Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa
File:                     34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa (raw, json)
Hash identifier:          GbD2IXgQAuYxCSHIpjglCyCJMIGyZcENeepFyHfhcMc=
Subject key identifier:   80:8C:1D:2C:BF:20:F0:11:C2:91:20:48:6F:48:FF:EF:F0:BE:FA:BB
Certificate issuer:       /CN=FEB471909D761B4C2CDF20121D0BF43D091C1D28
Certificate serial:       693AF4253F1260D43F5E2C6390192ABAF5A9E965
Authority key identifier: FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa
Signing time:             Wed 10 Apr 2024 13:18:04 +0000
ROA not before:           Wed 10 Apr 2024 13:13:04 +0000
ROA not after:            Wed 09 Apr 2025 13:18:04 +0000
asID:                     267672
IP address blocks:        45.224.196.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3a:f4:25:3f:12:60:d4:3f:5e:2c:63:90:19:2a:ba:f5:a9:e9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB471909D761B4C2CDF20121D0BF43D091C1D28
        Validity
            Not Before: Apr 10 13:13:04 2024 GMT
            Not After : Apr  9 13:18:04 2025 GMT
        Subject: CN=808C1D2CBF20F011C29120486F48FFEFF0BEFABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:a5:f0:74:4c:5a:69:8c:02:33:a2:6d:72:
                    4f:ed:d8:d9:ea:20:43:f2:72:40:b9:b4:f9:72:90:
                    4f:29:85:9b:b8:c2:93:fc:5d:45:9d:47:9e:dc:c6:
                    03:29:0a:70:59:6b:2f:d8:76:82:08:d7:e4:0b:1b:
                    73:38:fd:c6:ef:6a:c1:7d:24:34:db:c5:87:1e:e4:
                    19:4b:70:72:e2:27:78:16:eb:ad:0c:ac:d4:cc:81:
                    40:90:2d:8b:bb:6f:4f:8a:ec:4c:d7:09:8f:fd:4f:
                    0d:5b:9f:35:d9:ad:f7:6c:23:63:97:1d:13:21:c9:
                    db:73:02:4c:b1:96:23:ac:88:ca:fb:2f:ee:1f:7e:
                    74:47:88:97:21:2d:eb:fa:05:38:db:18:c8:d8:10:
                    b1:e6:ca:38:8f:b6:27:6e:8b:c1:ee:69:bb:41:1d:
                    ad:d3:42:13:21:c7:6e:16:dd:85:be:ef:c3:8b:8d:
                    4c:46:db:f7:ce:90:ed:91:9c:d6:39:a0:0b:c7:1d:
                    53:39:15:4a:d8:52:65:88:3a:95:ae:04:ae:2b:89:
                    25:56:88:23:90:03:ee:fc:26:eb:fc:39:c9:45:9f:
                    3f:3c:f1:9c:44:f3:5c:a8:3a:df:b6:fd:00:1d:f7:
                    b6:11:ce:7d:e8:d1:41:a2:ae:78:44:8b:08:21:7c:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:1D:2C:BF:20:F0:11:C2:91:20:48:6F:48:FF:EF:F0:BE:FA:BB
            X509v3 Authority Key Identifier:
                keyid:FE:B4:71:90:9D:76:1B:4C:2C:DF:20:12:1D:0B:F4:3D:09:1C:1D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEB471909D761B4C2CDF20121D0BF43D091C1D28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fSeEXYoFYP6DXkJPb6dSTdLwGGGsNs3ZLreKkGu4frt/1/34352e3232342e3139362e302f32322d3234203d3e20323637363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:c6:71:41:e2:9e:f8:a4:d7:23:a7:95:4c:18:ba:30:4c:
         f4:a0:06:4b:4a:8b:7d:f8:c8:68:7d:d4:0a:20:ac:2c:fb:11:
         bc:ad:b1:25:15:6c:b6:ae:10:f8:3a:34:00:c1:4d:3a:00:46:
         51:68:f5:db:67:33:4e:fb:9c:3c:9f:8f:95:fb:f1:c6:5c:ef:
         41:02:98:5d:75:8c:1c:b7:6b:dc:29:b8:c3:33:f4:3d:1c:5e:
         53:92:87:79:73:ee:e4:9d:fc:f3:54:26:44:24:99:ec:c0:9c:
         ab:72:95:64:a3:52:d0:71:b4:43:b8:56:bf:ce:0b:53:51:33:
         51:e6:1b:31:3f:a0:3d:92:d8:ab:82:44:23:75:0e:c6:9a:b6:
         d8:5a:2c:8c:d4:85:60:7f:85:11:bd:87:20:99:86:6f:a5:57:
         17:fe:af:85:13:24:60:d9:e5:57:7f:45:36:31:0f:f2:22:6f:
         16:61:37:f5:eb:f0:d8:09:a3:1c:54:3e:97:d7:e5:27:cd:7b:
         6c:d0:9a:9a:55:33:c4:39:7e:db:1a:6c:f9:ed:46:da:45:95:
         0c:59:1b:c3:6e:2f:47:15:c3:5b:ca:b7:e0:b9:23:2f:69:15:
         61:00:55:90:28:ab:09:c2:7e:0f:12:8f:92:2c:85:19:99:98:
         69:df:10:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 13:42:03 2024 by rpki-client on console-fra.rpki-client.org