Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
File:                     34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa (raw, json)
Hash identifier:          EOpwb1zVMTJjJffsNrVqALw52GbmJxvKo9ssLzrb+I0=
Subject key identifier:   6D:6C:91:FC:0B:17:A2:E2:61:33:DD:FA:A6:45:B9:8C:25:95:E8:71
Certificate issuer:       /CN=4FB34E0C29C63105877D69D232A634E2E1E51483
Certificate serial:       22196CC964A1BC49AAFCDFADBB1BB9335667433E
Authority key identifier: 4F:B3:4E:0C:29:C6:31:05:87:7D:69:D2:32:A6:34:E2:E1:E5:14:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB34E0C29C63105877D69D232A634E2E1E51483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa
Signing time:             Tue 24 Oct 2023 16:19:57 +0000
ROA not before:           Tue 24 Oct 2023 16:14:57 +0000
ROA not after:            Tue 22 Oct 2024 16:19:57 +0000
asID:                     268013
IP address blocks:        45.167.153.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:19:6c:c9:64:a1:bc:49:aa:fc:df:ad:bb:1b:b9:33:56:67:43:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB34E0C29C63105877D69D232A634E2E1E51483
        Validity
            Not Before: Oct 24 16:14:57 2023 GMT
            Not After : Oct 22 16:19:57 2024 GMT
        Subject: CN=6D6C91FC0B17A2E26133DDFAA645B98C2595E871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:75:34:90:ce:ac:12:11:b3:07:6b:51:2d:2c:
                    9f:86:c4:c0:57:c6:a8:81:76:3b:d6:aa:8f:09:59:
                    6c:a7:ec:bc:45:ef:45:b4:b3:50:8c:59:9e:69:3e:
                    3c:6c:f2:2f:8e:48:35:9f:88:87:1c:14:60:d7:6a:
                    80:93:d5:55:f5:c2:21:e4:27:ad:9c:7b:63:6f:e6:
                    f8:c4:0d:ac:7f:b0:07:b9:2d:0b:ad:d4:fe:d0:18:
                    ef:e6:7c:01:3a:43:43:8a:aa:a7:1a:64:79:bd:87:
                    a6:e8:63:e9:66:89:19:d4:f6:a2:c1:60:43:6f:b7:
                    cb:14:f7:cb:58:62:ad:b9:9b:a5:5b:17:f4:cc:6f:
                    1f:bd:69:8c:1e:2b:83:fc:f4:9f:44:f5:de:7c:33:
                    93:44:1e:80:d1:c9:26:4f:32:49:cc:fc:2c:78:49:
                    2b:2a:09:5f:01:a2:fd:1a:8a:04:ce:99:ac:36:d5:
                    47:6a:5a:a8:3b:45:46:4b:9e:3d:4b:7f:e9:bf:75:
                    3d:ca:ab:ab:2d:e5:ee:a3:53:31:56:be:b8:93:55:
                    4b:01:2c:d5:e8:e7:5b:83:aa:54:f3:78:5a:ba:b1:
                    e5:4b:58:b4:61:4d:88:b9:71:97:ae:09:42:21:cf:
                    c7:08:70:51:dd:85:90:d0:c4:06:41:51:72:a8:43:
                    39:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:91:FC:0B:17:A2:E2:61:33:DD:FA:A6:45:B9:8C:25:95:E8:71
            X509v3 Authority Key Identifier:
                keyid:4F:B3:4E:0C:29:C6:31:05:87:7D:69:D2:32:A6:34:E2:E1:E5:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/4FB34E0C29C63105877D69D232A634E2E1E51483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB34E0C29C63105877D69D232A634E2E1E51483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135332e302f32342d3234203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:ca:0f:e1:4a:ca:67:52:8f:8a:9e:97:e1:69:58:3e:90:
         a4:5c:63:2b:38:86:0b:56:99:6b:b9:24:81:80:a0:54:e9:3a:
         77:89:9c:36:f6:0b:ef:f5:14:9c:89:13:d4:cd:e8:e9:57:9e:
         d5:74:74:2e:c9:9d:d8:17:3c:90:f8:ea:e5:45:62:5f:ab:41:
         be:f7:a5:ea:8c:47:a7:f4:a3:78:24:f4:64:8b:9d:4d:7c:62:
         c8:8e:81:bc:76:99:d0:e2:7c:7d:40:6e:a7:75:eb:55:fc:f4:
         7a:2a:82:5e:bb:b3:f5:bd:d1:33:00:38:c9:ff:7f:8f:a2:60:
         9b:e9:df:29:d2:3c:2e:8e:97:78:b5:3f:f9:a8:e1:86:f5:b4:
         d6:5f:48:2d:69:6a:d3:6c:ea:bb:98:d2:de:a0:be:e2:17:8b:
         6a:c6:1c:4c:cf:ec:d5:ce:ad:3b:13:be:92:e5:6b:28:35:77:
         07:0f:cc:cd:f0:c2:c4:5c:c5:de:06:e6:d7:a1:b6:c3:38:b5:
         75:78:5e:dd:b5:30:36:a0:2e:7d:b5:0e:91:4d:16:fa:a2:13:
         d7:62:04:ec:19:61:08:bf:6b:b3:22:f7:30:55:27:2f:79:64:
         89:18:5b:de:f6:29:60:28:23:32:c0:33:b1:98:b5:9a:a5:13:
         86:d6:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 02:38:42 2024 by rpki-client on console-ams.rpki-client.org