Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
File:                     34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa (raw, json)
Hash identifier:          9RqHoelUWEOzY3palIU+W+p6hy5mfJR+PCcDn6+17yo=
Subject key identifier:   89:05:4F:A9:EA:79:CF:10:C8:F2:EE:A8:BF:47:19:AF:C0:6D:D2:35
Certificate issuer:       /CN=B37291E6021BB75C026BEA016CB480944391AEB5
Certificate serial:       4E247F1A2D60F3A4F32BF78ECC6F19C51136BB24
Authority key identifier: B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa
Signing time:             Tue 02 Jul 2024 05:10:33 +0000
ROA not before:           Tue 02 Jul 2024 05:05:33 +0000
ROA not after:            Tue 01 Jul 2025 05:10:33 +0000
asID:                     268809
IP address blocks:        45.173.100.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:24:7f:1a:2d:60:f3:a4:f3:2b:f7:8e:cc:6f:19:c5:11:36:bb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B37291E6021BB75C026BEA016CB480944391AEB5
        Validity
            Not Before: Jul  2 05:05:33 2024 GMT
            Not After : Jul  1 05:10:33 2025 GMT
        Subject: CN=89054FA9EA79CF10C8F2EEA8BF4719AFC06DD235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:ec:61:76:da:1b:b9:ba:ee:62:36:6b:e8:
                    ff:8d:d2:ee:82:52:ba:ae:48:4d:4e:f3:75:bd:c1:
                    e8:54:af:68:33:98:ad:cc:52:49:a0:56:37:5d:9f:
                    d3:97:4a:51:59:53:c2:66:0a:a5:a9:b0:a7:df:73:
                    60:34:84:e6:77:57:6b:0d:cd:29:b2:db:54:99:09:
                    9e:de:50:b3:5c:2e:ce:82:46:46:63:7a:df:66:8f:
                    7c:fb:15:87:d1:94:53:b6:a1:a3:6f:ae:18:c1:18:
                    73:b5:6e:7a:94:53:2e:ac:76:4d:0f:21:d4:16:37:
                    53:40:bb:97:e6:d3:9c:dd:c0:60:b8:94:c4:20:f2:
                    25:17:d0:7e:a9:e2:37:67:47:1b:bb:06:01:b3:3c:
                    47:7f:cb:e2:85:42:cd:99:f9:c9:01:2b:ca:b8:35:
                    34:c4:bb:61:e1:01:68:92:cb:33:f4:71:2f:e1:d2:
                    10:d0:c1:d4:72:82:04:d2:c8:9f:f7:a2:82:11:e0:
                    93:9f:23:51:23:a6:c9:0d:bd:7a:64:ac:3c:eb:e1:
                    52:1e:a7:31:1f:9b:f1:ea:41:6d:a8:35:58:d6:6b:
                    b7:5f:6e:a7:b9:cc:ea:06:00:d3:9f:f2:ea:fc:a6:
                    36:38:e4:75:93:ab:03:2c:30:a7:3a:33:de:56:8c:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:05:4F:A9:EA:79:CF:10:C8:F2:EE:A8:BF:47:19:AF:C0:6D:D2:35
            X509v3 Authority Key Identifier:
                keyid:B3:72:91:E6:02:1B:B7:5C:02:6B:EA:01:6C:B4:80:94:43:91:AE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/B37291E6021BB75C026BEA016CB480944391AEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B37291E6021BB75C026BEA016CB480944391AEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130302e302f32322d3234203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:96:c6:be:87:de:90:a9:19:d1:67:a2:2a:a6:d8:39:1b:4f:
         87:1d:95:c9:74:64:36:80:d6:b2:26:ca:51:b5:5f:af:83:de:
         cd:c2:97:f9:fe:78:4c:3d:b1:dd:33:47:3a:d0:5d:26:c5:5c:
         ed:ff:f5:31:13:45:e3:01:cc:65:a4:12:86:8b:3e:9a:60:02:
         de:4b:95:d5:f2:ae:84:7a:4b:be:d9:5c:d6:c2:23:ca:32:53:
         68:0b:65:9f:31:8a:eb:7a:96:63:ee:04:48:40:92:d9:73:bd:
         1d:3d:38:04:c8:fb:8c:0b:90:47:e9:19:8f:fc:e5:e1:62:2d:
         69:7a:d8:67:21:80:44:02:2d:22:d9:0f:64:9f:bc:c2:f7:bd:
         db:cc:ce:02:59:e1:da:e8:78:05:b5:b6:b2:18:8e:f6:cf:00:
         52:41:17:65:11:07:47:6a:12:ea:e1:a5:9f:a7:98:fd:96:d3:
         45:20:9e:ab:df:62:32:ae:7c:50:48:07:66:3c:d3:5e:22:59:
         75:c0:80:16:2e:3c:7d:5e:ab:9a:65:e4:83:f9:35:49:ad:18:
         58:7f:0a:5a:d1:62:8d:45:59:0b:35:82:29:7b:3d:e5:1c:86:
         74:1e:63:f1:20:bb:27:ee:58:1a:d0:6c:81:9e:4a:60:c7:2b:
         9a:50:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:55:41 2024 by rpki-client on console-fra.rpki-client.org