Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/34352e3138392e37322e302f32322d3332203d3e20323639353733.roa
File:                     34352e3138392e37322e302f32322d3332203d3e20323639353733.roa (raw, json)
Hash identifier:          h/CFfsUMZSTeO56unCt0o3dJ8mNV5COghJcD4pBErSg=
Subject key identifier:   28:16:23:20:81:9D:F5:28:32:B6:F3:DB:5A:B9:23:61:C5:18:42:59
Certificate issuer:       /CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
Certificate serial:       3FD51A3EA1BEB90922467C0FD0005CD4B386404B
Authority key identifier: 2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/34352e3138392e37322e302f32322d3332203d3e20323639353733.roa
Signing time:             Wed 10 Jul 2024 18:27:33 +0000
ROA not before:           Wed 10 Jul 2024 18:22:33 +0000
ROA not after:            Wed 09 Jul 2025 18:27:33 +0000
asID:                     269573
IP address blocks:        45.189.72.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d5:1a:3e:a1:be:b9:09:22:46:7c:0f:d0:00:5c:d4:b3:86:40:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DBDD3CD39663868244CF54E63FC0B537E82EA9B
        Validity
            Not Before: Jul 10 18:22:33 2024 GMT
            Not After : Jul  9 18:27:33 2025 GMT
        Subject: CN=28162320819DF52832B6F3DB5AB92361C5184259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:e8:f5:75:1b:12:6d:08:2f:35:ed:a9:9e:
                    0f:bf:39:a1:ff:3f:2a:cc:99:5b:19:52:10:8a:7d:
                    9c:75:d6:35:29:3d:5e:d9:91:bb:4a:24:e8:b8:b8:
                    8e:53:62:eb:a4:14:31:97:bf:a4:b4:5d:26:72:ab:
                    26:f8:c7:71:5e:8d:86:08:05:c1:04:b0:ea:26:f4:
                    b6:cd:52:f7:4b:46:8e:c4:0a:64:fa:36:97:2b:c4:
                    15:1d:c7:6b:6d:b2:46:b7:df:f0:dd:a8:ab:5a:8b:
                    93:33:6a:03:64:e8:26:0f:82:c4:28:25:84:4e:82:
                    70:fb:4f:11:af:dd:14:11:51:b6:f8:75:76:ab:65:
                    fe:59:62:c4:67:aa:86:e3:16:bd:74:00:0d:c6:8c:
                    cf:03:74:cd:3f:5e:e4:53:92:69:ae:4a:d7:02:dd:
                    9b:80:12:d1:06:6e:78:6b:7b:e0:34:1c:25:8d:17:
                    9d:60:09:31:be:7b:64:58:ce:fd:42:34:db:46:fa:
                    5f:f3:e0:ff:c3:4b:bf:d3:3c:5a:06:c8:99:ad:d1:
                    63:6a:8c:f7:61:05:cf:cf:da:fc:e1:c4:51:56:eb:
                    98:da:99:7b:3f:4a:dd:5e:7d:21:b3:a2:17:cd:a6:
                    8b:8d:f6:f6:56:bf:71:d1:fb:4f:ce:dc:e2:95:0a:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:16:23:20:81:9D:F5:28:32:B6:F3:DB:5A:B9:23:61:C5:18:42:59
            X509v3 Authority Key Identifier:
                keyid:2D:BD:D3:CD:39:66:38:68:24:4C:F5:4E:63:FC:0B:53:7E:82:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DBDD3CD39663868244CF54E63FC0B537E82EA9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HPwFKe6McRda9maJCZmRKJ6mKmc12Rx8MJQM4V5uA93/0/34352e3138392e37322e302f32322d3332203d3e20323639353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:28:33:24:e1:29:74:9d:c0:cc:23:c7:dc:db:75:6d:35:d0:
         ab:eb:63:9d:d6:c1:4a:7d:4a:9a:6f:57:20:33:1e:41:37:30:
         e6:e9:ee:e4:cb:4d:e0:19:62:b1:c7:10:61:a8:f8:45:a0:f7:
         91:e3:e7:2c:db:b5:ba:55:b3:e8:3a:07:b4:29:ff:67:ba:75:
         1d:07:19:07:06:15:b7:6d:cc:7c:1b:bd:48:c6:65:93:d2:28:
         64:ea:36:5d:b7:4b:ef:73:78:52:80:c5:e7:14:a5:2d:ca:70:
         b6:ce:7c:5b:71:3a:c6:47:ec:b7:e9:ec:e7:d7:8e:e1:f5:0c:
         22:ea:31:18:53:cb:88:ac:c8:b7:44:52:41:6e:76:42:e5:65:
         4e:53:53:66:55:84:72:7a:a2:ce:8a:86:19:0f:e0:0d:83:64:
         f6:0c:0c:07:65:3a:b7:e6:70:0e:c8:6d:2d:44:07:d5:73:30:
         8a:d0:0f:5b:4f:8c:5a:fb:c6:f5:18:34:f6:9d:64:3a:f0:e3:
         58:05:ae:1b:28:2f:3d:6c:b9:e1:6f:ce:aa:0a:73:d2:18:7a:
         67:ee:8b:05:02:d4:61:76:c2:10:dd:0b:e9:84:7a:4b:27:8d:
         42:93:8e:90:29:66:49:ac:fd:e1:85:bd:a6:aa:92:b2:55:45:
         f2:33:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 23:51:30 2024 by rpki-client on console-ams.rpki-client.org