Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3234203d3e20323638393133.roa
File:                     34352e3137352e3232382e302f32322d3234203d3e20323638393133.roa (raw, json)
Hash identifier:          8hCtSMgtdx9qrQQH7OIO6K9RHCRY2lSnQ+O2AKWQnQ8=
Subject key identifier:   D5:0A:AA:3F:48:46:3F:BF:60:A4:76:54:8A:E6:71:05:FB:31:E4:97
Certificate issuer:       /CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
Certificate serial:       7818A289F2AEA39B320DDBF82A43656AB94546DF
Authority key identifier: E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3234203d3e20323638393133.roa
Signing time:             Fri 22 Sep 2023 20:57:52 +0000
ROA not before:           Fri 22 Sep 2023 20:52:52 +0000
ROA not after:            Fri 20 Sep 2024 20:57:52 +0000
asID:                     268913
IP address blocks:        45.175.228.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:18:a2:89:f2:ae:a3:9b:32:0d:db:f8:2a:43:65:6a:b9:45:46:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0
        Validity
            Not Before: Sep 22 20:52:52 2023 GMT
            Not After : Sep 20 20:57:52 2024 GMT
        Subject: CN=D50AAA3F48463FBF60A476548AE67105FB31E497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:84:ae:ff:ed:1a:3b:98:24:34:9b:77:6b:
                    6f:e4:41:49:cd:77:3d:5d:b9:83:10:ec:ca:ff:dd:
                    70:1f:bc:0d:88:18:f6:11:5c:98:dd:fb:1c:ab:7b:
                    ab:0a:be:fe:b4:f0:97:66:b2:17:e6:bc:8a:f2:82:
                    ff:8c:3f:17:43:77:61:52:38:6f:47:8e:fc:cc:66:
                    95:4f:77:14:32:d7:d7:13:74:ee:59:ef:db:6c:12:
                    b8:30:e5:81:3e:75:66:a6:02:b6:a7:e7:17:68:a7:
                    d2:51:b8:80:45:e7:0d:46:37:41:5c:d2:1e:e1:d0:
                    2b:da:80:cd:8b:dd:6a:13:1d:c0:11:49:6b:ba:f8:
                    ab:c7:fa:51:fd:3b:f7:52:52:32:38:93:4f:1d:2b:
                    90:df:6d:5f:58:89:c6:99:24:dd:78:00:73:49:7e:
                    5f:74:fd:e9:87:05:1c:eb:9c:f1:7e:94:b0:4a:42:
                    11:25:03:db:f1:d7:be:cb:7a:a9:3b:0e:18:a7:e4:
                    af:6a:c1:8e:14:ef:19:ee:78:10:e1:3f:7e:2e:48:
                    d7:66:bb:48:3d:08:b0:4e:7e:d0:98:6a:0d:ae:b8:
                    f4:bf:2a:65:5c:e9:4b:dd:5e:aa:63:f8:88:1e:d5:
                    1d:08:13:80:52:08:68:22:b1:0a:2d:5e:a3:a3:a9:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0A:AA:3F:48:46:3F:BF:60:A4:76:54:8A:E6:71:05:FB:31:E4:97
            X509v3 Authority Key Identifier:
                keyid:E9:2C:2E:5E:BA:B4:AC:9C:62:94:B7:E0:5E:6E:B3:18:8D:43:F2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E92C2E5EBAB4AC9C6294B7E05E6EB3188D43F2E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/0/34352e3137352e3232382e302f32322d3234203d3e20323638393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:20:70:33:13:4a:47:4b:cd:be:91:8a:22:1e:50:88:4e:
         1c:5f:0f:83:b8:cc:d2:ba:a1:f5:c2:b4:bb:15:98:1b:5e:4e:
         f7:c9:23:47:0d:c2:6d:f6:5b:ed:a7:cf:33:d2:4f:79:be:9a:
         c4:c8:8a:71:ab:a8:e4:c5:c8:90:07:7e:5d:55:85:f7:4b:51:
         22:2a:75:d3:7e:61:92:97:a0:cf:27:ca:6e:6c:cb:a4:f6:60:
         a3:ae:73:01:21:52:03:2e:9d:b0:a2:61:eb:54:d7:6c:de:48:
         af:3e:65:9a:a8:17:fe:6e:ac:4e:b9:93:1d:b5:93:3c:d8:8a:
         07:1b:85:0a:0d:72:4f:42:ac:65:68:ac:45:ad:6d:65:b8:43:
         6d:77:53:d5:c8:46:c5:52:63:71:0d:e6:df:ed:d7:a0:d5:a1:
         d5:20:0f:1e:5b:b8:12:93:b9:9a:8b:24:98:d0:30:c4:e0:59:
         82:89:7f:d6:80:0d:d8:d8:ce:42:90:4e:af:6e:dc:d5:ae:27:
         d2:3f:a0:80:bd:fc:61:29:2d:1d:8d:6c:91:d2:a5:cc:89:bf:
         a0:2d:f2:70:34:e2:e5:09:f2:34:1a:06:aa:5e:b1:13:10:a5:
         e9:e8:1f:2a:84:14:0b:5a:dd:e3:b5:1f:32:87:95:48:0e:54:
         f5:97:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 1 09:44:02 2023 by rpki-client on console-fra.rpki-client.org