Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa
File:                     34352e3139302e382e302f32322d3332203d3e20323639363137.roa (raw, json)
Hash identifier:          ooqfZcM7HKELIV1mQA+2nqRrxVYC/2b5qVGitlio0JE=
Subject key identifier:   8D:38:7E:C2:F2:6E:BA:86:51:2B:DB:5F:9D:7D:45:A6:59:F8:E2:93
Certificate issuer:       /CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
Certificate serial:       261C170F5FD3D90D30E251BAAA1404AC2F20F779
Authority key identifier: BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa
Signing time:             Wed 24 Apr 2024 17:55:51 +0000
ROA not before:           Wed 24 Apr 2024 17:50:51 +0000
ROA not after:            Wed 23 Apr 2025 17:55:51 +0000
asID:                     269617
IP address blocks:        45.190.8.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1c:17:0f:5f:d3:d9:0d:30:e2:51:ba:aa:14:04:ac:2f:20:f7:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32
        Validity
            Not Before: Apr 24 17:50:51 2024 GMT
            Not After : Apr 23 17:55:51 2025 GMT
        Subject: CN=8D387EC2F26EBA86512BDB5F9D7D45A659F8E293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ee:61:ee:23:f1:b2:c8:b5:67:28:07:7b:93:
                    18:d7:99:91:8c:7b:ec:9f:69:bb:be:14:af:ba:c4:
                    88:8a:78:a4:dd:03:ae:fa:6f:3a:c4:e3:97:e5:69:
                    76:b8:c1:e1:64:7d:92:7e:bd:46:08:19:6d:58:98:
                    22:5f:79:38:bb:02:47:a1:fb:bb:ff:57:3a:d5:fa:
                    b2:b2:cf:d9:6f:aa:de:f6:3f:96:3b:64:2e:19:81:
                    71:b8:86:d5:de:db:34:68:90:44:24:7a:db:7e:94:
                    c6:9a:ba:d3:0d:20:b5:71:cb:c2:f7:88:c0:78:aa:
                    10:7f:bf:e3:4e:a6:c3:d2:bc:a3:b4:c2:33:42:10:
                    c2:c1:8a:63:d8:6e:92:37:46:7a:12:f8:46:72:a5:
                    62:bd:c8:2f:ae:d0:fa:df:1c:d0:f2:e9:4f:0c:08:
                    3a:e2:11:fd:76:88:02:81:85:94:11:ea:dc:6f:1d:
                    37:65:db:9b:fd:e4:35:80:83:f3:28:7a:75:4f:ca:
                    35:eb:47:34:0e:09:b6:80:86:df:48:3b:30:3f:ec:
                    52:0e:6f:eb:d0:2b:e3:1c:64:eb:2b:eb:ae:29:3e:
                    e1:fe:fb:bb:69:ab:f9:b2:db:c5:b9:34:ee:bd:6d:
                    08:e4:96:4d:af:a1:38:8e:d9:c0:2c:d0:d5:59:f8:
                    36:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:38:7E:C2:F2:6E:BA:86:51:2B:DB:5F:9D:7D:45:A6:59:F8:E2:93
            X509v3 Authority Key Identifier:
                keyid:BE:01:49:EC:EE:B6:F9:83:32:5D:D2:BB:C2:A1:44:7D:08:EF:0E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE0149ECEEB6F983325DD2BBC2A1447D08EF0E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LQ3sRNuqnmCM9XuLrjMUW6Asvz7VErL7XJMs3568Fhz/0/34352e3139302e382e302f32322d3332203d3e20323639363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:67:37:24:60:4e:f6:1c:a9:36:f2:c4:c2:1f:6d:9f:88:
         6c:e4:3d:37:70:6d:6c:92:45:f0:ae:6f:fa:8e:8b:a3:e5:f9:
         2d:90:fb:37:77:c7:a3:a5:12:68:b9:62:3e:6e:ec:4f:99:ff:
         43:7b:58:e9:83:53:76:be:e5:de:d6:81:cd:e4:ff:9e:6f:7e:
         51:51:f4:ed:6c:64:3c:cc:5f:0d:2a:f7:03:8c:a2:a6:da:4d:
         4a:a7:96:ef:53:3f:70:5b:96:59:5a:1c:3a:0f:0c:c3:8a:2a:
         5d:73:21:ff:c8:00:24:49:9e:c3:fa:fd:cc:4c:f1:08:1d:0e:
         23:d8:6e:89:1c:aa:2d:43:ba:de:ab:2d:2b:4c:77:f2:af:12:
         3c:ea:35:6e:92:bb:92:33:3a:66:d6:4c:fd:39:e3:ea:ec:92:
         08:2e:96:8c:ae:34:46:79:ff:e4:bd:e3:bd:c4:21:c4:92:70:
         ea:aa:b3:51:f6:04:a8:07:85:0f:6d:48:b6:d3:a2:4d:44:f0:
         f4:85:29:c7:de:3b:24:51:35:4d:31:86:c1:51:ec:ba:34:27:
         1b:47:92:d6:a4:04:1e:68:c0:4e:24:cf:39:bd:c0:a9:d1:41:
         26:59:82:fd:56:64:75:5e:7d:ad:cd:5c:bd:4a:91:33:be:c9:
         a4:09:6d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 09:27:03 2024 by rpki-client on console-fra.rpki-client.org