Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38332e302f32342d3234203d3e20323638333136.roa
File:                     34352e3233382e38332e302f32342d3234203d3e20323638333136.roa (raw, json)
Hash identifier:          v3Pb/oreLWd8NLMtFCgaJMz4Hu+4wT4nOz2pELM7gkw=
Subject key identifier:   B1:2C:96:FE:73:5C:53:09:1E:DD:59:78:57:A3:58:EA:48:2F:83:A4
Certificate issuer:       /CN=6394333A258FBDBBD544DE363E2767998C64BB78
Certificate serial:       33D7B7762B0A012551F8952650609A54352786A2
Authority key identifier: 63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38332e302f32342d3234203d3e20323638333136.roa
Signing time:             Wed 29 May 2024 13:35:03 +0000
ROA not before:           Wed 29 May 2024 13:30:03 +0000
ROA not after:            Wed 28 May 2025 13:35:03 +0000
asID:                     268316
IP address blocks:        45.238.83.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d7:b7:76:2b:0a:01:25:51:f8:95:26:50:60:9a:54:35:27:86:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6394333A258FBDBBD544DE363E2767998C64BB78
        Validity
            Not Before: May 29 13:30:03 2024 GMT
            Not After : May 28 13:35:03 2025 GMT
        Subject: CN=B12C96FE735C53091EDD597857A358EA482F83A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:b3:80:c3:7f:d5:7b:a6:6c:ab:3f:fe:61:
                    d4:26:6f:c2:78:8f:53:45:4b:22:a9:a0:da:67:32:
                    d6:0f:e1:52:a2:03:6d:c6:19:3d:b5:6d:15:c5:7d:
                    8a:e0:87:ad:f3:eb:eb:c1:81:15:67:d4:cf:31:a9:
                    c7:c3:ba:15:4f:78:80:b3:e1:f5:4d:75:e6:7d:a9:
                    0f:95:2e:f1:f0:5f:2a:b3:33:48:ac:bc:56:12:8a:
                    2d:ab:1e:67:2d:9d:ce:8e:55:5c:f0:93:5c:81:ce:
                    40:2c:bf:46:7c:4f:e3:96:1c:4e:5e:61:da:23:ab:
                    ee:13:0e:b5:28:9e:d8:ba:60:bf:b3:64:3e:1b:75:
                    36:92:57:16:81:d0:1d:9d:fc:25:dd:88:a7:3a:32:
                    9e:8f:2f:94:a2:56:a9:ef:15:b6:4d:11:30:f1:c4:
                    8e:55:6f:31:ca:9a:28:29:47:a4:47:c1:d2:b2:cb:
                    de:d0:80:b0:47:d2:92:aa:c0:de:34:81:c5:bf:59:
                    e4:1e:a8:0e:4b:b0:63:17:0d:bb:63:2e:25:e7:91:
                    08:dc:60:ca:6e:dd:f6:c9:68:d6:e9:03:08:af:08:
                    0d:20:6a:65:9a:bb:2e:07:86:ff:f9:4b:b3:38:f1:
                    ca:9c:07:68:ff:89:cc:78:ff:c2:a2:31:b8:a4:49:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:96:FE:73:5C:53:09:1E:DD:59:78:57:A3:58:EA:48:2F:83:A4
            X509v3 Authority Key Identifier:
                keyid:63:94:33:3A:25:8F:BD:BB:D5:44:DE:36:3E:27:67:99:8C:64:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/6394333A258FBDBBD544DE363E2767998C64BB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6394333A258FBDBBD544DE363E2767998C64BB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3s5f3Zpur4FwYdq7yrX2v1JZUMDZEZfUA9co9QVrkLvp/0/34352e3233382e38332e302f32342d3234203d3e20323638333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f6:66:87:4e:00:f0:17:9d:9b:b0:74:12:45:11:38:fa:3d:
         af:43:59:fd:04:92:c5:17:13:35:db:68:5b:10:bf:15:a3:58:
         7d:1f:cc:9d:77:83:ca:0f:6f:3e:89:d6:9b:31:1e:48:1a:c7:
         79:31:58:92:da:c7:2b:e3:ec:b4:7d:b7:3c:53:07:35:37:6c:
         82:ca:5b:2e:5f:32:72:09:14:a6:17:cd:e6:6a:5d:eb:05:c4:
         a4:fe:a1:e7:df:55:76:9a:61:de:6f:f0:d9:01:d8:1d:b7:eb:
         b5:58:12:7f:99:94:c3:1a:79:0c:85:98:fe:02:1a:4b:ad:cf:
         30:94:b4:81:ec:44:32:06:2b:2d:a3:de:56:61:fd:9f:ba:c3:
         93:db:f7:0f:7e:11:ca:b4:9b:b0:2b:26:e6:83:bd:78:35:c3:
         a1:91:14:b8:1a:08:e4:61:1c:5f:a1:95:d1:44:2a:0e:86:55:
         a3:57:20:c6:37:1c:95:3c:61:3f:2a:9c:29:d7:cb:48:e5:23:
         0b:75:10:96:cc:ce:49:c0:9f:cf:0e:59:9c:79:44:83:04:03:
         42:5f:4b:b1:1f:c6:c5:7f:ab:86:fe:0f:24:37:a8:89:ca:eb:
         33:5a:77:42:df:b7:1b:3b:da:5b:63:b9:98:c9:fb:15:39:b9:
         31:ca:7d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 00:10:12 2024 by rpki-client on console-fra.rpki-client.org