Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa
File:                     34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier:          NIs+3s4vMXlK5wRmaWeienY9ERZ6p9yaBsCbCTWQLh0=
Subject key identifier:   2D:52:3F:07:1E:6B:CB:80:0D:C3:37:4E:DE:41:66:50:A3:D6:41:5F
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       161CF148282F9E3AB1300C22884AAE86CCD1E3CD
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:26 +0000
ROA not before:           Wed 03 Jul 2024 21:05:26 +0000
ROA not after:            Wed 02 Jul 2025 21:10:26 +0000
asID:                     268229
IP address blocks:        45.235.202.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1c:f1:48:28:2f:9e:3a:b1:30:0c:22:88:4a:ae:86:cc:d1:e3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:26 2024 GMT
            Not After : Jul  2 21:10:26 2025 GMT
        Subject: CN=2D523F071E6BCB800DC3374EDE416650A3D6415F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:68:7d:b8:34:61:cc:b5:94:e7:17:e6:79:
                    66:92:89:42:e3:ef:bb:72:05:29:ad:7c:65:9e:b2:
                    2e:a9:ba:2b:17:4a:33:06:d7:d0:ff:92:02:79:e2:
                    97:6a:53:e4:12:ee:c0:2a:5b:53:1a:84:14:b5:55:
                    63:3a:84:b9:38:6a:b8:59:9a:4e:38:35:e5:c1:ca:
                    58:c2:8e:43:14:49:29:1e:a9:16:e4:dc:de:6c:67:
                    60:73:00:1c:86:24:5b:bf:4a:a9:60:29:67:69:da:
                    9b:ec:37:1b:11:28:64:d2:36:16:c5:6a:49:c0:1d:
                    48:af:f4:61:13:50:39:12:ab:6e:f6:e3:f9:ec:19:
                    10:51:60:dc:13:d2:61:10:e9:a0:b9:f5:a7:98:67:
                    4d:73:e0:7d:42:2d:05:28:b8:a4:04:46:0e:8d:0d:
                    8b:52:ed:e8:ff:47:09:7d:19:eb:f4:87:e5:04:79:
                    d6:6b:47:ab:82:85:6d:f4:f9:a2:4b:9e:d4:98:66:
                    67:df:18:6f:90:88:01:82:97:2c:75:d5:85:f3:94:
                    65:b1:32:7f:76:62:fa:c7:68:4c:0b:f1:f7:a4:84:
                    09:6e:a5:12:98:9d:1d:8e:32:fd:d6:79:41:37:18:
                    98:78:d8:2a:b5:18:fb:ec:35:5e:7b:89:26:53:01:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:52:3F:07:1E:6B:CB:80:0D:C3:37:4E:DE:41:66:50:A3:D6:41:5F
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230322e302f32342d3234203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:00:fb:c3:66:bf:a9:47:d9:71:41:e3:ce:eb:38:01:db:e8:
         2d:bf:a1:bc:4f:9d:8c:a7:51:5c:78:54:3e:5b:09:f1:0a:8b:
         90:58:11:76:10:67:79:b4:87:95:e9:c2:25:b9:e2:98:dd:85:
         ad:c6:b6:83:c5:19:85:d8:6d:fc:42:49:0a:92:45:00:30:73:
         10:58:3f:95:de:89:eb:19:e2:8d:86:87:79:ce:d8:ab:f5:cd:
         ad:6e:49:13:4c:d7:da:f1:8e:25:68:93:06:56:c3:87:2e:83:
         84:13:92:d9:89:c5:c2:7a:d4:2e:31:80:b5:c9:19:a5:58:e2:
         ca:cb:a6:5b:8d:55:f4:85:09:47:02:55:75:c3:a9:d4:a9:9a:
         4e:9e:84:cd:72:71:fe:01:f8:c8:0e:bd:b7:d0:3b:86:c9:88:
         74:27:d0:a6:73:cb:ea:50:3a:eb:3d:a0:99:e9:9c:bf:e0:55:
         50:17:6e:9a:82:86:30:f0:8f:3b:3e:51:1f:00:73:d6:74:21:
         b9:d5:ba:24:b6:af:7b:9d:e4:01:18:5d:19:98:72:8e:22:3c:
         d9:d5:c7:5e:16:9b:a1:4c:71:e9:b9:ef:e4:a9:cd:d1:e1:3a:
         74:2f:be:bf:4f:99:0f:6c:d2:5e:5a:9b:fa:ce:13:ac:82:ae:
         e1:9a:23:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 06:47:53 2024 by rpki-client on console-ams.rpki-client.org