Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
File:                     34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          fAFRGIQCMZvwSTeXKaVkaZc0rvN9f6g9KGv+tT8f5fs=
Subject key identifier:   19:56:27:46:24:8D:14:51:37:8C:90:46:C2:72:E8:E0:B9:BD:8F:31
Certificate issuer:       /CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
Certificate serial:       633709C0EB3C6451A5B1ADA622F7ABA88C538E85
Authority key identifier: 7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
Signing time:             Thu 04 Apr 2024 14:08:51 +0000
ROA not before:           Thu 04 Apr 2024 14:03:51 +0000
ROA not after:            Thu 03 Apr 2025 14:08:51 +0000
asID:                     269007
IP address blocks:        45.176.152.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:37:09:c0:eb:3c:64:51:a5:b1:ad:a6:22:f7:ab:a8:8c:53:8e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
        Validity
            Not Before: Apr  4 14:03:51 2024 GMT
            Not After : Apr  3 14:08:51 2025 GMT
        Subject: CN=19562746248D1451378C9046C272E8E0B9BD8F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:12:63:e4:91:cf:ce:58:4b:79:f0:1e:98:
                    04:1a:06:27:3c:96:e3:0e:69:19:26:c7:47:6c:0d:
                    c0:26:8e:70:84:8b:fd:73:5e:a5:0c:64:d7:b5:9b:
                    7f:fe:ad:c8:d7:18:e3:f3:c2:65:1c:97:5c:bc:25:
                    c9:cf:54:24:b5:13:01:99:bf:93:5f:41:fd:14:10:
                    7d:8a:74:9f:d5:77:1f:44:46:82:e1:73:91:66:d7:
                    80:f4:24:a9:87:72:04:fd:5b:13:39:df:83:2a:2d:
                    be:fe:b5:94:26:33:3d:be:a5:ac:18:b0:66:16:51:
                    9f:2b:d0:03:40:98:79:64:1f:a0:51:bf:14:35:23:
                    75:1c:4b:0c:20:e9:6d:fc:b4:d2:5f:5b:6f:25:6a:
                    d4:74:b9:e1:49:29:e9:f7:9d:72:b3:0d:e7:84:fd:
                    5c:ca:e5:70:96:10:ac:ed:ad:86:32:8c:cc:30:17:
                    db:9b:59:05:e0:4d:95:50:42:23:de:82:39:2b:f2:
                    a4:ea:30:b6:a7:ab:12:af:75:3f:a8:cc:3d:6d:ff:
                    9f:5c:e0:d1:a6:bc:5c:9a:fe:aa:96:88:b5:e5:45:
                    58:36:74:50:e7:22:7a:56:2b:14:42:0b:01:88:d1:
                    a5:69:b5:10:08:47:67:e9:2e:82:5d:2a:a7:95:7c:
                    8c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:27:46:24:8D:14:51:37:8C:90:46:C2:72:E8:E0:B9:BD:8F:31
            X509v3 Authority Key Identifier:
                keyid:7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:84:f3:a1:26:88:34:f7:b8:ae:23:79:2f:cb:76:c4:0a:13:
         b5:d4:df:1a:fe:35:71:b9:d4:26:30:31:0f:7e:fe:9c:ae:96:
         8c:38:26:ed:b5:0d:97:8f:02:3a:06:46:58:12:d7:c3:2d:a6:
         52:6f:d4:8f:fb:9b:9c:c9:f9:7d:f2:1e:f3:05:f2:49:07:31:
         62:e2:13:3a:59:3f:f2:95:10:73:cf:e4:45:50:45:73:20:75:
         af:22:0a:86:4b:50:04:c5:19:f2:92:3e:11:04:91:86:dc:b9:
         50:12:5b:ea:53:c5:5b:ea:7c:f1:6f:a1:e3:25:58:d3:3b:35:
         82:2f:bb:68:24:69:36:c6:c4:95:24:57:6d:7d:f0:a0:b5:b1:
         d1:23:c4:18:53:1d:df:d5:5c:b1:7e:6a:e0:5b:fc:83:ae:7b:
         62:61:a9:b4:45:a9:11:cd:19:46:7d:b2:0b:09:20:3f:6e:d4:
         42:2b:c6:85:1d:e1:ef:f6:73:68:55:2a:e0:7a:27:72:ee:64:
         91:6b:6b:a1:97:6f:b8:4c:ad:6c:85:2f:a4:ac:46:f0:75:51:
         46:9b:64:de:e7:88:9b:ae:ed:a6:b6:a4:bd:7c:06:86:5e:2e:
         67:a2:e8:26:79:86:35:5f:f8:62:52:4b:52:0b:2a:07:08:83:
         3b:ae:07:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:05:57 2024 by rpki-client on console-fra.rpki-client.org