Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130372e302f32342d3234203d3e20323637303737.roa
File:                     34352e3232382e3130372e302f32342d3234203d3e20323637303737.roa (raw, json)
Hash identifier:          SHZyqlvgm3beTXTGIyVD/onprNHl4B3eQHJLJuUpdvo=
Subject key identifier:   24:2D:5B:DB:20:C1:EE:78:25:6E:79:06:6A:1F:9B:65:12:C6:05:04
Certificate issuer:       /CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
Certificate serial:       30392784A0162597482F27743A09416F514804DD
Authority key identifier: 84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130372e302f32342d3234203d3e20323637303737.roa
Signing time:             Mon 27 Nov 2023 01:18:31 +0000
ROA not before:           Mon 27 Nov 2023 01:13:31 +0000
ROA not after:            Mon 25 Nov 2024 01:18:31 +0000
asID:                     267077
IP address blocks:        45.228.107.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:39:27:84:a0:16:25:97:48:2f:27:74:3a:09:41:6f:51:48:04:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
        Validity
            Not Before: Nov 27 01:13:31 2023 GMT
            Not After : Nov 25 01:18:31 2024 GMT
        Subject: CN=242D5BDB20C1EE78256E79066A1F9B6512C60504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:7c:94:1f:ea:0f:d5:22:7f:b1:fb:38:ac:
                    01:a9:c2:c0:55:56:e1:52:47:16:8f:0a:2b:df:ea:
                    68:1b:f0:85:39:c3:7b:ed:19:20:8c:d9:a0:3a:ca:
                    25:d5:90:ca:4f:d1:f2:da:f5:e2:89:d2:78:90:c5:
                    f1:f0:01:36:43:8a:80:48:a6:53:0b:ac:a5:7b:b3:
                    28:1e:18:4a:31:10:73:c6:5d:f2:af:6d:f1:72:96:
                    00:d0:9b:4f:b7:73:06:45:2e:5e:a0:e1:60:00:a3:
                    02:77:a6:ee:7d:c0:d3:06:71:cd:9f:61:20:58:b2:
                    d1:57:76:65:0d:59:c9:1c:b9:08:ce:98:dd:80:05:
                    da:e8:46:34:18:e7:15:a6:62:9b:83:79:0d:d2:3f:
                    04:fd:29:f6:50:cd:49:e6:de:77:97:02:e9:36:04:
                    56:79:69:3c:15:34:40:ff:29:a5:b7:28:68:e3:fb:
                    7a:4e:66:ad:43:4d:54:2a:a2:fc:ad:64:06:9f:f3:
                    16:a0:1d:ae:40:4f:a2:5e:2d:25:33:c7:40:e5:99:
                    87:99:d0:f9:ac:1a:14:80:b1:1e:33:75:c8:27:58:
                    00:2c:d3:b3:27:d7:1f:fa:91:2a:0b:ec:97:f3:f4:
                    c0:3a:8e:4f:7a:44:62:58:be:4b:33:55:ac:10:a7:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:5B:DB:20:C1:EE:78:25:6E:79:06:6A:1F:9B:65:12:C6:05:04
            X509v3 Authority Key Identifier:
                keyid:84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130372e302f32342d3234203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:55:6a:d2:d2:92:3d:74:e6:6f:0a:3e:a3:2a:9e:dd:71:23:
         46:da:89:37:c1:bc:e4:fe:d8:37:0b:75:bc:c5:28:c4:ba:37:
         6d:6a:ee:cd:fe:dc:d1:7d:3a:0e:85:7e:b6:42:c1:d9:ca:97:
         d7:87:2f:14:12:92:e8:fe:4c:a5:55:c2:5e:0f:ec:b5:83:0d:
         68:b3:1c:91:6c:1e:08:1e:df:d6:59:05:91:33:33:4f:d5:35:
         e7:94:d6:56:d2:45:be:f7:a3:f6:92:3d:cd:c5:d5:9c:85:46:
         ea:6c:9d:1d:7a:07:3c:df:4b:11:a0:6f:ec:6e:e8:af:3d:3b:
         c9:41:e8:35:0e:5b:fc:f9:ae:71:c9:1c:5d:bc:f9:34:90:5c:
         d6:8f:57:13:de:8d:0e:a6:c4:a7:c7:98:0e:d3:f9:d2:c3:e7:
         10:82:ad:a1:c8:54:97:cb:96:b2:4b:78:64:72:3f:bb:67:04:
         84:47:c7:64:78:fd:19:f6:c0:cb:4c:f5:03:9f:9c:45:5d:68:
         bb:9a:48:1d:66:6d:ed:1c:1b:92:68:e5:31:20:c9:da:03:c0:
         f0:1e:17:fc:ec:9c:f4:1f:30:c0:cc:0b:54:3d:de:c3:fc:3e:
         2a:c2:0e:af:6d:17:dd:18:88:8d:b9:ea:ca:76:3e:1f:f1:dc:
         1a:67:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 21:21:43 2023 by rpki-client on console-fra.rpki-client.org