Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32342d3332203d3e20323637323831.roa
File:                     34352e3233322e382e302f32342d3332203d3e20323637323831.roa (raw, json)
Hash identifier:          5rmbWSognH9KjEF2qvKDr0G6OAsq/wJdSd+BZwNjUrE=
Subject key identifier:   24:B6:6B:80:4A:31:A0:55:77:D3:71:CC:83:56:A2:75:32:F2:3E:AC
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       37D4D12BC752FC4CA1D9280B7EFA5407A6B957CA
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32342d3332203d3e20323637323831.roa
Signing time:             Fri 24 May 2024 19:35:49 +0000
ROA not before:           Fri 24 May 2024 19:30:49 +0000
ROA not after:            Fri 23 May 2025 19:35:49 +0000
asID:                     267281
IP address blocks:        45.232.8.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d4:d1:2b:c7:52:fc:4c:a1:d9:28:0b:7e:fa:54:07:a6:b9:57:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: May 24 19:30:49 2024 GMT
            Not After : May 23 19:35:49 2025 GMT
        Subject: CN=24B66B804A31A05577D371CC8356A27532F23EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:8b:aa:d0:fb:8f:cc:01:b4:63:5a:36:78:
                    0d:a2:fd:b2:5b:c6:c9:af:39:5f:aa:40:42:ab:23:
                    05:5c:2d:d4:b2:d4:91:77:de:5e:a2:99:30:cc:c0:
                    14:4f:9e:11:66:14:ec:a4:b4:01:48:53:31:1c:b7:
                    86:09:0a:06:e9:71:52:bb:98:09:c9:ac:44:f2:3b:
                    bf:71:fe:69:f0:f5:76:2a:80:e1:34:fe:f4:27:b2:
                    ff:eb:0b:13:0e:2c:46:cd:04:c3:2a:3c:f0:f9:14:
                    8d:65:d7:a3:9b:d7:27:22:77:07:57:12:26:b5:06:
                    72:37:57:6a:93:47:93:70:49:27:66:86:26:ce:0a:
                    88:e9:5f:6f:c8:78:b0:64:65:d9:14:e3:fa:e9:34:
                    a0:05:e8:5d:bf:a5:6c:5a:4e:cb:21:b0:fb:bf:32:
                    4b:f8:92:fa:b9:da:d6:9c:4e:0d:26:9f:d7:f7:72:
                    c8:fd:70:e0:c3:f4:81:8f:3d:c8:10:cf:a9:b3:8d:
                    0e:23:44:78:72:8e:f8:7c:02:8b:e6:16:46:14:d5:
                    c4:9a:0b:7a:e3:81:59:bf:60:5a:67:1c:44:a4:16:
                    95:a0:7f:e7:2a:75:34:ae:c2:ae:3e:f9:11:61:12:
                    9a:55:7b:4b:7d:a9:ef:41:48:a0:7f:b2:59:a8:55:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B6:6B:80:4A:31:A0:55:77:D3:71:CC:83:56:A2:75:32:F2:3E:AC
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e382e302f32342d3332203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b2:a7:5a:27:6f:83:9a:5f:63:55:f1:fc:8e:3a:0e:99:0d:
         66:34:f8:84:39:a3:56:c2:cb:2a:95:3a:32:19:36:32:46:5f:
         b9:ab:16:a8:6c:e2:5c:d7:ba:b3:20:e6:99:70:79:d1:61:fb:
         b6:ee:bb:e0:ec:8e:46:94:4f:92:ff:20:1a:8a:1e:09:dc:75:
         db:c1:b6:8c:c6:51:c2:c3:cc:61:5d:e5:73:ce:06:ac:f8:99:
         24:75:9e:9a:af:88:4e:f2:c3:01:38:d9:5d:cd:65:65:24:00:
         27:5d:8b:93:49:76:a3:4e:2f:11:0a:f1:f0:4b:31:ae:58:db:
         96:32:2d:d3:ae:ca:5b:93:e4:c8:9b:0d:bd:9f:53:15:c4:61:
         88:33:93:f3:f9:db:24:57:13:1d:c4:c5:ce:09:ab:84:64:3b:
         6b:2e:98:26:63:f2:1c:1a:f6:9b:27:4b:6e:1c:cd:3d:32:03:
         d9:d0:1e:df:79:d4:6f:c7:5c:b5:2a:61:0e:6e:d9:68:f1:cf:
         a4:ce:4c:ee:1c:e5:c5:9b:56:8a:45:18:c6:87:20:66:a8:3f:
         27:67:9f:c5:eb:6e:48:93:59:c3:87:1a:2f:ee:b9:63:2c:d0:
         0d:70:d8:1d:3f:6b:84:1a:f9:5d:97:be:83:3e:93:c7:bc:cd:
         ed:9f:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:21:34 2024 by rpki-client on console-ams.rpki-client.org