Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
File:                     34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa (raw, json)
Hash identifier:          o4+ovj4B7BOSDQLOJkTJ/0kL6tW2BB4WUuk+wx4mNjc=
Subject key identifier:   49:2F:2A:96:6C:4A:C0:92:5B:A1:87:AB:FE:BA:7C:AE:19:B8:B1:E8
Certificate issuer:       /CN=77754AC1E4FC6C88BF7915036BCE71519D6EAE95
Certificate serial:       451AAF058171B79A84999145B972D6A48ED92C65
Authority key identifier: 77:75:4A:C1:E4:FC:6C:88:BF:79:15:03:6B:CE:71:51:9D:6E:AE:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa
Signing time:             Thu 04 Apr 2024 03:16:50 +0000
ROA not before:           Thu 04 Apr 2024 03:11:50 +0000
ROA not after:            Thu 03 Apr 2025 03:16:50 +0000
asID:                     269707
IP address blocks:        45.191.160.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:af:05:81:71:b7:9a:84:99:91:45:b9:72:d6:a4:8e:d9:2c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77754AC1E4FC6C88BF7915036BCE71519D6EAE95
        Validity
            Not Before: Apr  4 03:11:50 2024 GMT
            Not After : Apr  3 03:16:50 2025 GMT
        Subject: CN=492F2A966C4AC0925BA187ABFEBA7CAE19B8B1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:44:5f:38:00:4b:bf:98:26:60:04:91:61:
                    79:e7:77:67:4e:9d:8c:5b:e7:1c:6a:fd:03:fe:a3:
                    9f:76:26:64:e0:d9:58:c6:e4:bf:de:a1:a9:39:0e:
                    a0:79:27:e7:f6:5f:66:a4:61:ac:1e:b3:4c:11:b0:
                    bd:a5:4e:a7:84:06:a1:5c:c1:71:be:d8:e1:b9:bc:
                    cc:26:6c:bc:f2:da:07:1c:f2:b3:7b:49:e9:ae:5a:
                    a7:9a:fc:77:57:8e:9e:72:8c:dc:87:de:c8:cb:ad:
                    51:f9:10:43:06:c5:59:6e:ff:2d:4c:08:1c:7b:97:
                    5c:08:ea:13:b4:a4:54:50:33:89:11:15:fe:d5:91:
                    7b:c0:6d:e3:bf:c3:0c:92:0f:d9:3e:f0:f4:c7:1a:
                    6f:75:03:a6:c6:75:b4:6d:32:ac:2e:d2:b1:8a:7b:
                    13:c0:4b:b7:9c:88:21:30:03:56:67:3a:a1:b5:93:
                    87:bb:db:e9:98:5b:21:c2:db:f7:79:c3:39:16:df:
                    6a:43:6e:d4:5a:23:1d:11:a7:b7:99:50:54:67:68:
                    49:ae:5f:b4:5f:9d:8c:26:dc:03:31:65:d0:bf:c0:
                    b5:95:20:20:6c:e7:05:66:78:e5:94:9a:36:f2:71:
                    58:8b:f6:0e:20:3b:84:1d:b8:a4:54:44:cc:69:17:
                    fc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:2A:96:6C:4A:C0:92:5B:A1:87:AB:FE:BA:7C:AE:19:B8:B1:E8
            X509v3 Authority Key Identifier:
                keyid:77:75:4A:C1:E4:FC:6C:88:BF:79:15:03:6B:CE:71:51:9D:6E:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77754AC1E4FC6C88BF7915036BCE71519D6EAE95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aPCngLkcLockrANsKXuutUoNrd4No5DVx63BfhCL6MG/1/34352e3139312e3136302e302f32322d3332203d3e20323639373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:18:66:90:17:12:00:71:25:68:13:0b:35:38:bc:41:2d:
         a4:03:1b:95:07:f2:f8:14:16:11:75:ee:a1:66:10:39:b5:9f:
         c4:5f:f2:ac:28:2e:11:ed:fc:96:a8:04:b7:be:47:ac:c8:86:
         cd:fe:d1:65:8c:11:5e:e4:10:c2:fa:d4:c2:e8:ca:41:28:4a:
         b4:a3:f4:c4:c0:8b:40:03:2a:86:e5:b5:80:62:18:14:03:c9:
         1a:a5:52:c5:77:b8:1c:e0:88:18:0e:4b:3d:74:58:32:1f:05:
         fa:57:2e:e5:f9:c8:60:fa:2b:5e:ca:e4:3d:03:2c:02:29:83:
         2f:a1:d6:f2:b9:08:48:1e:34:12:11:4e:f9:ab:33:d9:04:5b:
         52:28:d3:ef:6d:af:cd:f7:47:15:26:d3:5e:cf:31:20:e3:9e:
         48:f9:1e:a9:83:68:a4:8d:bf:d3:55:a0:c0:1d:14:b5:a8:81:
         28:64:e4:94:9f:5d:53:59:b6:a9:83:a8:c3:5e:26:43:1e:51:
         5e:b0:1f:16:f0:5d:79:13:69:20:46:3f:62:86:e2:48:aa:13:
         36:ce:88:61:0c:11:de:71:38:dc:11:1c:07:3e:4d:1a:bc:6e:
         8c:4d:dc:af:52:dc:39:1d:3c:15:1e:8e:bb:05:9b:6b:8b:ef:
         5c:cb:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 16 04:59:17 2024 by rpki-client on console-fra.rpki-client.org