Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e392e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          3Fb/lJy9npc7zSU00lgyz4DFLX4MNOodAYgJ09hqJY8=
Subject key identifier:   C6:24:32:BC:47:4A:7F:41:DA:DA:F9:82:5F:5E:79:FF:7A:E8:2B:D0
Certificate issuer:       /CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
Certificate serial:       72E650606B190CAB5277CDAE9464227B96E58882
Authority key identifier: B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
Signing time:             Wed 05 Jun 2024 18:33:40 +0000
ROA not before:           Wed 05 Jun 2024 18:28:40 +0000
ROA not after:            Wed 04 Jun 2025 18:33:40 +0000
asID:                     268213
IP address blocks:        45.236.9.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e6:50:60:6b:19:0c:ab:52:77:cd:ae:94:64:22:7b:96:e5:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B617F48A1128769A4C93EA7BD53E7201359F4AAA
        Validity
            Not Before: Jun  5 18:28:40 2024 GMT
            Not After : Jun  4 18:33:40 2025 GMT
        Subject: CN=C62432BC474A7F41DADAF9825F5E79FF7AE82BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:8c:02:2e:6c:5e:f9:53:cf:0a:27:40:8c:
                    b7:1f:82:44:ef:a7:3f:dc:72:66:be:54:43:2e:b2:
                    e3:19:f6:6e:c5:f1:96:dc:f9:d3:38:84:f1:94:1b:
                    77:c2:f2:04:7d:62:37:1e:32:b8:7e:02:58:4b:9b:
                    1b:f6:32:ce:80:f0:04:e9:22:97:2d:ea:eb:8c:a6:
                    54:66:f7:72:bd:e8:22:51:6a:40:f2:73:d3:87:1a:
                    7b:d0:99:f1:3f:32:39:f9:5a:99:18:47:55:d7:f2:
                    33:87:a9:59:fb:ce:38:bc:6f:83:ff:48:49:ed:01:
                    d4:77:5b:48:69:4e:c1:db:31:07:2a:64:5f:d5:ff:
                    50:e4:85:f6:3a:a6:bd:69:ca:7a:dd:8d:10:7a:57:
                    d8:67:24:64:5c:46:f5:c2:02:6b:33:35:d1:50:50:
                    32:8a:6e:9d:65:0e:fb:a7:c4:c7:9f:ed:d5:be:c8:
                    0a:c8:41:85:93:b9:a2:27:af:7b:24:59:cc:a7:21:
                    0d:7e:12:c8:a7:be:fb:2d:c3:23:e7:d2:ce:f1:f0:
                    e0:10:f7:8b:e3:74:3a:3b:09:97:57:cb:52:47:85:
                    2b:55:5b:68:dc:15:2b:a0:d2:31:15:e3:78:94:9e:
                    3f:fa:28:1f:c1:b0:7b:34:90:68:09:21:21:cd:e7:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:32:BC:47:4A:7F:41:DA:DA:F9:82:5F:5E:79:FF:7A:E8:2B:D0
            X509v3 Authority Key Identifier:
                keyid:B6:17:F4:8A:11:28:76:9A:4C:93:EA:7B:D5:3E:72:01:35:9F:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B617F48A1128769A4C93EA7BD53E7201359F4AAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/1/34352e3233362e392e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:68:28:af:93:bf:94:5b:d8:71:39:46:58:10:4b:51:28:
         8d:2a:f8:cd:d3:83:f8:46:2b:88:8f:d2:12:88:03:91:74:6a:
         18:9f:79:33:52:46:8e:97:1e:d6:76:15:4a:17:54:a2:40:d5:
         a6:6d:2e:77:5e:08:a9:3e:cb:28:70:1d:95:c7:4e:30:98:54:
         7d:81:e4:54:d2:3f:68:f0:80:40:12:ac:c0:88:6a:68:5c:40:
         0b:06:76:44:12:06:b3:a0:f1:1a:a4:f1:6e:65:88:77:e5:ad:
         70:7c:8b:bf:df:e9:8a:52:5d:ef:cd:c2:c5:dd:fa:65:14:65:
         35:ea:20:13:84:3c:87:79:5c:d6:05:dc:92:70:8e:c6:80:69:
         d3:ac:af:ed:1a:4a:f0:0e:af:e7:77:9c:87:55:d1:e4:9c:9e:
         5c:71:08:53:38:27:7d:0e:5d:61:32:7d:f9:51:f8:3c:40:91:
         c3:2b:a3:65:2b:25:62:70:b5:5f:2e:15:96:6f:68:b4:1d:cd:
         22:fb:af:85:6f:57:ab:1c:a0:6f:d9:d7:69:9b:fc:3a:b3:d6:
         09:b8:ef:df:63:c6:1a:32:88:58:35:81:be:0c:4b:1b:2b:bf:
         5d:33:21:23:0b:ee:25:e4:48:92:d2:d0:ee:80:68:99:cf:33:
         e2:81:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 08:39:49 2024 by rpki-client on console-ams.rpki-client.org