Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa
File:                     34352e3136312e36342e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier:          cL4Nh6ohfohptqV0K+M+05W2f+VbCg/N31PEscjO2M4=
Subject key identifier:   D9:BC:A1:34:64:8C:C5:DD:80:9D:2A:0C:0C:37:DA:BB:89:C1:17:48
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       4F7A8EFB0AA79BC2CE8C3838BA3C0F06448A6478
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:02 +0000
ROA not before:           Thu 04 Apr 2024 18:45:02 +0000
ROA not after:            Thu 03 Apr 2025 18:50:02 +0000
asID:                     268444
IP address blocks:        45.161.64.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7a:8e:fb:0a:a7:9b:c2:ce:8c:38:38:ba:3c:0f:06:44:8a:64:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:02 2024 GMT
            Not After : Apr  3 18:50:02 2025 GMT
        Subject: CN=D9BCA134648CC5DD809D2A0C0C37DABB89C11748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:fc:a6:5c:9f:0c:9b:db:18:9c:0b:09:c6:
                    99:15:fc:34:18:62:02:09:72:d9:36:22:55:21:f6:
                    ec:9d:aa:4e:95:95:0f:cf:77:7f:fc:9a:2f:13:2b:
                    4d:53:47:95:93:19:9f:49:89:6b:f3:73:4a:6a:c1:
                    b9:bc:67:97:d6:d9:11:f1:be:23:31:c3:0a:62:63:
                    a4:e1:22:8d:12:b8:6b:39:18:1b:9f:ed:58:aa:7c:
                    ad:b1:3b:ce:54:74:11:c0:27:61:ba:1b:27:0d:79:
                    ee:5d:fc:0b:5e:9f:66:cf:7f:07:61:70:8e:ca:ba:
                    a8:c2:a0:fa:c1:87:0c:31:8e:7e:5a:39:52:3c:04:
                    a7:c3:65:44:b0:04:ce:5a:2c:6d:33:1d:a2:e3:25:
                    82:29:47:17:55:86:ec:48:45:59:28:25:72:bd:63:
                    82:fc:83:23:fb:28:4d:cc:7a:dd:9b:7b:c5:0c:ca:
                    35:ce:f5:f6:0e:ff:bc:18:eb:1a:41:13:86:a2:9c:
                    29:86:0c:a0:f1:fa:f5:6d:b0:d7:cb:39:10:9d:e8:
                    aa:23:44:3c:4c:3d:d7:4b:33:1b:bf:3f:f2:82:75:
                    d1:1a:25:dd:15:af:de:ae:e9:4c:c0:f2:51:d7:69:
                    d2:fe:69:ea:3b:d0:a5:b6:fb:8f:9e:e1:fc:42:dd:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:A1:34:64:8C:C5:DD:80:9D:2A:0C:0C:37:DA:BB:89:C1:17:48
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32342d3234203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ce:2f:95:b5:56:e9:77:a9:72:9a:10:35:67:2b:0e:b7:0a:
         82:71:36:61:64:7d:83:94:26:0f:bf:08:3c:dd:60:19:cb:f3:
         76:94:3c:ec:83:56:1e:a7:20:f0:6b:06:a1:62:d2:df:33:82:
         6f:d7:91:fc:70:28:99:32:c3:fe:90:21:1b:38:e9:c1:13:41:
         67:dd:73:3c:e3:99:0d:61:7b:14:c3:db:f8:7b:38:6e:0a:38:
         d3:88:da:d3:23:49:f2:3f:72:48:22:f9:22:da:1b:28:11:32:
         ba:e9:16:02:a4:b2:c4:b7:3f:47:17:e8:95:fa:0c:a5:bd:3e:
         62:61:18:f8:98:86:d9:32:63:39:11:b9:26:ec:6e:88:88:e0:
         bb:ec:b5:b6:6d:12:27:da:dd:1a:f4:52:27:7e:37:4e:d0:0f:
         7f:d1:94:04:2a:25:25:45:9b:34:09:ba:73:41:19:13:bd:ff:
         cb:18:ce:10:0e:a5:64:7f:6b:44:c3:f3:6c:85:ff:0a:fa:c4:
         e6:4f:db:f4:37:97:6e:4e:2d:90:d9:f6:85:7a:ef:b0:c4:b0:
         e0:8f:fe:bb:6b:c3:57:34:60:11:45:8e:f8:a6:26:b7:f0:a7:
         58:88:6c:14:2d:0b:2c:c9:ee:9b:f0:43:7b:ca:a6:8d:32:3a:
         6c:5e:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:03 2024 by rpki-client on console-ams.rpki-client.org