Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa
File:                     34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa (raw, json)
Hash identifier:          3TSCuTbNviCSohLsxubKgsjRSsLkhRQecDiP3Z+b5uo=
Subject key identifier:   18:99:87:D5:50:A6:9C:FB:5E:DF:8A:1D:D6:58:98:9B:5C:11:5C:2C
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       1925A74E7F4BF1C67901E37BD957C98E1F5E4EC8
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:24 +0000
ROA not before:           Wed 03 Jul 2024 21:05:24 +0000
ROA not after:            Wed 02 Jul 2025 21:10:24 +0000
asID:                     268229
IP address blocks:        45.235.200.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:a7:4e:7f:4b:f1:c6:79:01:e3:7b:d9:57:c9:8e:1f:5e:4e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:24 2024 GMT
            Not After : Jul  2 21:10:24 2025 GMT
        Subject: CN=189987D550A69CFB5EDF8A1DD658989B5C115C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:da:85:73:8b:bf:83:56:fa:5e:02:e7:7f:
                    c6:9a:04:7c:61:16:2d:98:79:cf:7c:2e:93:5b:81:
                    6d:a7:d2:f4:64:06:d5:98:5d:f9:eb:bb:67:8b:99:
                    16:ca:47:e9:3f:d9:c7:a6:bd:95:8c:1d:34:56:1e:
                    45:b7:c7:25:c9:6a:15:b7:b3:cb:9f:c2:3e:a0:aa:
                    38:02:80:3c:17:bd:49:1e:9b:d7:4b:8b:e1:b1:2c:
                    11:34:b0:0d:d8:28:fc:02:bc:64:fa:03:01:73:0d:
                    29:6d:d6:82:41:8e:cf:6e:6f:ba:9a:46:31:77:f0:
                    e2:77:f9:4e:8c:38:5b:b5:fa:10:41:75:58:45:73:
                    f7:d9:22:fc:3c:6b:e4:77:e3:bb:2f:f6:87:25:e4:
                    c5:5d:f4:3d:26:b6:21:43:c7:a4:0a:f7:fd:a1:a2:
                    5b:9c:66:35:43:29:57:1e:fd:05:05:17:f5:2d:1d:
                    67:0b:f6:5b:c6:e1:b7:90:5e:c7:2e:b9:8a:29:3c:
                    98:fd:2c:e0:b5:56:12:77:99:36:6b:80:6b:1a:c4:
                    84:74:22:df:8d:a7:66:22:a6:9f:5e:59:a2:16:a6:
                    b8:d0:8e:c0:b7:e5:0a:f4:4d:1d:4c:60:3f:a2:ba:
                    f5:29:03:de:dc:96:42:82:e1:ab:ff:0d:67:e0:d7:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:87:D5:50:A6:9C:FB:5E:DF:8A:1D:D6:58:98:9B:5C:11:5C:2C
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32332d3233203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:8e:2a:89:b6:b2:da:5c:80:7b:d8:a4:2c:25:72:75:9c:
         6b:01:54:61:3d:7e:bf:88:10:1c:17:28:59:ec:62:44:8f:06:
         fc:8b:2c:0b:6b:52:df:4a:f2:f4:70:32:b6:09:69:20:e7:48:
         1c:62:5c:5e:84:3e:8c:17:d7:c7:6c:68:67:cb:c9:e3:37:f1:
         f0:99:cf:ef:e8:d0:87:8e:72:e4:6a:b6:f8:b2:ca:5c:38:1e:
         4a:d8:a9:61:9c:e1:37:e8:17:10:ff:9f:44:45:fb:fb:26:dc:
         1d:9a:8c:15:22:15:a9:b4:2a:f8:78:67:e7:be:5c:47:84:69:
         2b:10:02:d9:2e:d6:33:c9:bc:0a:e5:b7:c2:48:e2:6e:85:4f:
         4b:29:68:b4:4a:8d:ec:f1:32:11:79:d5:0c:bf:36:3e:5e:46:
         4d:d9:1f:83:10:37:d8:6d:c1:47:9c:cf:f4:f8:39:f6:5d:b8:
         b6:fc:1b:d3:ca:39:ad:17:17:c3:24:d3:6e:6d:b2:3c:78:4a:
         79:a4:4b:5f:16:9d:c3:b1:e9:32:39:fe:e7:69:9e:de:69:3a:
         e9:60:06:fb:90:9c:23:0e:e8:9b:1a:70:62:b2:a6:06:06:d6:
         81:ea:72:d8:a0:d8:d0:3a:a2:c5:fe:8d:bb:54:c0:e4:6f:22:
         86:2a:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 06:47:53 2024 by rpki-client on console-ams.rpki-client.org