Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135342e302f32332d3233203d3e20323638303133.roa
File:                     34352e3136372e3135342e302f32332d3233203d3e20323638303133.roa (raw, json)
Hash identifier:          l+GgrXib168P7zNnGu1Z+7Zjrc5UWSNf76BbG88xLm4=
Subject key identifier:   2F:71:09:A6:EB:D5:A8:DC:F9:28:40:DE:A3:5D:8C:B1:21:C3:DE:8A
Certificate issuer:       /CN=4FB34E0C29C63105877D69D232A634E2E1E51483
Certificate serial:       641BFD553E014E5713CAC49E12F788CB49FD6DCB
Authority key identifier: 4F:B3:4E:0C:29:C6:31:05:87:7D:69:D2:32:A6:34:E2:E1:E5:14:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB34E0C29C63105877D69D232A634E2E1E51483.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135342e302f32332d3233203d3e20323638303133.roa
Signing time:             Tue 24 Oct 2023 16:20:00 +0000
ROA not before:           Tue 24 Oct 2023 16:15:00 +0000
ROA not after:            Tue 22 Oct 2024 16:20:00 +0000
asID:                     268013
IP address blocks:        45.167.154.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1b:fd:55:3e:01:4e:57:13:ca:c4:9e:12:f7:88:cb:49:fd:6d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB34E0C29C63105877D69D232A634E2E1E51483
        Validity
            Not Before: Oct 24 16:15:00 2023 GMT
            Not After : Oct 22 16:20:00 2024 GMT
        Subject: CN=2F7109A6EBD5A8DCF92840DEA35D8CB121C3DE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:34:71:d3:9f:b1:a4:62:75:04:38:c5:94:8c:
                    e5:58:96:40:fb:e2:d4:47:d0:ca:f3:09:a9:b5:f8:
                    96:c5:e0:9d:ac:bf:0f:d4:94:c7:18:87:59:f6:b2:
                    93:bf:ee:a5:ac:2d:97:ec:32:97:28:34:2f:f1:d9:
                    a6:ed:24:25:a2:ed:5e:59:aa:d0:ea:8c:0f:3d:fc:
                    09:b7:20:d3:e9:3f:f9:3b:99:31:ec:44:3d:93:59:
                    03:4d:8a:70:20:d7:b8:dc:06:35:c5:b4:49:42:c8:
                    e8:bf:da:85:39:71:82:1c:44:c7:c0:a3:a1:15:08:
                    23:f5:66:03:f4:98:76:cb:8b:6b:da:55:12:0f:6b:
                    b2:21:39:d1:88:32:6e:64:c9:7c:08:50:be:0e:8d:
                    e2:05:ce:05:b9:7e:fe:b4:c9:5f:d1:69:8a:af:09:
                    4f:df:09:36:ba:8f:ee:0e:80:70:9f:f6:6e:33:90:
                    06:d7:bf:cc:83:46:bf:a1:3d:a6:11:f3:9e:eb:a0:
                    5e:e8:a3:76:b5:9b:c6:1f:58:9e:83:9f:d7:7d:85:
                    50:57:99:42:4d:cd:7d:5d:02:23:98:7f:1c:b1:88:
                    a5:8b:69:d6:ef:1b:c3:17:85:f0:ac:d7:ac:ea:f9:
                    2f:d2:8a:99:c7:92:ff:1f:f9:42:de:f4:5d:8a:ee:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:71:09:A6:EB:D5:A8:DC:F9:28:40:DE:A3:5D:8C:B1:21:C3:DE:8A
            X509v3 Authority Key Identifier:
                keyid:4F:B3:4E:0C:29:C6:31:05:87:7D:69:D2:32:A6:34:E2:E1:E5:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/4FB34E0C29C63105877D69D232A634E2E1E51483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FB34E0C29C63105877D69D232A634E2E1E51483.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/34352e3136372e3135342e302f32332d3233203d3e20323638303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:4e:91:f2:ac:fc:14:80:c8:64:75:02:38:a5:3a:10:d5:
         13:0c:97:b7:75:ba:c9:b8:61:b8:f4:58:1a:09:d4:11:0c:2e:
         0c:15:1e:96:fd:87:ac:0a:71:94:47:f4:d0:0a:70:54:51:d5:
         79:1f:ee:16:2f:0e:75:94:f1:14:5f:e7:26:fb:6a:14:c4:d8:
         13:05:b7:1b:e1:30:a4:4d:4e:a7:c0:2b:47:bb:b3:83:2d:11:
         60:c1:51:e4:ba:30:76:9a:14:79:2f:7e:f0:bc:eb:d2:29:61:
         48:30:02:89:33:38:b0:08:9d:6d:67:b8:e0:15:5c:10:c2:0e:
         11:4e:3f:7f:a7:5f:57:31:2a:d7:77:72:68:7f:e0:98:ce:ce:
         14:0c:8a:fd:39:35:3a:55:b7:97:6c:f4:26:8f:88:f9:24:c7:
         45:fc:78:b0:e9:ef:a2:c6:bd:be:3d:a2:66:80:2e:b7:04:6b:
         c4:be:bf:87:3d:f3:29:7c:44:e6:3d:2b:b0:a4:6c:1b:aa:7b:
         96:11:4d:d2:81:5e:34:34:c4:53:01:c9:25:ee:fd:cf:68:59:
         b5:7f:84:cd:9a:43:01:e9:d9:d1:72:8a:20:43:73:ee:ac:eb:
         09:ae:ee:7f:6f:2e:72:90:3f:f8:cb:07:23:ff:b1:ea:80:41:
         a1:69:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 02:58:43 2024 by rpki-client on console-fra.rpki-client.org