Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa
File:                     34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa (raw, json)
Hash identifier:          WsK4r9k9WZIeftOPDg2rT7xseRGvLv6U+mbAaZpN79Y=
Subject key identifier:   66:60:AD:E3:03:FA:CD:F9:30:9B:70:33:8E:A4:0C:8F:77:19:1F:BE
Certificate issuer:       /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial:       289B499EB415F48FDEBE6B4DD93D2F9EE4A17A6D
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa
Signing time:             Mon 13 Nov 2023 19:10:58 +0000
ROA not before:           Mon 13 Nov 2023 19:05:58 +0000
ROA not after:            Mon 11 Nov 2024 19:10:58 +0000
asID:                     267388
IP address blocks:        45.234.248.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:49:9e:b4:15:f4:8f:de:be:6b:4d:d9:3d:2f:9e:e4:a1:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33C015248532BCE3959F73092749FDE164934402
        Validity
            Not Before: Nov 13 19:05:58 2023 GMT
            Not After : Nov 11 19:10:58 2024 GMT
        Subject: CN=6660ADE303FACDF9309B70338EA40C8F77191FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:43:31:07:cf:05:e1:8b:e9:11:e1:64:2e:
                    b1:ce:59:52:11:a6:6c:be:af:3f:28:ef:0b:53:74:
                    86:20:6d:d2:86:96:56:ea:78:12:06:c2:30:86:c0:
                    5e:9d:b8:ed:8e:e0:98:db:4f:11:44:28:08:06:a8:
                    df:b9:18:7f:74:1b:cd:34:86:b2:aa:bf:7d:24:18:
                    12:9b:7f:49:a4:3b:f0:01:a8:b6:15:35:72:10:41:
                    db:14:89:3a:a2:a5:61:52:e7:08:f3:26:d9:19:b2:
                    49:42:89:1e:2c:d9:80:92:10:27:d0:3d:bc:5c:ea:
                    86:ae:8d:32:70:09:70:5e:42:9b:f1:8d:5f:9e:41:
                    41:0a:52:15:43:b1:3c:df:3f:04:c0:63:ba:b2:34:
                    92:03:9b:ae:0d:a7:5e:82:00:9b:08:38:7a:d9:dc:
                    cb:3d:47:89:5a:9d:b1:ee:bc:af:21:b1:ae:9f:df:
                    2b:8c:ab:64:e3:80:00:f6:03:ed:44:5d:a4:df:8a:
                    fb:93:cb:f4:8a:74:08:d8:e4:52:15:60:5b:38:62:
                    06:86:df:14:e6:8a:37:0d:30:87:6d:b6:29:29:22:
                    df:38:39:22:98:d6:89:10:30:3b:25:3c:85:45:cb:
                    2c:07:c5:ed:c1:8b:8d:93:8c:3f:79:f2:df:b3:cb:
                    18:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:60:AD:E3:03:FA:CD:F9:30:9B:70:33:8E:A4:0C:8F:77:19:1F:BE
            X509v3 Authority Key Identifier:
                keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3233342e3234382e302f32322d3232203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:5b:8d:d2:36:ee:f0:53:60:13:4f:80:58:1e:27:90:87:37:
         0e:61:0e:f7:df:50:80:97:44:60:cb:13:65:bb:cc:01:0d:fc:
         ef:33:cf:9a:8a:6a:df:44:c5:20:50:dc:7a:8b:f1:f1:7a:ba:
         61:da:a6:da:67:93:85:52:0b:3f:26:8d:d0:b7:df:2e:03:96:
         79:72:90:d1:c8:ac:10:4a:27:6e:aa:cc:e4:a7:61:0a:15:14:
         30:c7:0c:5d:28:b7:df:87:ee:62:1f:8b:fd:58:ca:22:2f:21:
         c2:7d:22:10:3c:e5:ce:d7:f5:cd:78:46:7b:fc:de:2e:c9:60:
         ae:e4:1b:b6:7a:32:c2:c0:ee:34:11:6f:d1:3e:a4:be:77:94:
         c9:5a:3c:ba:a9:fc:03:02:b3:a4:0e:fc:93:36:46:65:d2:ba:
         1c:3d:c0:eb:09:e4:0d:29:ea:34:0d:cd:2a:91:03:32:26:be:
         6d:c7:e3:54:46:d0:9c:24:ef:04:7a:d7:57:38:31:29:53:27:
         9e:fa:c9:06:eb:3b:31:1b:4b:8e:0c:75:39:37:9f:b1:95:46:
         d5:c9:5e:4c:b1:34:bf:a5:73:cf:5f:dd:90:ce:82:84:27:ba:
         d0:19:be:16:9f:a9:e5:2b:39:d7:4c:e8:7e:2a:ec:b9:c6:1f:
         e5:30:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 11:51:10 2024 by rpki-client on console-fra.rpki-client.org