Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
File:                     34352e3138372e36302e302f32322d3232203d3e20323639343537.roa (raw, json)
Hash identifier:          Nu8mMyfU/QYChFmkw5tYnBVjN4kWVeY/Lifnn/2uH/Q=
Subject key identifier:   BB:C0:F6:98:35:C6:FA:8E:3F:A9:55:59:1A:4D:6B:2D:F3:2C:0D:03
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       24F1C874408CC91BBC17B361219E0CA97C70A228
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa
Signing time:             Wed 05 Jun 2024 14:01:01 +0000
ROA not before:           Wed 05 Jun 2024 13:56:01 +0000
ROA not after:            Wed 04 Jun 2025 14:01:01 +0000
asID:                     269457
IP address blocks:        45.187.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f1:c8:74:40:8c:c9:1b:bc:17:b3:61:21:9e:0c:a9:7c:70:a2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  5 13:56:01 2024 GMT
            Not After : Jun  4 14:01:01 2025 GMT
        Subject: CN=BBC0F69835C6FA8E3FA955591A4D6B2DF32C0D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:7a:12:84:98:cc:40:55:e4:52:24:5b:20:
                    64:7d:1a:16:50:13:54:b4:6c:bc:3e:97:43:bb:e1:
                    db:0c:41:b1:63:0b:e5:69:85:53:50:67:a5:69:f5:
                    49:fe:c9:a2:0d:f8:18:93:1c:fb:4d:46:7e:de:a9:
                    7b:91:fb:44:14:b8:35:ca:fb:2d:e6:5e:25:a5:45:
                    2a:05:21:85:e1:58:23:d8:50:a9:e7:de:57:6a:8d:
                    b8:81:27:1c:7e:69:0c:1a:e9:68:e4:c9:64:06:18:
                    a2:5d:4c:3b:06:28:2d:51:c0:6e:44:10:19:d6:e8:
                    20:d6:2d:aa:16:82:18:a5:06:61:fc:86:c5:57:7f:
                    4b:4f:90:29:f4:40:b3:a6:22:fd:35:ef:6a:79:87:
                    bd:97:17:d0:65:af:70:0f:f8:53:f3:98:ed:87:14:
                    dd:92:f5:f0:71:fe:6e:14:a3:0d:b2:4a:22:e4:a9:
                    44:c9:a4:89:e9:cf:8e:d2:5f:cc:b0:43:09:85:87:
                    50:f8:07:e7:96:26:41:98:82:01:10:8a:58:7b:79:
                    e8:2b:71:6f:82:f4:ff:38:3b:2e:da:70:53:21:57:
                    71:ff:39:e7:7b:82:11:66:10:34:d5:01:2d:e4:87:
                    01:df:31:61:6b:81:69:f2:ed:b8:ce:1b:9b:ab:40:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:F6:98:35:C6:FA:8E:3F:A9:55:59:1A:4D:6B:2D:F3:2C:0D:03
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36302e302f32322d3232203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:34:4f:3e:91:e7:4a:53:16:f3:35:d7:af:61:b6:af:5d:
         8a:9b:d1:3f:45:d5:23:14:48:23:46:f9:cc:84:3d:b4:c5:f8:
         96:87:4a:e5:72:28:dc:f8:a2:2a:ab:6f:16:34:8d:64:0f:9e:
         7c:5f:21:41:ec:7d:b1:cb:4b:ac:96:17:12:52:ca:e3:1f:92:
         e9:d7:c4:fd:64:7c:78:05:e5:9d:01:89:1a:d7:72:f0:37:2f:
         eb:1c:e3:ce:45:40:de:82:5e:33:c9:5d:21:d7:cf:da:d6:31:
         00:51:da:94:ec:ea:70:73:1b:72:00:ac:ed:7c:a1:44:c3:71:
         90:9b:a9:b0:44:ae:2d:c0:55:c2:fc:64:61:9c:05:45:a3:cb:
         f0:8d:e5:22:ac:de:02:48:e4:2b:cf:53:02:82:9c:26:76:ce:
         89:df:c3:01:4a:06:61:09:28:3d:f6:b5:be:e2:e8:97:2a:2d:
         76:fc:f8:af:27:b7:ed:d7:f2:58:80:45:3e:0a:fc:77:2a:92:
         d3:4f:85:e4:0d:ed:90:30:f2:9c:3b:8f:e9:4c:4b:5e:9a:bf:
         ca:54:72:4f:9f:bf:83:30:55:a9:28:c4:9c:45:dd:f8:8e:2a:
         f2:a4:32:ab:f7:14:08:86:99:61:53:18:9c:e0:95:96:2d:1a:
         84:f1:4d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org