Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3332203d3e20323637323831.roa
File:                     34352e3233322e31302e302f32342d3332203d3e20323637323831.roa (raw, json)
Hash identifier:          CkVowswPWjERg4ClxzDY/0Atwzeht0g0mUqu2TEj3oo=
Subject key identifier:   EE:BB:FF:49:97:8D:3E:1F:15:1D:D2:9D:D8:0E:01:83:93:FB:42:51
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       7EE0DA31BF6A3C9E85D59EA1725491DCF905131C
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3332203d3e20323637323831.roa
Signing time:             Fri 24 May 2024 19:36:29 +0000
ROA not before:           Fri 24 May 2024 19:31:29 +0000
ROA not after:            Fri 23 May 2025 19:36:29 +0000
asID:                     267281
IP address blocks:        45.232.10.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e0:da:31:bf:6a:3c:9e:85:d5:9e:a1:72:54:91:dc:f9:05:13:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: May 24 19:31:29 2024 GMT
            Not After : May 23 19:36:29 2025 GMT
        Subject: CN=EEBBFF49978D3E1F151DD29DD80E018393FB4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3d:9d:51:90:ca:dd:2a:71:6d:6d:fc:c9:f0:
                    54:f8:60:ae:38:13:82:2e:7e:74:27:2b:68:fb:09:
                    1f:2a:ea:eb:20:49:f4:18:ba:06:0b:80:82:5d:22:
                    bf:d4:56:2a:8e:cd:f9:a7:93:b0:b6:83:b0:79:5f:
                    dd:03:11:d4:31:95:a3:32:8f:67:62:ec:03:4a:f0:
                    6b:d7:88:05:d1:ba:af:70:80:64:5a:ca:ef:90:95:
                    48:0c:9b:3f:72:1d:14:b8:53:71:ba:85:b7:59:f3:
                    8e:90:8c:4b:b5:45:7f:9b:f6:0b:15:03:8a:2a:35:
                    ff:b8:04:cc:11:89:42:e5:e2:e2:e7:09:f2:2e:6c:
                    67:3b:8b:56:45:f0:a4:f4:e8:d2:1d:1a:c5:bf:42:
                    dd:44:46:84:9a:ed:9b:e9:a2:81:c5:a6:9f:7d:05:
                    40:4a:20:96:dc:d6:ef:25:1d:c4:35:1a:a4:47:4e:
                    22:23:27:66:d9:8b:10:5a:14:ea:d8:a1:96:0b:55:
                    3c:b1:43:c1:d4:2b:18:23:5c:44:c5:be:52:51:dc:
                    c1:4e:a3:c8:a4:bd:b8:35:0d:ec:c3:90:bd:b3:1c:
                    31:4f:24:a0:72:4f:0d:b2:f8:c4:fe:b0:20:c8:99:
                    f9:66:88:50:dc:2d:b4:bb:af:b3:ae:06:b1:ed:33:
                    64:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BB:FF:49:97:8D:3E:1F:15:1D:D2:9D:D8:0E:01:83:93:FB:42:51
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3332203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:0e:f1:3c:5c:87:3a:98:62:b6:89:90:99:4f:1e:e2:9d:24:
         c4:60:dc:31:94:46:9d:6a:05:87:80:b2:d3:15:bf:ae:91:1a:
         d8:92:fa:1a:09:83:0b:65:77:cc:f1:87:21:80:76:9d:a5:5e:
         c6:1f:4c:15:3e:f4:54:1a:63:af:52:1e:30:ca:ef:d7:27:f9:
         38:47:27:6e:b9:4e:f9:9f:94:29:98:8f:f3:57:33:11:b7:4d:
         7f:4b:3f:19:06:6d:a9:b8:eb:a2:1a:64:eb:44:8c:9a:4e:6a:
         5c:7a:da:9c:f3:51:38:84:a3:01:8a:95:ba:7c:8a:f9:1e:8a:
         b4:64:56:05:11:44:12:9b:81:44:d8:6f:7e:c6:f2:4b:a9:d2:
         29:6c:31:62:40:44:99:4c:7b:07:1b:d6:8a:3c:96:17:e4:ca:
         35:e9:94:0f:04:d3:4f:97:d4:d0:81:f6:9d:e3:49:f5:45:7c:
         63:21:41:a2:fa:70:52:23:3b:50:83:c0:65:8e:95:a9:5c:b2:
         87:bb:95:59:43:29:f5:dc:e2:65:ca:ab:68:eb:99:14:f5:2f:
         e2:f6:ff:29:db:b9:49:32:cb:cc:60:e0:27:01:58:64:eb:c5:
         86:55:5a:5e:2c:c3:db:1d:c8:30:b8:70:5c:d6:19:18:f7:ca:
         83:d0:93:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:34 2024 by rpki-client on console-ams.rpki-client.org