Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36322e302f32342d3234203d3e20323639343537.roa
File:                     34352e3138372e36322e302f32342d3234203d3e20323639343537.roa (raw, json)
Hash identifier:          +/E8UHvSe9PotDcOMzMeq4GhxyvKygFLNWYOYN7tzvc=
Subject key identifier:   FA:A0:51:C7:A0:1F:2C:83:1C:D0:2A:0A:5E:32:C9:EB:5A:D4:E9:D1
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       189F510566AD5B72AD3CE4D54F006A2D5CCC46E3
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36322e302f32342d3234203d3e20323639343537.roa
Signing time:             Mon 17 Jun 2024 14:30:48 +0000
ROA not before:           Mon 17 Jun 2024 14:25:48 +0000
ROA not after:            Mon 16 Jun 2025 14:30:48 +0000
asID:                     269457
IP address blocks:        45.187.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9f:51:05:66:ad:5b:72:ad:3c:e4:d5:4f:00:6a:2d:5c:cc:46:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun 17 14:25:48 2024 GMT
            Not After : Jun 16 14:30:48 2025 GMT
        Subject: CN=FAA051C7A01F2C831CD02A0A5E32C9EB5AD4E9D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:6d:b9:02:87:51:81:23:08:59:cf:d7:fd:
                    52:1d:3f:2b:e5:c3:24:4e:8d:87:a4:dd:74:db:0e:
                    43:e3:4d:a1:d5:42:a0:74:01:9b:15:0f:96:36:54:
                    a4:b3:a3:1a:5b:8c:ae:16:d6:d2:0d:72:8f:ba:0c:
                    cc:95:9d:ab:b4:98:28:39:a8:91:06:f2:8e:bc:29:
                    bf:14:9e:38:a0:ba:67:17:55:c1:1b:4f:5e:52:e3:
                    60:a1:8c:19:82:3f:12:72:68:b4:e6:af:32:ae:a2:
                    4d:73:6e:43:60:dd:0c:06:80:e0:84:6f:a0:d4:a0:
                    2e:02:98:91:11:72:8d:06:f5:83:e5:73:aa:97:0d:
                    0f:69:c7:90:18:d9:47:f4:73:87:a1:36:20:47:55:
                    db:fd:99:f9:df:c3:79:f3:ea:6b:f3:8f:67:12:45:
                    a4:a5:fe:cd:9a:b6:36:89:c1:2f:cd:42:92:c9:23:
                    68:6c:3b:20:25:c9:16:b5:e4:dc:07:fd:64:be:61:
                    f5:26:ee:58:c0:ce:39:ba:ad:3f:c3:bd:23:ad:cc:
                    2c:20:e7:1c:5d:21:86:88:91:17:ad:6f:8b:98:fd:
                    52:1d:63:fa:91:00:c1:d8:f9:6f:46:da:57:5c:14:
                    94:1b:57:50:ab:fa:b6:27:95:c3:42:fc:dc:f4:96:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A0:51:C7:A0:1F:2C:83:1C:D0:2A:0A:5E:32:C9:EB:5A:D4:E9:D1
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36322e302f32342d3234203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:94:d1:3f:bd:2b:da:c8:2b:e4:d3:13:8e:15:b4:2a:06:2c:
         16:0a:e2:c8:f6:50:a7:ff:47:65:6e:6e:66:5a:c3:2b:71:57:
         4b:c0:ec:a2:47:5c:66:7c:ae:fa:a3:3a:92:67:0e:bf:19:e4:
         73:d9:6e:14:db:79:45:f4:0b:99:a3:89:86:7c:7e:e5:8d:95:
         25:09:bd:c0:1b:97:55:9e:ce:a7:24:03:2b:2b:92:e7:d7:5c:
         74:19:6f:9d:0a:95:ba:fb:d5:6f:57:9a:c1:f0:e5:ab:53:fa:
         a6:c6:b7:a8:a9:4c:e1:68:5c:04:6f:3c:d6:3b:04:31:d5:6a:
         86:4a:62:b9:8b:b9:18:a2:63:c6:70:01:ac:2d:fb:78:35:c9:
         03:e6:75:56:20:56:f1:55:56:f4:2a:53:22:5c:cc:bd:f7:60:
         e9:10:b1:5d:c7:96:e5:72:75:69:13:f7:15:f2:1b:4f:d7:5a:
         73:a8:e8:1e:23:d6:6c:a3:2e:c1:4a:fc:35:49:42:8f:42:05:
         36:3e:74:e8:a4:7a:c2:cc:83:ba:a1:81:f3:91:17:fd:26:50:
         80:d0:c6:71:80:dc:37:19:ef:f4:15:66:e2:90:6e:93:c1:c9:
         1c:a5:48:66:5d:24:69:84:7c:72:31:5a:1e:59:8b:e0:06:0a:
         d2:f0:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org