Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35302e302f32342d3234203d3e20323636393431.roa
File:                     34352e3232352e35302e302f32342d3234203d3e20323636393431.roa (raw, json)
Hash identifier:          IjkAS5zOJgjUd3PEcifAJHrlauFXvAGcXQ1//3dOzjQ=
Subject key identifier:   EB:E4:03:FB:31:B1:DD:0F:79:CC:80:8D:70:34:BF:01:3A:49:5D:2D
Certificate issuer:       /CN=5940C19E46A00D616E69354C6F425903A1505095
Certificate serial:       545EA2ADD8D8D23DAAB73FB134F7B991D9A3ABC2
Authority key identifier: 59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35302e302f32342d3234203d3e20323636393431.roa
Signing time:             Fri 19 May 2023 18:12:53 +0000
ROA not before:           Fri 19 May 2023 18:07:53 +0000
ROA not after:            Fri 17 May 2024 18:12:53 +0000
asID:                     266941
IP address blocks:        45.225.50.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5e:a2:ad:d8:d8:d2:3d:aa:b7:3f:b1:34:f7:b9:91:d9:a3:ab:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5940C19E46A00D616E69354C6F425903A1505095
        Validity
            Not Before: May 19 18:07:53 2023 GMT
            Not After : May 17 18:12:53 2024 GMT
        Subject: CN=EBE403FB31B1DD0F79CC808D7034BF013A495D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:a3:0c:e1:2d:36:8a:dd:39:58:73:7c:c0:
                    cf:6b:d2:4f:5b:5d:4e:9a:e7:51:c1:b9:b6:73:14:
                    ec:ea:c0:1a:b5:05:5d:10:c6:e9:42:ab:0a:35:9a:
                    d8:ad:2f:0d:97:44:18:9c:0d:f9:c7:38:ec:04:7b:
                    00:62:21:42:b3:db:d0:29:e7:2c:2a:8c:0f:2f:0e:
                    96:28:68:58:a0:50:27:2a:8a:d9:7a:20:f2:b1:98:
                    3b:58:b2:83:44:eb:f5:f1:b4:f8:f9:17:20:c7:9e:
                    47:22:54:64:12:93:55:33:ac:e8:62:d4:2d:d7:5d:
                    94:2d:59:e9:90:f5:fe:1a:b4:75:45:83:bc:65:ac:
                    f5:5e:e5:fb:04:36:90:e7:bc:a0:1b:fa:7c:d0:a2:
                    08:1c:f4:56:6a:05:da:52:d3:ba:ec:b0:32:a1:c4:
                    b5:1d:bd:29:e7:9f:61:1d:2b:35:6d:a3:bb:d8:f4:
                    6a:2d:74:91:9a:79:a4:c4:f9:1b:b8:00:72:f5:c7:
                    f1:cc:2f:a8:f7:8f:b7:c0:2f:a3:61:16:6e:16:fb:
                    34:79:86:40:dc:71:45:3a:b6:70:03:88:57:83:19:
                    02:30:bb:34:d4:af:ef:7c:4d:35:da:fb:1c:82:cc:
                    e4:1e:8d:3f:51:77:7c:54:18:02:e3:13:46:16:ba:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:03:FB:31:B1:DD:0F:79:CC:80:8D:70:34:BF:01:3A:49:5D:2D
            X509v3 Authority Key Identifier:
                keyid:59:40:C1:9E:46:A0:0D:61:6E:69:35:4C:6F:42:59:03:A1:50:50:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/5940C19E46A00D616E69354C6F425903A1505095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5940C19E46A00D616E69354C6F425903A1505095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YUzcsqHjFUxkskxhtHJw4M3ZePva4NnkUT5xTCFyYPn/0/34352e3232352e35302e302f32342d3234203d3e20323636393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ab:42:52:4c:4a:bc:f7:f7:d6:0e:b5:71:ae:f1:69:37:3d:
         9a:ef:b8:e0:b8:95:0a:f4:48:d3:93:17:c5:30:45:69:f1:ec:
         e7:bd:db:9f:a6:fc:4e:16:b9:77:19:c4:b2:3e:d3:60:04:80:
         8f:a3:3c:35:c4:30:9a:97:85:09:a1:41:7d:cf:98:b0:35:f7:
         3d:ef:1b:c2:d0:10:47:92:e5:cd:76:66:11:e9:98:75:5e:b3:
         81:82:83:92:39:c2:98:e8:e7:30:db:01:a0:52:66:4e:5b:9e:
         a5:b0:cc:fb:1a:fb:6e:2b:b9:60:a8:dd:97:a6:fb:66:eb:27:
         87:85:17:da:66:b6:f7:91:6d:81:57:3d:6a:e2:8d:8d:36:81:
         ff:13:8b:fb:b4:eb:35:bb:e7:77:76:29:f7:ed:9b:4f:30:4f:
         5b:72:5c:0b:15:a5:d2:18:d5:a8:3c:74:8b:8f:fa:e8:4a:1a:
         b3:57:d7:21:63:b6:97:c7:4d:61:c9:18:91:43:df:df:24:82:
         60:69:31:09:1e:95:e9:4c:87:e3:36:a7:e8:e5:dc:ab:de:5c:
         f2:3c:51:3e:62:0e:d2:3a:d5:93:01:65:99:49:32:b7:d6:c8:
         4c:c8:8a:0c:1e:b3:06:94:ce:0a:e5:10:7b:4a:71:ab:41:45:
         7a:fd:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 02:53:48 2024 by rpki-client on console-fra.rpki-client.org