Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
File:                     34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa (raw, json)
Hash identifier:          KOJ7zu6AJPNaej4zhYeCFpLKYV99FJmi5Jrz7M0CLzc=
Subject key identifier:   A8:25:CF:E1:82:2E:4C:97:0F:A8:45:D4:92:04:F6:C8:39:69:DE:6A
Certificate issuer:       /CN=9C12188BAD93BC10E27E369B07DBA85672A99D26
Certificate serial:       06AFBD930928B247DB870EF02A4FD3AD3B2A9917
Authority key identifier: 9C:12:18:8B:AD:93:BC:10:E2:7E:36:9B:07:DB:A8:56:72:A9:9D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa
Signing time:             Wed 03 Apr 2024 21:26:12 +0000
ROA not before:           Wed 03 Apr 2024 21:21:12 +0000
ROA not after:            Wed 02 Apr 2025 21:26:12 +0000
asID:                     268234
IP address blocks:        45.236.112.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:af:bd:93:09:28:b2:47:db:87:0e:f0:2a:4f:d3:ad:3b:2a:99:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C12188BAD93BC10E27E369B07DBA85672A99D26
        Validity
            Not Before: Apr  3 21:21:12 2024 GMT
            Not After : Apr  2 21:26:12 2025 GMT
        Subject: CN=A825CFE1822E4C970FA845D49204F6C83969DE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:22:ba:06:af:43:8a:63:53:31:31:33:0b:
                    5a:87:2f:bc:f3:e0:56:11:b4:b5:8c:6b:23:6e:80:
                    1f:82:ca:a8:18:66:16:0f:6a:cf:1b:b7:58:9e:40:
                    c1:31:f0:ab:9b:1f:1f:7f:b7:ff:ed:a1:15:99:08:
                    f9:93:aa:58:af:48:24:70:cd:9f:a4:45:32:e2:21:
                    64:4f:19:fc:61:dc:68:bb:a5:58:bb:c8:be:8d:1e:
                    b2:d4:81:a4:6f:0e:1c:38:fd:ea:0f:f7:b8:af:95:
                    98:30:63:60:09:f2:42:d4:9b:f7:05:88:f3:87:26:
                    5e:07:98:1f:32:52:db:cc:50:3b:23:7a:b8:c4:9e:
                    13:98:93:d8:27:48:4c:8e:9c:b7:3d:a8:74:10:fb:
                    93:51:f8:c2:b2:87:09:e5:2f:22:b7:81:b6:82:52:
                    41:65:a1:7c:36:ce:c0:82:65:c0:e2:10:36:21:ba:
                    25:75:72:6e:7f:e3:a5:9c:8f:ed:e3:99:a2:f1:7d:
                    2e:f6:0a:ad:04:02:4c:50:d2:38:97:18:e7:99:f9:
                    61:c2:33:30:c9:33:d4:0f:3b:65:31:fb:aa:bd:b0:
                    25:51:40:7f:ac:1b:0e:78:54:41:01:eb:c2:6c:5f:
                    f3:88:b0:c7:6c:d1:32:8a:03:2f:c5:c7:f7:62:4b:
                    7c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:25:CF:E1:82:2E:4C:97:0F:A8:45:D4:92:04:F6:C8:39:69:DE:6A
            X509v3 Authority Key Identifier:
                keyid:9C:12:18:8B:AD:93:BC:10:E2:7E:36:9B:07:DB:A8:56:72:A9:9D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C12188BAD93BC10E27E369B07DBA85672A99D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WfKArkJf1oU645gf4axFjVWn8Fj9znJAUrQxZ5vRVYH/1/34352e3233362e3131322e302f32322d3234203d3e20323638323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:01:6e:ff:38:34:28:10:47:4f:fd:f0:1d:4f:7a:14:b0:
         df:14:f3:0a:d0:ef:f5:e3:1e:08:ce:63:af:bb:fd:8a:26:97:
         03:d3:fd:e7:07:0b:09:ac:bb:cf:0c:f0:fb:5d:78:48:8c:28:
         d7:71:57:60:00:16:7b:98:be:d3:44:42:87:93:3d:49:cc:30:
         4d:45:62:46:96:13:cb:e0:4e:04:c1:75:cd:8b:e5:4e:c7:c7:
         ce:39:93:42:20:87:0e:ad:98:8d:e0:ae:05:b6:5d:b0:9a:4a:
         5b:3d:1b:e6:33:09:ac:57:6a:82:b2:0d:ce:db:65:d5:50:7c:
         42:c9:27:5b:50:ac:65:d2:43:07:52:50:22:d7:f5:9b:a1:83:
         45:a7:17:72:2b:f9:a5:11:69:8d:b7:93:40:e5:ba:76:55:13:
         26:32:9a:73:7d:76:17:57:b9:4e:f4:49:d7:e6:a9:cc:af:b4:
         d2:75:44:86:62:4b:07:e3:3a:4a:ca:ce:8b:d5:f2:ad:92:65:
         76:4e:68:73:ca:9f:bf:7f:fa:8c:06:18:43:ab:ec:c8:c1:c5:
         04:4c:39:e2:33:e7:2e:ef:82:71:73:1e:d0:6f:3d:80:ba:ae:
         96:30:d3:9a:dc:bc:a6:9a:b1:13:96:3c:87:2c:ee:5a:65:b7:
         28:60:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 20:00:07 2024 by rpki-client on console-ams.rpki-client.org