Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
File:                     34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa (raw, json)
Hash identifier:          cr3g51SJuZV+Wu9EOtMilCR48dVl49/CKj0pefm9Su8=
Subject key identifier:   06:40:87:28:04:F1:2D:6A:9A:48:D5:14:0D:2B:14:5A:83:06:48:73
Certificate issuer:       /CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
Certificate serial:       430E31571DFC572387339E1F2BD48E760C5532AE
Authority key identifier: F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa
Signing time:             Thu 04 Apr 2024 18:16:23 +0000
ROA not before:           Thu 04 Apr 2024 18:11:23 +0000
ROA not after:            Thu 03 Apr 2025 18:16:23 +0000
asID:                     267675
IP address blocks:        45.224.238.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:31:57:1d:fc:57:23:87:33:9e:1f:2b:d4:8e:76:0c:55:32:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6741989E839B67B57C8A59AF9B0797EA9DEDFB7
        Validity
            Not Before: Apr  4 18:11:23 2024 GMT
            Not After : Apr  3 18:16:23 2025 GMT
        Subject: CN=0640872804F12D6A9A48D5140D2B145A83064873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:0f:ec:f0:d0:11:b9:f9:d9:b3:0b:c5:82:
                    e8:d5:93:e6:e8:ef:b3:c8:41:48:af:a2:fe:48:29:
                    d9:c5:b0:f4:6e:0d:61:a0:c4:2a:03:e1:51:b7:1f:
                    74:8a:08:ad:10:96:dd:8a:35:c1:fa:31:a9:f6:7f:
                    94:10:61:b5:51:05:da:1c:20:34:30:6f:8c:52:77:
                    00:41:33:1d:eb:00:5d:37:e2:c9:39:2f:14:75:3c:
                    51:09:78:88:38:bc:3a:cb:f2:19:9a:d4:47:b3:36:
                    4c:b2:49:dd:d7:65:1e:10:65:2e:4c:41:d5:40:6e:
                    59:7b:6a:7a:2e:e3:1e:e9:52:11:90:65:9a:fd:98:
                    30:4b:3b:59:5d:01:44:49:13:39:7b:bb:99:35:bc:
                    e1:ee:e1:9b:9d:90:c0:93:14:5f:de:17:2c:a7:da:
                    11:fc:20:44:f2:3a:be:49:ba:11:10:17:7a:c9:63:
                    03:db:07:54:5f:7d:83:01:a0:16:47:09:5c:e5:f5:
                    27:1a:a5:8f:09:30:4c:75:7e:44:80:48:40:7d:bc:
                    47:be:27:db:87:92:e2:35:f5:12:fd:00:86:c0:0f:
                    a3:12:09:7b:82:d3:54:e0:d4:f7:33:12:f8:3c:6c:
                    5e:02:48:b2:74:73:90:1d:2a:ee:82:47:99:9b:a4:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:87:28:04:F1:2D:6A:9A:48:D5:14:0D:2B:14:5A:83:06:48:73
            X509v3 Authority Key Identifier:
                keyid:F6:74:19:89:E8:39:B6:7B:57:C8:A5:9A:F9:B0:79:7E:A9:DE:DF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6741989E839B67B57C8A59AF9B0797EA9DEDFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/1/34352e3232342e3233382e302f32342d3234203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:f6:a7:1e:09:de:2e:73:6f:06:0d:aa:be:12:c2:0e:cd:
         d4:c1:52:83:c9:ff:b4:bd:99:58:4e:54:6c:3d:cb:31:45:88:
         ad:82:c1:76:9d:19:df:35:b4:d2:73:9c:8b:5e:31:d1:87:1d:
         dd:47:b5:9b:e4:31:bf:b1:3a:73:98:f5:3e:88:a5:d9:4a:2e:
         cd:4e:9b:c1:cc:8c:12:15:d7:6d:d6:4f:79:82:d0:56:9b:fc:
         2e:d2:87:4d:c7:9b:cb:5a:9e:e5:f8:3c:e3:e9:cd:2e:ce:9d:
         41:b0:ca:e0:49:ec:7b:d9:10:53:ea:fd:fe:3f:cf:b4:b8:d9:
         82:05:f3:9f:7e:f1:e7:f1:3a:a4:3a:b3:a4:fd:13:93:4f:2e:
         f1:f0:a5:b2:61:ab:62:29:b1:19:a9:8c:e7:e7:a0:42:18:3f:
         13:10:01:e0:e9:1e:dc:49:fb:86:d0:5a:21:49:0f:e6:5d:fc:
         4a:b4:b0:ab:6d:a9:1c:2e:53:da:13:90:f2:7b:51:94:da:41:
         89:ac:92:4e:60:4a:21:e8:36:c0:03:4c:4a:23:32:33:ad:41:
         2d:2c:15:23:a0:de:f9:61:83:0e:f4:8e:b1:33:22:f5:e4:77:
         c5:b2:e3:01:5e:84:4b:c5:c7:2e:47:f4:f3:7b:b4:ef:63:83:
         de:3c:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:24:42 2024 by rpki-client on console-fra.rpki-client.org