Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
File:                     34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (raw, json)
Hash identifier:          c/ugvokmJlaV/FJR5qOJhkhNbIPikznS3w+XDbe3kj4=
Subject key identifier:   87:8C:D3:EE:87:EB:3E:53:06:71:AB:10:73:20:15:02:30:DC:4A:79
Certificate issuer:       /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Certificate serial:       47EFA527657A04427C4D840638CF17E03C0DF55B
Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
Signing time:             Thu 04 Apr 2024 00:33:15 +0000
ROA not before:           Thu 04 Apr 2024 00:28:15 +0000
ROA not after:            Thu 03 Apr 2025 00:33:15 +0000
asID:                     269131
IP address blocks:        45.180.56.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ef:a5:27:65:7a:04:42:7c:4d:84:06:38:cf:17:e0:3c:0d:f5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
        Validity
            Not Before: Apr  4 00:28:15 2024 GMT
            Not After : Apr  3 00:33:15 2025 GMT
        Subject: CN=878CD3EE87EB3E530671AB107320150230DC4A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:cf:06:45:1d:78:21:1c:12:d9:0d:1c:eb:
                    6e:e9:fb:1c:17:4b:9c:d5:68:62:c8:e5:3b:2b:7a:
                    b1:16:aa:8e:37:ef:eb:8a:be:89:9f:95:0a:16:09:
                    6d:b0:f3:ad:c0:b1:7e:69:29:f1:cd:37:ba:d9:f5:
                    47:33:8d:07:52:af:3b:c3:fd:4e:a7:bc:c9:91:97:
                    76:e2:ac:1d:d7:b6:a6:de:12:3d:c9:d1:6d:ea:8e:
                    5e:72:a3:a9:08:27:50:b7:83:b1:5b:48:45:61:88:
                    9f:40:c9:02:e7:2f:e3:f6:f7:ea:a1:95:8b:74:94:
                    0a:9a:7e:76:88:f2:ec:72:62:48:d9:1d:89:55:0b:
                    0d:35:50:d6:0f:aa:d7:69:3f:64:f9:1a:9c:99:6f:
                    96:4d:25:ef:2b:fe:1a:a4:1a:a9:99:1b:9c:f9:01:
                    48:a8:e1:ef:e7:fe:b4:7b:33:de:80:16:de:40:dc:
                    ac:a4:59:3f:7c:3d:5c:27:4d:18:67:46:b7:29:ab:
                    77:92:d9:56:2b:85:31:c6:ec:0f:60:24:15:da:c9:
                    df:b1:d8:a5:7b:5e:2c:eb:38:0a:87:64:1d:69:35:
                    30:cc:9c:d7:07:db:c6:b1:3f:2b:fc:5f:b5:69:21:
                    cb:30:b8:1c:e4:3d:b5:1d:c4:23:cc:bc:70:28:69:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:D3:EE:87:EB:3E:53:06:71:AB:10:73:20:15:02:30:DC:4A:79
            X509v3 Authority Key Identifier:
                keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:9f:78:15:cc:e5:5a:66:4f:1f:19:00:b4:29:db:79:4d:79:
         57:28:bb:1a:bf:78:96:57:41:4c:67:e8:f6:d8:80:78:42:47:
         ef:82:9b:66:55:3e:8c:1d:be:2d:03:f6:7e:9c:7c:da:5d:00:
         27:e5:1b:9d:81:64:4e:47:bd:6b:8d:59:2d:eb:db:b8:20:b2:
         a3:2f:bf:c6:66:6f:d2:4f:d3:4d:42:6c:ee:1d:9c:7b:87:e1:
         97:fa:ab:a0:d6:5c:6c:3d:d0:f3:8a:97:3f:2f:fc:64:61:e9:
         22:12:84:7e:1f:f1:04:7a:cb:10:2b:d5:bf:39:e1:32:24:d0:
         69:fb:2d:8c:32:0d:c5:ca:84:8c:b6:82:35:8a:4e:2b:0b:1c:
         d4:01:3e:b0:30:d3:30:b6:5f:a7:ca:c3:8a:4a:ac:7d:de:88:
         65:dc:fb:b3:ee:d2:18:67:16:29:38:5f:31:bc:ed:ea:20:ad:
         24:17:9f:15:10:cb:bb:5e:ec:99:d3:fc:01:89:34:05:e8:c2:
         eb:60:a3:8a:37:47:18:aa:06:db:63:84:7d:e2:cf:18:2e:39:
         13:f9:d6:14:4e:06:10:8e:b3:2a:b4:29:48:ec:ce:3a:dc:b6:
         0f:ea:6b:12:da:a0:76:11:f4:0f:9b:6f:69:3d:0b:24:43:6a:
         8a:9b:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org