Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3332203d3e20323637323831.roa
File:                     34352e3233322e392e302f32342d3332203d3e20323637323831.roa (raw, json)
Hash identifier:          F+gHBQksdHC4zrSrKn60XNraLxiGmb+jCJ/PULZh2Y8=
Subject key identifier:   F4:35:CC:C2:2D:3C:1F:F8:21:2D:3A:74:6F:A0:7B:F4:4B:CC:F2:B7
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       0D6EC1E6A1D008DE7191A560AAE5E10241763D70
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3332203d3e20323637323831.roa
Signing time:             Fri 24 May 2024 19:36:15 +0000
ROA not before:           Fri 24 May 2024 19:31:15 +0000
ROA not after:            Fri 23 May 2025 19:36:15 +0000
asID:                     267281
IP address blocks:        45.232.9.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6e:c1:e6:a1:d0:08:de:71:91:a5:60:aa:e5:e1:02:41:76:3d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: May 24 19:31:15 2024 GMT
            Not After : May 23 19:36:15 2025 GMT
        Subject: CN=F435CCC22D3C1FF8212D3A746FA07BF44BCCF2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:f8:9c:85:b9:7b:04:ac:89:0c:f1:8a:c6:
                    ff:1f:05:cf:57:ed:c4:ea:99:d1:d8:c5:dd:57:51:
                    92:34:09:c4:8a:d4:89:d9:da:84:0d:4f:31:2a:90:
                    be:6e:02:94:ba:c5:66:89:7d:ec:94:29:d0:75:35:
                    a0:41:e8:8c:d8:3d:ed:d4:80:f0:71:eb:75:69:88:
                    13:cb:18:d9:ac:de:92:e1:3c:ed:8b:84:df:69:96:
                    7b:6f:c9:f0:f0:58:09:bf:54:8a:ca:94:6e:8b:1e:
                    0b:97:58:06:0d:2c:71:c5:1d:54:49:02:0d:83:0d:
                    87:ff:48:f4:12:65:cd:45:d0:86:e2:2c:aa:82:ce:
                    f9:ae:f5:e0:5a:19:0d:9b:5b:83:1a:d3:2a:6e:93:
                    b5:a9:76:0d:c6:93:b6:3a:06:af:02:17:d4:96:c5:
                    d7:b1:fe:f6:07:14:d3:14:1e:0b:1b:f0:ed:b1:4f:
                    cf:3d:94:f1:0e:c2:8f:ae:30:fc:96:ff:bf:85:2c:
                    2c:05:65:fa:52:e0:b5:cc:8b:d8:90:ef:00:6e:e7:
                    27:29:97:56:64:5e:87:04:d1:aa:15:ba:10:c5:a9:
                    a1:43:84:98:d0:3a:26:ff:bf:72:83:47:cd:5c:24:
                    6f:07:c3:8f:00:f9:5e:c2:2a:2d:e8:f1:38:a7:19:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:CC:C2:2D:3C:1F:F8:21:2D:3A:74:6F:A0:7B:F4:4B:CC:F2:B7
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e392e302f32342d3332203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:d4:d5:61:c3:7e:14:53:14:81:40:32:53:fb:be:e8:26:
         b3:a9:79:f8:bd:d7:b4:78:3b:67:26:4d:e7:2f:5c:5a:01:40:
         e7:d7:54:c8:d7:ea:93:a9:6b:87:49:55:ed:62:86:d5:23:93:
         7c:11:8a:62:c6:c9:07:9e:d4:ea:cf:89:4f:5d:17:c3:60:76:
         77:68:5b:00:54:ca:71:5c:db:50:7d:7c:5d:0c:70:ac:9d:5a:
         24:36:e6:22:af:7a:1f:be:3c:79:1a:a7:f8:53:e5:27:fb:fb:
         f5:70:63:02:1e:3c:ab:ef:e1:ae:f5:38:ab:c0:c8:de:3b:ef:
         ee:89:61:36:ac:9f:a7:37:52:1b:9b:c9:03:02:15:1d:6b:4e:
         99:54:fd:e1:0f:21:7e:93:1b:3a:59:f1:d6:3b:6a:77:f1:ac:
         e9:19:10:28:28:40:02:c4:be:bf:2b:d7:ee:15:00:61:16:43:
         3c:b2:6d:df:e2:6b:3a:ac:eb:89:37:67:31:f3:dd:bb:c8:b7:
         bb:46:42:d4:ae:73:6a:d6:3d:a1:3f:95:f0:61:3c:b7:aa:c8:
         3f:0f:2e:97:ee:2b:d9:7d:ec:58:e1:ff:5f:95:45:67:f9:23:
         0a:60:89:7a:0e:9b:51:9e:5e:47:ae:a3:be:9a:99:2c:9b:e3:
         10:76:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 18:50:59 2024 by rpki-client on console-fra.rpki-client.org