Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3234203d3e20323639323838.roa
File:                     34352e3138332e3136362e302f32332d3234203d3e20323639323838.roa (raw, json)
Hash identifier:          D1gi/GFn0gg0lflimIORhYNzDjow2NKWDuJmhegDXJw=
Subject key identifier:   DE:68:B8:F6:4C:66:1B:1F:65:2B:CB:55:36:E0:52:4E:B4:ED:9C:8F
Certificate issuer:       /CN=E85C68A94645B408E2C6B24153FD6F9E777D9AEB
Certificate serial:       393029E503B566B3ABE911923E463611C93EC15A
Authority key identifier: E8:5C:68:A9:46:45:B4:08:E2:C6:B2:41:53:FD:6F:9E:77:7D:9A:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85C68A94645B408E2C6B24153FD6F9E777D9AEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3234203d3e20323639323838.roa
Signing time:             Thu 04 Jul 2024 01:52:09 +0000
ROA not before:           Thu 04 Jul 2024 01:47:09 +0000
ROA not after:            Thu 03 Jul 2025 01:52:09 +0000
asID:                     269288
IP address blocks:        45.183.166.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:30:29:e5:03:b5:66:b3:ab:e9:11:92:3e:46:36:11:c9:3e:c1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85C68A94645B408E2C6B24153FD6F9E777D9AEB
        Validity
            Not Before: Jul  4 01:47:09 2024 GMT
            Not After : Jul  3 01:52:09 2025 GMT
        Subject: CN=DE68B8F64C661B1F652BCB5536E0524EB4ED9C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:da:fc:54:a2:a0:5b:b3:a8:4a:a5:63:1f:
                    4b:5d:4f:2a:ea:1a:19:3b:07:c2:35:a9:f5:f4:2a:
                    e5:61:31:dc:8e:b1:fe:ea:5e:da:6b:c5:e6:f9:54:
                    63:88:a9:83:a1:0b:07:b3:95:a0:c2:cc:f4:17:3f:
                    88:2e:5b:f4:5d:84:d7:1d:b9:bd:41:56:4f:89:c9:
                    a4:c5:a7:3c:2e:e9:39:e8:f9:67:a1:4c:90:b4:19:
                    04:58:22:93:43:8d:04:de:df:46:81:55:59:5d:96:
                    9a:ff:3d:06:65:ca:ef:67:67:36:67:41:72:73:ef:
                    38:91:86:67:fe:70:a1:14:7d:3c:98:3c:42:d9:f1:
                    f4:99:85:51:36:cf:e0:0f:6a:79:c5:5e:f7:f5:dd:
                    86:65:c8:59:1e:4e:35:16:4d:32:02:87:d7:eb:e7:
                    c5:c6:35:3a:e0:8f:e0:7c:4a:2d:02:6b:79:00:4f:
                    6a:84:28:fa:b4:2a:d7:2d:29:ae:ca:77:26:e5:64:
                    58:45:9a:b4:3c:70:34:82:66:a0:98:60:9b:97:73:
                    a0:04:c7:4e:35:57:54:8b:22:5a:97:d6:e8:74:76:
                    02:d5:85:f2:f3:f6:50:ef:2f:36:d2:fc:8e:0e:6b:
                    93:e2:3f:26:19:fd:0e:f7:a8:47:b0:4a:3e:c6:7e:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:B8:F6:4C:66:1B:1F:65:2B:CB:55:36:E0:52:4E:B4:ED:9C:8F
            X509v3 Authority Key Identifier:
                keyid:E8:5C:68:A9:46:45:B4:08:E2:C6:B2:41:53:FD:6F:9E:77:7D:9A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/E85C68A94645B408E2C6B24153FD6F9E777D9AEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85C68A94645B408E2C6B24153FD6F9E777D9AEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/34352e3138332e3136362e302f32332d3234203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:d7:e5:b8:8c:42:65:86:87:60:d1:14:1c:c5:93:ec:22:
         49:98:48:43:75:3c:4d:19:c2:25:db:fe:c1:9b:34:6d:6a:6f:
         d6:d8:55:0c:7c:f3:80:4c:55:d2:b6:f3:d7:0f:a7:14:ad:82:
         56:bc:5b:0a:24:18:55:96:93:37:e3:84:59:83:8d:f3:85:a4:
         8c:ea:f4:6c:6b:5f:a8:26:38:83:c9:7e:75:a6:3a:c0:23:ae:
         79:69:df:d7:7c:66:d7:b0:8f:6e:2e:b1:d4:ef:7d:83:11:f6:
         2a:d0:e2:41:2e:30:94:73:09:77:3e:ad:7b:ac:64:36:35:da:
         fd:78:7e:86:2c:1d:8b:ec:95:0d:d5:81:e9:04:18:86:7d:7c:
         69:c9:d5:c5:b3:77:ad:ef:23:41:32:54:a3:d3:dc:7c:f5:ad:
         e4:50:e1:56:ec:58:ec:54:38:bc:d6:e1:02:d8:22:a6:98:77:
         80:95:59:1b:11:6d:15:b5:05:05:86:cb:d4:53:aa:9b:78:0e:
         d5:56:d8:a9:fe:d0:b8:67:32:2f:08:99:84:60:25:4d:dd:88:
         5e:fd:2f:8f:39:c3:7e:b1:56:fa:7e:4f:3e:19:4b:00:be:7c:
         13:a0:6e:40:a5:83:ba:d7:32:cb:0e:c2:a8:ad:5d:8e:f2:26:
         c4:91:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:31:32 2024 by rpki-client on console-ams.rpki-client.org