Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          yWz84wWYI9HoPzY6lPruP0jNvCCyOf8Q4rWq2gcxFDs=
Subject key identifier:   4F:9F:C8:8B:C5:73:EC:BF:76:C2:13:14:AD:04:DD:8B:53:8E:ED:0D
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       09BDB630706DEF21AC39697BE81541F5DA104C6C
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:21 +0000
ROA not before:           Thu 04 Apr 2024 18:11:21 +0000
ROA not after:            Thu 03 Apr 2025 18:16:21 +0000
asID:                     267675
IP address blocks:        45.224.236.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bd:b6:30:70:6d:ef:21:ac:39:69:7b:e8:15:41:f5:da:10:4c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:21 2024 GMT
            Not After : Apr  3 18:16:21 2025 GMT
        Subject: CN=4F9FC88BC573ECBF76C21314AD04DD8B538EED0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:79:8e:f5:8f:7f:0f:fb:58:4c:f8:73:ed:
                    36:7f:42:b1:a7:ae:e1:e7:95:a7:ba:2e:fa:1a:f0:
                    7c:91:23:82:0a:f1:69:64:5b:d4:84:08:40:77:ad:
                    a8:12:75:03:61:7f:6a:61:ac:cf:e7:2d:b5:a6:94:
                    22:4c:db:54:20:a4:dc:0f:38:e3:ff:42:89:33:43:
                    0c:ad:7b:3d:d6:c6:21:8f:a4:a5:1d:dc:a1:5d:11:
                    8f:e0:22:14:96:d0:71:ac:54:aa:14:bb:33:6a:84:
                    b7:bb:3c:89:9a:8c:79:ed:76:ab:76:b8:e4:08:8e:
                    4b:b3:9f:fd:66:de:ea:d9:cc:51:9d:bc:86:9a:cb:
                    12:7f:55:ea:e0:59:41:af:a4:39:38:11:ea:30:fb:
                    9f:3a:6c:71:19:09:05:20:61:33:79:ad:31:2d:55:
                    0b:ca:55:b9:3a:fc:51:eb:b1:9f:99:48:cd:f9:0a:
                    dc:d8:0f:22:92:f7:6b:04:6e:7b:7b:8c:da:20:70:
                    f3:48:62:83:89:3e:fb:bf:d1:24:46:df:30:2f:9d:
                    f0:cb:74:59:33:b8:21:92:92:9d:47:9c:50:54:77:
                    2e:10:a8:43:8e:3e:7f:3f:a8:fc:9a:2b:e9:03:28:
                    ca:5d:b9:c2:90:e2:46:4d:e9:e8:95:d5:20:0b:b4:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:C8:8B:C5:73:EC:BF:76:C2:13:14:AD:04:DD:8B:53:8E:ED:0D
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233362e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:55:45:f9:51:02:e9:10:da:0c:75:ba:96:15:40:63:c4:
         f6:28:51:53:2a:46:64:aa:c0:b8:05:6b:1d:b6:55:5d:14:4e:
         ea:fa:19:ed:a7:53:72:2f:72:b0:c4:72:4a:16:b0:18:6e:79:
         e4:97:c1:48:38:20:c8:0e:cf:c7:9f:1b:89:d0:9b:b9:21:fb:
         d9:86:bb:53:13:22:df:77:39:3c:7d:3b:3f:de:f8:80:c3:73:
         6b:38:f0:8c:e3:71:74:cd:dd:83:f0:ce:81:02:e2:bf:18:7e:
         af:c9:c5:4f:29:65:59:a4:3f:c8:c5:97:a8:97:8f:08:89:33:
         17:a6:00:b0:24:3b:77:60:82:09:f2:7c:b1:47:be:ff:b3:e2:
         cd:94:2f:06:80:ef:6c:8b:4a:13:66:9b:4c:af:05:63:63:d4:
         86:ae:a1:8a:f7:87:80:f2:ca:e9:06:b9:6d:4b:c2:dd:13:df:
         a0:cb:7b:92:52:2c:84:67:06:93:2e:31:4b:eb:a5:d3:19:51:
         bd:c3:82:ca:88:5e:f4:82:f3:f7:d5:70:8c:43:83:e1:68:38:
         57:f4:94:08:35:20:c1:07:2d:61:34:e1:df:89:41:1f:45:a1:
         3f:0b:1f:03:cb:43:cb:41:03:da:96:b0:7b:05:03:fd:a1:bb:
         29:f8:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:02:34 2024 by rpki-client on console-ams.rpki-client.org