Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa
File:                     34352e3138372e36312e302f32342d3234203d3e20323639343537.roa (raw, json)
Hash identifier:          yVLao0zmLgs0WTZRyUKwAD6ZIqNCnE2Mkhz9A27GMHs=
Subject key identifier:   4F:35:B0:AB:99:87:AF:9A:AA:DE:7B:9E:7B:FD:15:A3:32:BB:81:EC
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       01D5263FDF4B7D495E08C29F2A52F0B32ECB2D48
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa
Signing time:             Wed 05 Jun 2024 14:01:08 +0000
ROA not before:           Wed 05 Jun 2024 13:56:08 +0000
ROA not after:            Wed 04 Jun 2025 14:01:08 +0000
asID:                     269457
IP address blocks:        45.187.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d5:26:3f:df:4b:7d:49:5e:08:c2:9f:2a:52:f0:b3:2e:cb:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  5 13:56:08 2024 GMT
            Not After : Jun  4 14:01:08 2025 GMT
        Subject: CN=4F35B0AB9987AF9AAADE7B9E7BFD15A332BB81EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:99:2d:a4:69:89:6d:ab:16:5e:f6:15:c8:
                    29:d3:65:f3:86:d2:5d:52:8d:13:ee:3c:11:9e:00:
                    df:96:fb:76:65:4f:1f:17:0b:d2:4b:de:67:73:7d:
                    73:b8:6e:34:79:57:7c:3d:35:38:aa:19:53:70:a2:
                    1b:6b:10:91:33:c5:46:b0:e4:44:32:25:fe:52:d7:
                    0c:af:9a:fa:11:38:c7:66:f6:14:7b:1d:22:31:55:
                    52:b7:78:7f:d5:74:1f:0d:37:07:c3:34:b6:55:dc:
                    a0:da:d4:74:c8:a2:71:19:5d:ee:52:28:19:e2:58:
                    e2:d0:4f:c3:a6:e2:5b:04:7e:3d:0c:8a:5e:bd:72:
                    0d:e8:5f:2c:3d:68:75:29:40:6d:08:c8:bf:9f:9f:
                    ca:b8:67:88:07:bf:79:4f:ec:6b:15:8e:76:a1:e1:
                    75:40:73:4b:31:c7:94:ce:26:75:29:d4:4b:76:67:
                    eb:2e:4f:2d:78:12:39:c3:e1:82:e8:17:40:45:ff:
                    fd:cf:d6:ad:f2:9d:aa:ed:9e:ca:ac:e8:31:43:b0:
                    85:86:f0:8e:06:e1:37:91:c0:13:63:03:27:79:40:
                    40:18:c6:5e:4e:69:60:37:bf:c6:50:72:9b:b6:c3:
                    fe:fc:90:e7:c0:e2:57:5a:a0:7b:ff:4d:dd:8a:69:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:35:B0:AB:99:87:AF:9A:AA:DE:7B:9E:7B:FD:15:A3:32:BB:81:EC
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36312e302f32342d3234203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:09:bb:e1:72:1a:b1:6a:84:05:b4:54:c2:2a:ed:08:83:d1:
         3d:58:8d:d5:19:95:86:96:db:cf:52:97:66:60:99:7a:11:44:
         31:21:4c:52:1d:49:54:c9:dd:67:5e:ec:27:c0:18:09:b8:7a:
         20:cf:f8:05:ae:29:0b:90:19:1b:5a:fa:1c:d5:a3:ed:81:d6:
         1e:79:fe:45:a1:8c:ca:11:d9:92:5f:08:12:dd:c0:e4:a0:c5:
         78:d5:f1:a6:8e:bb:44:40:f0:b3:5d:09:9e:fb:aa:c9:ac:51:
         c3:2b:d1:07:4f:15:df:fb:b8:d8:bc:f2:08:59:3f:9a:a7:c5:
         7e:59:62:da:67:f4:67:cc:80:e2:2c:c4:f0:33:78:66:ac:1d:
         03:5e:e6:ef:df:87:49:e5:55:60:e2:bc:9c:a7:7b:ab:1c:13:
         ac:7f:9b:15:b4:d5:93:ec:21:84:e3:ee:f4:c2:f6:53:50:5c:
         97:dd:9c:3f:af:51:00:27:2e:1b:05:bc:ad:64:3f:9a:d5:06:
         2f:54:4d:56:33:eb:87:56:44:7b:97:68:ea:d4:d9:69:b1:ef:
         1f:bb:d5:c6:70:25:e0:fc:3f:09:b7:15:f4:b5:93:25:91:be:
         2e:d9:6d:2b:b1:64:e6:d7:00:6a:41:86:7f:0d:26:e5:80:98:
         aa:85:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org