Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131352e302f32342d3234203d3e20323637353631.roa
File:                     34352e37302e3131352e302f32342d3234203d3e20323637353631.roa (raw, json)
Hash identifier:          7LLHt48Ij8u3gnBg6xf1G16sxKAYHG2wfThB3i6Yc/I=
Subject key identifier:   2D:7D:7A:AD:AF:DE:21:CD:47:D3:AB:3B:8C:8F:BE:47:EA:B1:F1:AA
Certificate issuer:       /CN=9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9
Certificate serial:       6398DC794BC63284A17E7101DF1B9800C03B59CE
Authority key identifier: 9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131352e302f32342d3234203d3e20323637353631.roa
Signing time:             Wed 27 Dec 2023 11:50:43 +0000
ROA not before:           Wed 27 Dec 2023 11:45:43 +0000
ROA not after:            Wed 25 Dec 2024 11:50:43 +0000
asID:                     267561
IP address blocks:        45.70.115.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:98:dc:79:4b:c6:32:84:a1:7e:71:01:df:1b:98:00:c0:3b:59:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9
        Validity
            Not Before: Dec 27 11:45:43 2023 GMT
            Not After : Dec 25 11:50:43 2024 GMT
        Subject: CN=2D7D7AADAFDE21CD47D3AB3B8C8FBE47EAB1F1AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:0b:ab:39:d6:11:27:8a:9c:05:c0:59:bd:
                    b7:8b:03:7f:cb:9a:ce:0f:76:7a:c1:72:84:ac:da:
                    9f:39:21:ce:c5:ef:34:89:4f:49:4b:7f:89:e1:ca:
                    a4:39:80:6d:4a:04:05:3d:b3:94:a7:90:7a:cd:9e:
                    71:78:6a:a9:8b:80:24:1b:86:37:92:46:b0:f5:90:
                    3f:4f:a4:56:f2:87:cc:47:d7:36:e4:29:d6:20:b7:
                    8a:5f:5a:53:82:0f:41:96:cd:f3:13:98:86:31:46:
                    6e:86:69:c9:27:f6:24:90:c8:b1:d0:11:fc:cf:c1:
                    b9:1b:06:4b:62:68:a9:da:2f:87:a5:f0:70:93:c8:
                    7d:62:0e:f8:05:74:fa:a3:b9:11:80:bd:61:de:e8:
                    51:2a:23:df:70:82:92:56:92:b6:af:98:8b:90:4d:
                    7f:eb:cc:3e:fb:38:fb:0b:0e:06:aa:ba:26:17:71:
                    2f:22:87:61:ab:00:b0:83:4c:e5:1c:a2:aa:9c:56:
                    74:b9:60:ca:d2:96:35:3a:fa:8a:0f:10:ea:06:d5:
                    05:fc:41:b7:c5:10:f1:de:cb:e2:c4:fd:05:2d:3c:
                    ff:d3:29:8f:18:4d:40:36:1d:5c:17:fe:6a:71:d5:
                    70:a0:20:21:3e:a8:ed:d1:1c:cf:d5:fb:18:89:22:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7D:7A:AD:AF:DE:21:CD:47:D3:AB:3B:8C:8F:BE:47:EA:B1:F1:AA
            X509v3 Authority Key Identifier:
                keyid:9A:70:F3:8D:C7:D8:D6:2E:DE:E0:B9:D5:B4:7E:71:66:54:1A:49:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A70F38DC7D8D62EDEE0B9D5B47E7166541A49B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/guR79uiqD6mmuy7SaZKHUPGXGdVfAYV2LEbf64KaS2y/0/34352e37302e3131352e302f32342d3234203d3e20323637353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:3d:14:f8:c1:08:68:de:6e:43:b3:4f:95:46:fd:c1:26:dc:
         96:4b:8d:4c:6a:8d:a2:2b:6b:e0:53:db:95:ef:76:7e:0d:a1:
         eb:30:36:63:90:5a:e8:87:b1:f2:92:2c:68:f7:92:6f:7d:8b:
         5b:29:22:0c:80:d1:bd:73:75:a4:7e:73:e9:29:db:ad:d8:3f:
         97:02:49:11:ca:49:93:5c:e7:02:02:5f:1d:5c:a4:9a:ba:11:
         cd:a7:30:3e:e7:d9:18:c7:d2:07:2d:cd:15:83:17:9f:17:f5:
         e0:7f:80:f7:c0:ce:e9:b1:1f:aa:f6:44:3d:57:19:91:e5:cb:
         c9:d9:11:32:ba:76:d6:45:84:7c:ec:5c:80:c8:70:32:90:20:
         5c:c5:93:70:2f:92:0a:1f:f0:5d:49:b2:e1:07:18:1d:de:b9:
         92:ba:19:a2:a5:b1:36:de:7e:31:f2:75:2b:e6:b2:0e:19:da:
         22:42:04:79:71:a0:8a:61:5f:92:6b:bb:e3:d2:96:f3:15:56:
         67:a5:01:2e:1f:77:67:00:84:6f:ed:a6:c3:07:c8:73:62:f8:
         ad:50:f7:bf:94:d5:ee:2e:44:4f:22:56:5f:4b:04:6d:80:ea:
         b6:81:a8:1c:47:4e:2f:2d:32:c0:a3:12:14:7d:48:79:f5:ca:
         16:3f:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 03:17:22 2024 by rpki-client on console-ams.rpki-client.org