Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa
File:                     34352e3139312e36302e302f32322d3234203d3e20323639363637.roa (raw, json)
Hash identifier:          BZDxVu5UPa0DiGFnwQA0wCOw0+T9ZtAgeqRCUTxnqV8=
Subject key identifier:   C9:E7:AB:DB:53:8D:65:4F:76:06:09:71:76:46:21:C4:3B:39:B3:9E
Certificate issuer:       /CN=7466743A2AFAAB31A89F859D730CD1411289F7EA
Certificate serial:       69581CF46CCB98133CB2A66319D752CBA8724952
Authority key identifier: 74:66:74:3A:2A:FA:AB:31:A8:9F:85:9D:73:0C:D1:41:12:89:F7:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa
Signing time:             Thu 04 Apr 2024 06:05:13 +0000
ROA not before:           Thu 04 Apr 2024 06:00:13 +0000
ROA not after:            Thu 03 Apr 2025 06:05:13 +0000
asID:                     269667
IP address blocks:        45.191.60.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:58:1c:f4:6c:cb:98:13:3c:b2:a6:63:19:d7:52:cb:a8:72:49:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7466743A2AFAAB31A89F859D730CD1411289F7EA
        Validity
            Not Before: Apr  4 06:00:13 2024 GMT
            Not After : Apr  3 06:05:13 2025 GMT
        Subject: CN=C9E7ABDB538D654F76060971764621C43B39B39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:40:7c:61:76:60:b9:90:5f:82:24:da:20:e6:
                    d4:4b:54:d7:b9:73:1d:86:f4:c0:d1:43:8b:82:cb:
                    b7:24:72:ef:3e:77:9f:9b:da:9b:4e:29:47:c3:ff:
                    4c:52:b5:18:b7:d5:80:72:df:36:1e:89:80:70:63:
                    f8:16:d5:cf:a1:da:05:74:cf:6f:98:47:c7:f6:3d:
                    0a:61:e1:b4:f8:43:15:43:6e:e3:f6:de:45:49:b0:
                    71:5f:a4:ae:b0:9c:94:af:ff:ec:93:d3:e4:7c:9f:
                    2c:7d:3b:e8:2a:a1:ee:64:0d:58:61:be:98:0f:1a:
                    f9:9b:9c:3c:6c:2e:d3:c1:42:a7:10:0a:72:d8:fa:
                    82:36:9e:7a:a4:c8:3c:95:3e:e4:8d:11:a3:87:86:
                    a8:34:65:b7:54:74:41:1c:f0:1a:6a:2b:ed:43:50:
                    83:2f:6e:7d:e2:ac:e6:f1:d5:aa:29:cb:1a:d6:b9:
                    29:d1:3c:49:f1:e6:40:bc:67:04:0a:3a:b2:34:0d:
                    2e:b7:11:3c:d4:a8:1a:8e:8c:c0:2a:cc:da:02:34:
                    ea:84:19:9c:64:d3:83:9a:d5:c9:c6:0d:37:bc:0f:
                    40:3d:81:b9:fe:ee:09:f5:5d:07:5d:db:b2:72:a8:
                    1a:30:48:e0:d2:b6:5a:36:8e:c3:1e:bf:12:66:a4:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:AB:DB:53:8D:65:4F:76:06:09:71:76:46:21:C4:3B:39:B3:9E
            X509v3 Authority Key Identifier:
                keyid:74:66:74:3A:2A:FA:AB:31:A8:9F:85:9D:73:0C:D1:41:12:89:F7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7466743A2AFAAB31A89F859D730CD1411289F7EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/1/34352e3139312e36302e302f32322d3234203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:61:ba:f7:f9:42:48:16:d9:c5:b5:46:68:6b:43:90:64:
         1a:9c:77:46:ab:f0:82:09:08:be:e9:6f:f2:3b:ca:7c:f8:93:
         96:30:65:b5:9c:98:f8:8b:11:0c:56:d0:af:ad:a5:94:91:07:
         10:7e:78:4b:3c:12:1b:7a:fc:c2:72:bb:f9:55:b7:84:fe:ff:
         72:76:24:17:91:cd:a5:51:ff:f1:c1:ea:4f:d2:07:94:ff:37:
         37:e7:d1:c5:a0:e7:e6:7a:27:4c:d1:e0:ef:93:fe:77:3c:ec:
         18:4e:f2:3e:e5:3c:ac:36:47:b0:28:0d:15:1c:72:27:ea:3f:
         70:53:c4:ad:3e:c7:41:5e:1e:36:02:22:11:5f:e9:f5:1b:72:
         bf:f5:dc:3f:fa:71:8c:4c:c9:3e:51:a7:38:c2:6d:c9:cf:d1:
         83:7c:b2:1b:28:85:04:98:fa:e5:a1:45:74:1e:93:90:bf:99:
         d8:b1:6f:0f:e9:32:39:95:9a:1a:ef:26:a0:d3:74:4b:90:61:
         3c:9a:aa:b8:50:fc:81:fb:c8:81:a5:9d:57:c8:63:51:3f:3e:
         37:a7:bf:3d:2d:c5:45:f2:32:1d:39:cc:1e:ec:b4:a0:99:5e:
         ad:68:21:da:82:bc:57:77:1b:96:f8:c9:a4:ef:79:f4:6c:ab:
         c7:bc:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:29:38 2024 by rpki-client on console-fra.rpki-client.org