Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa
File:                     34352e3136312e36352e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier:          nlPvaYGUQzVAngOzDkUDsnCgISXmeU6aUOV8QggigZk=
Subject key identifier:   82:54:3A:17:2E:6D:86:F3:15:74:68:E3:1E:39:64:AB:F0:04:9B:AD
Certificate issuer:       /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial:       069DCC424F29A56DC986FDAF68D9F2254836DBE9
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa
Signing time:             Thu 04 Apr 2024 18:50:02 +0000
ROA not before:           Thu 04 Apr 2024 18:45:02 +0000
ROA not after:            Thu 03 Apr 2025 18:50:02 +0000
asID:                     268444
IP address blocks:        45.161.65.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9d:cc:42:4f:29:a5:6d:c9:86:fd:af:68:d9:f2:25:48:36:db:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
        Validity
            Not Before: Apr  4 18:45:02 2024 GMT
            Not After : Apr  3 18:50:02 2025 GMT
        Subject: CN=82543A172E6D86F3157468E31E3964ABF0049BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4b:0a:11:a7:32:08:33:b5:8b:7e:26:10:29:
                    9d:26:43:82:e3:ad:35:03:86:42:ce:92:c6:55:25:
                    c3:a7:0b:a7:de:3b:52:a4:89:63:4b:72:06:49:7c:
                    54:68:df:fc:4b:64:7a:b6:6f:31:29:59:67:a1:dc:
                    83:bc:c1:56:22:2b:59:b4:b3:e5:ff:9a:5d:70:5a:
                    30:c2:e6:c8:c1:1f:79:04:d2:08:d6:33:81:be:0d:
                    51:3b:55:4a:df:3b:ba:46:61:26:cd:1a:c5:ee:88:
                    c4:e2:b5:2b:63:02:f1:27:e0:8c:d3:f5:e1:1f:3b:
                    49:4f:f0:99:0c:f6:a8:e7:70:aa:1d:30:5a:62:2b:
                    35:e8:13:3f:cc:13:53:a8:64:a5:0a:60:44:ec:d8:
                    c8:80:71:5d:e5:fa:34:c4:e8:9e:7d:61:c8:86:cc:
                    8e:bd:e5:55:6f:cc:08:fd:89:ec:88:12:fc:fb:e9:
                    21:81:67:95:47:c5:1a:26:ed:d9:87:87:49:43:d2:
                    89:05:08:ed:fb:52:3b:af:75:ff:e4:e6:a6:5a:4c:
                    b8:0c:f1:69:9d:29:57:bf:7e:27:b1:0c:5d:48:3b:
                    31:64:56:be:42:dd:0a:55:e8:13:64:3d:21:7b:19:
                    86:66:7e:74:35:95:b4:8a:6c:c3:93:5b:7a:66:35:
                    c2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:54:3A:17:2E:6D:86:F3:15:74:68:E3:1E:39:64:AB:F0:04:9B:AD
            X509v3 Authority Key Identifier:
                keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:60:32:a8:2a:f1:f5:ce:bc:44:8d:26:0f:c0:b3:8f:c0:
         c0:ae:44:bd:5d:9e:db:ee:2a:4a:2e:c2:f9:49:e5:3a:a4:f8:
         ed:34:ea:e8:42:42:5c:d9:b7:61:43:98:a7:f5:2d:fa:1a:ab:
         fd:a2:e5:d1:1c:c6:00:b1:75:65:12:41:b6:4f:05:38:d8:c5:
         bf:69:a7:06:8a:ce:e4:5e:86:20:cb:7c:77:8e:e2:08:b5:d6:
         6a:25:bf:17:31:db:6a:f1:42:05:a0:ae:e8:22:4f:2f:24:dc:
         58:fa:c2:06:93:82:7c:ec:a9:3d:06:03:38:f5:9c:34:34:ed:
         5e:d5:ac:9b:72:90:04:6f:91:f2:64:be:98:85:dd:dc:cf:6d:
         09:b1:4f:7b:5e:bf:3b:f7:3f:bf:a6:4e:2f:d7:b4:7f:06:8c:
         53:f2:c4:13:83:fb:47:b3:8c:42:50:b0:88:49:4d:33:98:b5:
         40:b5:dc:0d:54:98:9b:29:10:27:34:95:50:ce:ae:b3:9a:83:
         c5:3b:5e:38:62:e9:a5:7b:80:4e:a0:38:ae:89:fb:ba:44:47:
         38:81:06:d1:24:99:9b:24:5a:51:00:aa:0b:6c:58:4a:52:b4:
         62:3f:c0:62:fd:1c:35:af:26:d5:9e:17:cb:c1:e1:13:5c:24:
         12:f6:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:03 2024 by rpki-client on console-ams.rpki-client.org