Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa
File:                     34352e3139312e36302e302f32322d3232203d3e20323639363637.roa (raw, json)
Hash identifier:          RreT9LncP/SyN1n3/QI8/GQqasQrtJIQ2qGqThOw08A=
Subject key identifier:   06:6C:97:B1:63:AE:0C:57:D1:81:BE:10:BD:BF:6E:A8:2F:34:89:75
Certificate issuer:       /CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Certificate serial:       1E06DED590254E7124673D100EC7FCD0B6A4C0C7
Authority key identifier: 31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa
Signing time:             Wed 23 Oct 2024 20:04:25 +0000
ROA not before:           Wed 23 Oct 2024 19:59:25 +0000
ROA not after:            Wed 22 Oct 2025 20:04:25 +0000
asID:                     269667
IP address blocks:        45.191.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:06:de:d5:90:25:4e:71:24:67:3d:10:0e:c7:fc:d0:b6:a4:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
        Validity
            Not Before: Oct 23 19:59:25 2024 GMT
            Not After : Oct 22 20:04:25 2025 GMT
        Subject: CN=066C97B163AE0C57D181BE10BDBF6EA82F348975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:75:d9:15:96:23:b5:03:5b:b4:df:fa:5f:
                    dd:bb:69:10:d3:e6:eb:64:82:e4:30:20:f2:74:c5:
                    35:35:64:67:f5:ce:b6:cd:e7:18:45:8d:c8:fa:79:
                    46:bb:24:d3:d8:5e:9a:c0:3f:43:84:5e:41:10:ff:
                    e8:e1:c0:7e:34:26:0b:35:c1:84:33:8b:44:76:fe:
                    c1:3a:9e:61:69:73:91:05:37:39:3e:56:81:40:3c:
                    cc:ce:16:f1:b6:95:6b:ce:6b:17:8c:26:ad:81:20:
                    50:5e:00:6b:0f:c9:41:33:2e:57:d1:40:72:d4:6e:
                    bf:f0:8c:71:52:a2:7c:35:fd:a4:6a:3b:b2:49:1d:
                    23:01:bb:3b:70:39:03:ef:51:bb:dd:02:31:40:1f:
                    ec:30:81:c3:b0:65:d7:81:c3:af:18:f6:55:22:3e:
                    ee:48:f8:71:6b:11:4c:7b:4f:70:4b:11:cb:59:df:
                    c7:47:23:fc:3f:73:16:d7:00:4f:03:d6:71:99:a4:
                    4e:63:28:65:43:ec:0b:72:3b:5d:af:f9:b4:0d:d2:
                    a7:e6:54:f8:23:bc:66:93:07:5a:4b:8c:31:cf:b5:
                    ca:85:1b:ef:c2:81:ce:d1:3a:9f:2d:c2:95:fe:31:
                    ef:9b:26:c8:89:2f:65:01:88:b8:21:98:af:f2:f4:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:97:B1:63:AE:0C:57:D1:81:BE:10:BD:BF:6E:A8:2F:34:89:75
            X509v3 Authority Key Identifier:
                keyid:31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:e7:bc:43:b2:b4:ed:d0:03:9b:9e:9d:44:1c:63:24:ae:
         10:04:02:a9:f1:80:5c:98:c6:f9:78:35:3c:9a:87:b4:57:93:
         4c:c5:1b:14:4c:1a:93:2a:c4:b3:f6:ec:30:d9:18:1f:24:ff:
         29:79:a7:78:d4:20:5d:ad:90:4e:6f:c4:ba:c9:13:96:c2:c9:
         4a:c5:d7:31:bf:a4:88:2b:d4:45:4a:1a:d7:09:33:96:ca:14:
         4d:76:ed:f6:8c:65:32:cc:53:00:16:5d:7f:5c:a7:b8:71:f6:
         07:29:a1:15:d2:0b:6d:f2:05:c8:62:ec:7a:1d:28:98:e3:fb:
         29:bb:91:01:ab:a7:4b:2f:d7:f6:fd:98:6d:45:87:86:5a:4c:
         35:73:f9:88:e2:e0:ee:8c:85:fd:66:f5:42:01:17:43:ce:e0:
         28:ba:7d:a0:01:6e:9b:87:bd:18:35:31:c5:81:35:83:e9:db:
         9f:23:f5:f9:1c:cc:72:ce:d2:c7:11:78:f6:17:1e:b8:8e:cb:
         e2:bd:06:5a:a4:05:1c:eb:b1:af:d1:b2:43:fa:a9:e3:e2:67:
         1d:12:18:f8:1b:ed:fa:c1:5b:82:52:a0:e3:86:df:21:b5:4e:
         ea:1a:90:e8:0e:57:d6:12:0f:0e:e7:28:64:31:81:41:c8:36:
         38:2d:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:31 2024 by rpki-client on console-ams.rpki-client.org