Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34392e302f32342d3234203d3e20323638343437.roa
File:                     34352e3136312e34392e302f32342d3234203d3e20323638343437.roa (raw, json)
Hash identifier:          lLg3T5wQalp/xq2j3p6fS3sffk0oDjbh3BM/3sq4Y5A=
Subject key identifier:   06:A7:56:82:84:88:AB:15:91:42:29:AC:19:22:30:F1:3A:3C:B7:C9
Certificate issuer:       /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial:       1E7BEA0B0B6845C0D7F9E533EB1358EDA6DCAFEE
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34392e302f32342d3234203d3e20323638343437.roa
Signing time:             Tue 08 Oct 2024 22:43:17 +0000
ROA not before:           Tue 08 Oct 2024 22:38:17 +0000
ROA not after:            Tue 07 Oct 2025 22:43:17 +0000
asID:                     268447
IP address blocks:        45.161.49.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7b:ea:0b:0b:68:45:c0:d7:f9:e5:33:eb:13:58:ed:a6:dc:af:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
        Validity
            Not Before: Oct  8 22:38:17 2024 GMT
            Not After : Oct  7 22:43:17 2025 GMT
        Subject: CN=06A756828488AB15914229AC192230F13A3CB7C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:23:28:59:76:0a:f4:30:f5:a8:b6:f9:34:
                    a3:a3:95:c8:3a:f3:57:c9:f9:9b:9f:84:21:81:da:
                    d4:6d:e3:03:56:ef:49:9b:f2:12:77:63:a8:44:3a:
                    f8:a8:4c:da:14:b2:2d:09:22:d5:05:e0:a7:fe:35:
                    16:8f:ef:d0:2d:34:1d:88:65:b5:4c:d4:42:ab:33:
                    d6:35:ab:1c:39:4c:54:f0:c1:5b:8b:d8:ed:74:85:
                    91:61:79:ed:55:0d:dc:ef:04:11:1c:fd:e0:a1:10:
                    e4:4b:32:07:05:90:59:06:d4:88:d2:fb:6f:4a:7b:
                    d0:64:d2:15:94:bb:09:c5:2b:88:d4:36:f5:bd:06:
                    f7:ee:66:2e:40:47:bf:ac:1f:71:4c:b0:62:55:07:
                    7c:20:e5:20:47:6f:fb:35:40:99:97:d8:04:e4:ab:
                    db:b7:ca:08:c3:f2:58:89:e2:0c:37:18:fe:19:64:
                    0b:f4:49:6b:35:ae:ff:c8:4b:19:4a:86:59:0d:b7:
                    e6:0a:25:bc:a6:81:4d:e9:48:5d:52:dd:7a:bc:f5:
                    d7:54:d5:05:f9:56:0b:9b:a4:92:50:a0:17:af:ab:
                    1a:66:e4:c7:42:ad:57:9c:8e:1b:3f:e4:1c:37:9a:
                    65:f9:17:b2:f5:7e:e4:ae:b7:17:ab:a2:b8:27:24:
                    ee:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:56:82:84:88:AB:15:91:42:29:AC:19:22:30:F1:3A:3C:B7:C9
            X509v3 Authority Key Identifier:
                keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34392e302f32342d3234203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:1e:b5:b0:f3:d0:f8:6b:e7:a3:9c:1e:a0:be:1e:7c:40:
         ef:b6:11:bd:48:30:7a:3e:fd:6f:72:32:09:a6:8a:90:10:28:
         82:c9:da:42:8d:e2:d5:27:27:01:43:2c:2f:40:f4:43:7d:ff:
         3c:15:4f:f2:a2:5b:11:22:72:f3:10:8c:90:fd:73:0f:2c:ea:
         c6:55:3d:1a:34:89:03:7f:e2:ff:15:25:55:10:86:73:7e:0e:
         65:45:be:3d:6d:a4:68:b0:28:a0:91:1d:1d:09:88:84:4a:fe:
         61:49:b1:d3:b3:ef:3c:83:d6:57:2d:4a:b7:3d:e1:0d:fa:f9:
         df:b3:2b:7a:2e:82:8c:d4:b0:d2:0d:4e:10:f5:51:4a:a3:80:
         a3:d1:72:91:cc:d7:d0:36:63:70:b3:6c:48:64:00:72:62:e3:
         12:ec:e0:40:78:35:f3:fe:7d:e8:cf:b9:a1:80:c9:13:3f:92:
         76:76:b3:12:fb:d0:e6:7d:f7:85:37:f4:c0:ea:e3:9a:e3:06:
         15:d4:6d:b9:17:4b:5a:46:f2:7c:6c:24:b7:80:88:9b:92:7c:
         04:9d:11:23:81:82:2d:d8:dd:11:22:22:37:79:5f:80:64:50:
         c5:13:c2:c4:17:e3:ad:c6:2e:15:ce:7a:42:2d:a6:41:e9:71:
         cb:12:15:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:31:32 2024 by rpki-client on console-ams.rpki-client.org