Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130362e302f32342d3234203d3e20323637303737.roa
File:                     34352e3232382e3130362e302f32342d3234203d3e20323637303737.roa (raw, json)
Hash identifier:          HjPFYfWrifBD1jtxrSVNFe/5nJGlK3cPowgJjffzsUc=
Subject key identifier:   D3:1F:05:57:8B:49:F6:AD:1B:DC:D9:31:1B:E6:CE:01:0D:52:F5:93
Certificate issuer:       /CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
Certificate serial:       3079F5E795221C7D31151DF09E34C1BCC522970B
Authority key identifier: 84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130362e302f32342d3234203d3e20323637303737.roa
Signing time:             Mon 27 Nov 2023 01:18:33 +0000
ROA not before:           Mon 27 Nov 2023 01:13:33 +0000
ROA not after:            Mon 25 Nov 2024 01:18:33 +0000
asID:                     267077
IP address blocks:        45.228.106.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:79:f5:e7:95:22:1c:7d:31:15:1d:f0:9e:34:c1:bc:c5:22:97:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
        Validity
            Not Before: Nov 27 01:13:33 2023 GMT
            Not After : Nov 25 01:18:33 2024 GMT
        Subject: CN=D31F05578B49F6AD1BDCD9311BE6CE010D52F593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:a2:ec:81:aa:64:1d:65:b0:51:8a:62:75:
                    b3:99:58:e8:6d:8f:cd:b8:94:36:2b:9e:29:19:b7:
                    5f:b5:e9:5f:bd:29:93:a2:5a:3d:36:b3:5e:9b:df:
                    e8:a9:61:7b:6a:ac:8d:4c:96:a6:1c:a6:58:3e:bc:
                    25:f7:f7:a4:bc:bd:58:5c:6a:11:4e:01:14:78:c2:
                    6d:e6:fd:85:21:2d:f5:ca:c4:67:cf:6c:6b:d1:8f:
                    19:e9:45:e3:35:5d:32:c2:36:3a:55:6f:0e:eb:5a:
                    cc:b0:f2:cb:e9:5e:89:c7:cc:5d:f0:6a:64:b1:08:
                    db:2d:47:59:35:b4:a0:6a:e2:30:92:2b:70:e6:f7:
                    f2:de:04:1f:72:d2:19:00:0e:1b:76:e7:e8:f6:fb:
                    f0:53:05:15:f4:cc:58:ef:66:c0:19:54:57:ef:80:
                    28:7f:dd:e7:f3:eb:91:96:e6:27:00:ba:17:2a:3a:
                    9d:f4:07:62:a5:95:5d:e7:2d:47:35:3c:fb:62:56:
                    9b:29:de:18:1b:d1:a5:bd:fd:4a:e2:c5:3b:03:d4:
                    19:96:1c:dc:9a:96:d7:86:93:ac:6d:ff:df:23:08:
                    d7:d1:c7:59:76:bd:58:4e:ca:0f:3c:d9:0c:16:2c:
                    c3:0b:ef:cf:8a:65:ca:ba:3c:d1:5f:ac:e1:cb:ca:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1F:05:57:8B:49:F6:AD:1B:DC:D9:31:1B:E6:CE:01:0D:52:F5:93
            X509v3 Authority Key Identifier:
                keyid:84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130362e302f32342d3234203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:94:a3:63:59:d3:86:58:fd:05:2b:58:1f:97:d4:31:e6:
         9e:55:fe:78:0f:1c:04:ab:cb:45:13:4b:cb:44:ac:7d:0f:92:
         8a:b5:4b:96:47:7b:3f:76:31:39:b7:22:37:e1:43:75:a5:c4:
         85:b7:8c:9e:7b:f7:23:f8:e6:de:af:de:9a:08:eb:6a:ef:39:
         05:99:7b:3f:11:e2:9d:b2:a1:40:87:26:73:c3:99:33:ad:d7:
         72:41:34:72:59:21:e8:64:22:f7:73:7d:22:61:a5:b3:94:7b:
         c4:bd:8e:ce:0f:08:e8:bc:f5:62:27:62:e6:75:e5:c1:cc:70:
         a2:f9:3b:d7:38:f0:8e:35:1f:2d:f1:16:16:29:24:f5:f6:7e:
         0e:12:71:ac:26:af:b6:73:4f:e1:cf:54:dd:d8:ec:48:db:39:
         53:e4:bd:bc:ac:51:f3:b4:48:38:96:c4:c1:a3:ff:e9:7e:65:
         e6:17:ce:79:4c:78:28:db:bf:b3:f7:be:3b:cb:75:5c:67:04:
         59:de:83:9a:ca:ae:87:4e:bc:1e:af:d2:b8:55:81:1f:8b:36:
         83:a1:f1:97:7e:b7:ba:e5:94:af:7a:04:96:12:8c:1d:f4:6f:
         8c:52:e0:2a:ce:77:58:15:72:89:c8:27:81:5b:f0:f9:4f:40:
         84:c9:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 21:21:43 2023 by rpki-client on console-fra.rpki-client.org