Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa
File:                     34352e342e3134342e302f32322d3332203d3e20323636303439.roa (raw, json)
Hash identifier:          kS5+mIqwD9LnwI/R0+r9UANPA/vM9pb32BH3ayCEhqM=
Subject key identifier:   69:83:4C:23:42:93:25:36:40:FE:8D:C6:5B:95:F8:B5:94:A1:96:18
Certificate issuer:       /CN=6C2F1230B14316D58E90723661E78A10144EA160
Certificate serial:       0A0D3019A81EF641E45E3BF0E2053D9FF6950615
Authority key identifier: 6C:2F:12:30:B1:43:16:D5:8E:90:72:36:61:E7:8A:10:14:4E:A1:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2F1230B14316D58E90723661E78A10144EA160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa
Signing time:             Thu 21 Nov 2024 17:05:42 +0000
ROA not before:           Thu 21 Nov 2024 17:00:42 +0000
ROA not after:            Thu 20 Nov 2025 17:05:42 +0000
asID:                     266049
IP address blocks:        45.4.144.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0d:30:19:a8:1e:f6:41:e4:5e:3b:f0:e2:05:3d:9f:f6:95:06:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C2F1230B14316D58E90723661E78A10144EA160
        Validity
            Not Before: Nov 21 17:00:42 2024 GMT
            Not After : Nov 20 17:05:42 2025 GMT
        Subject: CN=69834C234293253640FE8DC65B95F8B594A19618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:a2:ef:62:38:ed:b6:a7:dd:80:a6:17:2a:
                    5e:55:63:66:92:2f:0d:56:e9:cb:4c:de:bb:55:0d:
                    fc:d9:2b:27:2a:ea:b2:64:19:0d:e2:5b:9f:a4:5e:
                    6a:cc:77:19:b6:b9:34:21:94:68:17:3f:70:8e:69:
                    69:08:35:29:e5:d1:ff:ab:9f:60:e0:10:80:6a:b4:
                    11:dd:bf:53:e8:85:bd:74:e2:81:3c:1e:bd:33:28:
                    1f:f3:b4:83:13:b4:d8:3b:e7:fb:eb:e5:6f:bc:18:
                    a9:ce:de:2b:3b:0d:c4:95:72:c9:57:a4:89:e6:73:
                    97:a4:22:09:b1:67:44:65:f5:16:ee:06:6d:0f:fb:
                    7c:94:68:b0:e2:ff:6a:3e:f8:6b:3c:1b:af:04:3e:
                    92:53:b2:9e:8e:d5:b0:b9:e8:eb:78:b8:c0:fa:4f:
                    6e:d9:70:92:54:20:57:94:6d:a0:3c:5c:ab:38:2a:
                    26:6f:4e:de:bd:b3:7a:01:76:17:90:5f:fe:3a:af:
                    65:1c:5e:ec:0a:45:3d:7c:bf:b9:34:1d:59:eb:39:
                    5f:30:f0:dc:e2:13:85:d1:1e:18:a3:b1:40:c5:18:
                    02:d6:a9:7f:6b:93:7e:84:67:98:c1:43:81:34:f2:
                    f3:19:47:33:09:d8:a1:ca:79:ee:ba:65:aa:b3:8d:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:4C:23:42:93:25:36:40:FE:8D:C6:5B:95:F8:B5:94:A1:96:18
            X509v3 Authority Key Identifier:
                keyid:6C:2F:12:30:B1:43:16:D5:8E:90:72:36:61:E7:8A:10:14:4E:A1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/6C2F1230B14316D58E90723661E78A10144EA160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C2F1230B14316D58E90723661E78A10144EA160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3332203d3e20323636303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:37:fb:9b:a8:32:30:6c:0d:78:b4:b9:07:a5:0e:07:8a:
         b5:fc:f2:75:79:47:95:32:47:d6:f6:93:5a:9b:2f:c3:b3:c3:
         d1:43:ac:93:71:6d:28:c0:ec:dd:c0:d4:67:af:d4:be:0a:83:
         9a:f0:1f:4b:c5:71:57:dc:9d:73:26:e1:ac:a9:09:af:1d:9f:
         ef:37:ae:c2:7c:14:d4:43:eb:cf:ed:e4:cb:64:8f:55:a6:32:
         5f:4c:e6:16:5f:9e:4e:0a:79:f3:e5:87:af:a5:26:d7:e7:5f:
         50:78:fa:56:15:d2:53:cd:17:66:72:93:bf:93:c4:c8:b1:ed:
         6f:19:7d:4e:cb:b8:98:75:b1:bc:ca:61:5b:71:03:77:d0:69:
         62:8a:75:1e:b1:bd:69:6d:e3:33:58:12:fc:79:4c:14:d2:76:
         56:ab:b8:27:0b:7b:09:5f:84:77:4b:00:07:cb:5e:08:cb:6e:
         9b:ab:be:2e:47:41:de:86:d0:bf:c9:c6:90:d1:2b:e1:e1:c5:
         cf:fe:4f:ea:44:c7:83:51:9b:70:1c:3f:3f:8b:26:23:24:da:
         c3:da:56:51:fe:c7:a5:55:0d:a7:6e:7b:58:94:96:81:98:d7:
         e9:11:11:46:5f:15:65:49:39:2d:b4:5c:11:2a:cc:36:ab:c6:
         15:93:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org