Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32342d3234203d3e203631363133.roa
File:                     34352e3137312e36302e302f32342d3234203d3e203631363133.roa (raw, json)
Hash identifier:          X+76yHli4Ew3wS1NR8wCQbX4fclsqYJ0hYA89A9aCUI=
Subject key identifier:   6B:BE:03:02:99:6D:FF:59:E9:10:AA:6B:ED:92:2E:5B:25:29:7D:F5
Certificate issuer:       /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial:       1F4B4CDECB29BE8EFDBCFE4838FC68DBE3162B6E
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32342d3234203d3e203631363133.roa
Signing time:             Fri 05 May 2023 18:44:02 +0000
ROA not before:           Fri 05 May 2023 18:39:02 +0000
ROA not after:            Fri 03 May 2024 18:44:02 +0000
asID:                     61613
IP address blocks:        45.171.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4b:4c:de:cb:29:be:8e:fd:bc:fe:48:38:fc:68:db:e3:16:2b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
        Validity
            Not Before: May  5 18:39:02 2023 GMT
            Not After : May  3 18:44:02 2024 GMT
        Subject: CN=6BBE0302996DFF59E910AA6BED922E5B25297DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:64:d2:83:16:8e:ac:7e:e6:93:4b:df:52:
                    1e:1b:76:d4:d4:a1:a2:9c:09:34:76:9c:d9:59:2d:
                    23:e3:81:50:06:a5:f3:29:c8:8b:f4:88:3f:e7:6a:
                    b0:58:fa:5d:c8:5e:1c:6e:b3:f0:ea:ef:ba:04:cf:
                    9e:da:7a:94:8a:da:31:56:36:f9:24:27:6c:a9:de:
                    05:bc:ea:73:ea:92:bc:72:97:2a:4b:14:62:fc:b0:
                    05:e8:0c:50:b9:bc:51:9c:6d:e5:b8:5d:ff:72:39:
                    b9:f8:ff:5a:78:23:2f:8a:ec:00:a6:30:ec:2e:0b:
                    db:75:84:49:65:78:0d:20:1b:d6:7c:91:32:95:d7:
                    f0:a0:2c:3d:0f:db:8f:f2:4a:6d:d0:53:70:82:bc:
                    58:25:74:b8:6f:1c:96:d0:56:1d:8d:7b:55:ab:86:
                    2c:ac:5a:b0:3e:6b:b1:03:05:53:07:0b:af:9c:d0:
                    ec:c9:01:06:af:9b:b9:a3:7b:11:72:f1:31:62:09:
                    a2:42:f0:93:7e:df:50:2f:28:c3:cf:dc:46:ed:6b:
                    89:61:01:c5:93:be:70:5d:d9:cf:d6:68:ad:6d:90:
                    81:97:aa:82:ff:24:a8:fa:80:33:95:91:1b:42:92:
                    1d:3e:90:0e:73:96:96:d9:a5:05:61:f5:5e:84:14:
                    66:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BE:03:02:99:6D:FF:59:E9:10:AA:6B:ED:92:2E:5B:25:29:7D:F5
            X509v3 Authority Key Identifier:
                keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32342d3234203d3e203631363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:d1:54:69:23:67:fa:0a:8d:d8:b1:18:42:f9:5e:51:bd:25:
         67:6d:bc:52:b8:2a:7e:20:87:d9:74:91:c6:60:ee:cc:d0:f7:
         bc:49:98:9f:9d:7f:32:99:c5:4b:23:db:0f:c8:e9:b2:5b:c0:
         ee:86:dc:3c:c9:bb:d3:96:54:5c:b4:d8:63:91:11:3d:38:31:
         dd:97:80:d2:28:76:c0:1c:68:22:63:83:08:37:c1:29:15:92:
         a3:0f:97:28:51:46:57:c4:6f:5f:55:9f:0a:8a:3d:7b:52:44:
         6e:17:6b:9c:ee:6e:7a:b2:63:db:c6:4c:d9:d3:e9:cc:48:74:
         2e:54:f4:09:92:37:ba:9b:8f:55:c1:db:fe:8d:76:8c:54:a3:
         56:39:06:5e:40:7c:6d:86:a8:8f:a5:58:eb:f9:56:6b:20:ce:
         6e:73:7b:ab:23:0a:f0:32:3b:c4:8f:ce:f8:c5:e8:0d:e1:2c:
         b4:9a:b1:22:0b:62:2e:22:d5:42:d8:88:6b:ea:87:1b:e0:4e:
         be:7a:81:98:5d:37:b1:0a:8a:a3:c8:85:97:35:12:c4:ed:fd:
         ef:30:7e:12:a4:32:e4:aa:38:14:2a:87:0b:20:99:36:f8:7a:
         4f:a1:99:13:8d:67:83:ef:bf:f1:09:f6:ce:50:46:df:e9:0b:
         98:07:65:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 05:29:59 2024 by rpki-client on console-ams.rpki-client.org