a5:33:
         f0:48:4d:ca:55:63:ca:33:00:0b:c6:f9:c6:89:72:e0:36:ff:
         53:e9:76:21:4b:17:85:f3:d2:71:43:20:5c:6e:82:36:c3:96:
         a4:1d:52:a4:8b:d5:a6:6c:d5:d4:ff:38:00:76:65:f6:87:af:
         95:6a:e7:87:71:72:4f:84:c2:5b:b3:22:42:b2:43:60:81:7b:
         44:cb:29:10:28:1a:48:42:3b:ee:e2:55:02:14:88:14:e1:2e:
         0c:71:7d:e1:9f:6a:15:a9:93:83:25:f6:e4:83:3c:97:1b:a3:
         00:89:94:c1:1f:f2:27:72:97:f0:1d:64:f5:2a:dd:51:cf:1f:
         44:ad:48:35:72:90:4d:ab:02:85:be:a0:6a:f7:30:66:1e:e8:
         af:78:b1:b9:96:df:ab:77:94:2e:bf:7e:14:f0:f7:1d:dc:95:
         83:98:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:04:07 2024 by rpki-client on console-fra.rpki-client.org