Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32332d3233203d3e20323639313735.roa (raw, json)
Hash identifier:          sPWcsLUe6ec/2rx4jaARCpfj/6v9GX91pXLKxX4SacM=
Subject key identifier:   2E:99:8B:D2:33:2C:FC:0D:D6:3D:C6:16:1A:28:5E:67:2D:87:4A:99
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       1085221215E9336CD47F130409326E61A56D4F69
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:47 +0000
ROA not before:           Wed 03 Apr 2024 21:05:47 +0000
ROA not after:            Wed 02 Apr 2025 21:10:47 +0000
asID:                     269175
IP address blocks:        45.181.92.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:85:22:12:15:e9:33:6c:d4:7f:13:04:09:32:6e:61:a5:6d:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:47 2024 GMT
            Not After : Apr  2 21:10:47 2025 GMT
        Subject: CN=2E998BD2332CFC0DD63DC6161A285E672D874A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7a:5c:69:6f:4a:f3:fc:85:26:b7:c5:fe:60:
                    b2:1f:2d:d9:72:11:fa:fd:63:09:04:ee:8a:d7:0b:
                    a3:7e:fc:b8:69:e5:92:3b:ea:ce:2c:d5:ab:1b:34:
                    f2:3e:98:7d:6f:44:4a:51:26:f4:75:b0:0a:d3:db:
                    65:ed:51:ff:bd:8c:6c:d8:15:c4:f2:87:69:6f:26:
                    bc:59:f0:d3:b4:32:5b:29:a1:22:8e:89:6c:e5:87:
                    f5:a7:cb:88:3f:7b:34:79:62:6c:47:01:67:d6:f6:
                    ea:88:b5:6c:09:4f:6f:40:c2:87:ed:79:f5:c8:e4:
                    68:11:b3:b0:58:ee:dd:0f:32:bf:dc:bd:af:28:50:
                    08:c3:67:f6:4e:7b:08:d2:9e:00:4b:1b:83:60:58:
                    84:6e:23:94:f7:df:ff:28:3b:24:4a:3d:85:06:15:
                    f7:9c:91:12:42:eb:7a:19:56:7d:22:3d:7b:a3:83:
                    39:0a:50:4a:8d:fc:2e:95:5f:0d:c8:ae:2c:ce:b2:
                    1a:85:a5:7d:ad:f7:1b:6d:c9:57:c3:b1:02:d3:a7:
                    03:36:32:30:22:13:5f:99:16:f5:9c:6f:8e:8f:d6:
                    6b:6a:6b:60:4e:28:60:80:9a:75:95:39:7e:71:b8:
                    c5:5b:20:fb:a5:3a:87:fd:34:6f:1d:28:c8:27:4c:
                    ff:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:8B:D2:33:2C:FC:0D:D6:3D:C6:16:1A:28:5E:67:2D:87:4A:99
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32332d3233203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:03:7d:8e:e9:f8:c7:79:8c:54:7a:5a:3e:a9:7a:f4:66:90:
         ff:a6:7b:65:cf:6e:b1:52:4b:dd:89:d5:b7:87:fe:94:86:65:
         23:f5:bc:9c:f9:b3:90:89:50:5c:1f:67:c1:92:05:7f:ac:d2:
         33:ff:64:cd:be:38:8b:42:5d:63:92:9e:b0:82:71:57:f4:b3:
         dd:76:b7:bf:46:c2:8e:de:76:89:62:f7:aa:9b:c3:2c:ba:99:
         e6:15:19:06:37:a6:6b:50:4f:11:7a:fc:68:28:5c:79:67:31:
         19:0e:a3:af:24:94:d7:b9:93:77:c7:39:33:e3:f1:57:22:ad:
         56:6c:6a:92:10:a5:18:fa:c3:93:75:61:98:27:13:5d:9d:1f:
         c7:74:25:3c:13:c5:74:42:7a:a7:eb:56:b5:43:b3:62:86:29:
         27:e8:66:b8:8e:18:a1:86:f3:75:76:f1:4e:1e:f6:6b:ec:58:
         19:c5:5d:20:3c:70:78:37:08:a9:4b:eb:a5:f1:7c:36:63:f7:
         37:6a:da:69:32:ec:bd:b0:28:6d:52:b4:1b:5a:0d:c8:4e:f7:
         e7:df:6d:8d:fa:ae:80:3c:e1:e2:48:c6:fa:3e:84:ed:a1:7f:
         a9:a8:1f:52:54:23:06:79:52:15:03:a3:7d:68:d3:9b:56:39:
         3e:16:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:09:22 2024 by rpki-client on console-fra.rpki-client.org