Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/34352e3138302e3139362e302f32322d3234203d3e20323639313437.roa
File:                     34352e3138302e3139362e302f32322d3234203d3e20323639313437.roa (raw, json)
Hash identifier:          kk/TxcpfYnQg028wJoeVt7zoZq0Z4fukeVHEAkM5lgI=
Subject key identifier:   CE:B1:0C:13:ED:91:EC:6F:C3:5D:34:ED:8F:AD:56:51:07:9E:76:71
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       10FD29AC732CD946F413BAEF3A09779CE72B1ACE
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/34352e3138302e3139362e302f32322d3234203d3e20323639313437.roa
Signing time:             Fri 03 May 2024 19:01:44 +0000
ROA not before:           Fri 03 May 2024 18:56:44 +0000
ROA not after:            Fri 02 May 2025 19:01:44 +0000
asID:                     269147
IP address blocks:        45.180.196.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fd:29:ac:73:2c:d9:46:f4:13:ba:ef:3a:09:77:9c:e7:2b:1a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: May  3 18:56:44 2024 GMT
            Not After : May  2 19:01:44 2025 GMT
        Subject: CN=CEB10C13ED91EC6FC35D34ED8FAD5651079E7671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:33:42:78:ea:8f:29:48:e0:86:35:ce:b2:
                    2e:61:52:fc:9c:34:84:55:8b:d1:ef:40:f8:9f:36:
                    8f:75:80:5c:f2:5d:2b:94:54:51:8b:92:01:50:36:
                    e9:33:7b:9a:b4:66:4c:c4:1e:85:84:07:6b:ef:b0:
                    cb:c5:5b:52:7c:6e:27:75:95:3a:7d:3c:2a:9d:5e:
                    41:7e:9f:34:ef:12:05:49:25:57:a1:39:c8:2b:66:
                    d0:76:cc:0d:f7:52:f7:41:55:86:4e:21:2f:9f:84:
                    4d:d5:cc:0e:10:94:64:89:73:b1:d6:b2:f5:14:d7:
                    a7:3d:a6:21:ce:ff:37:c3:ec:00:23:6a:3d:ea:80:
                    6a:ad:7e:a9:bc:33:a5:4e:6c:12:18:3b:62:43:4c:
                    a2:de:09:5e:84:b0:14:95:52:7f:14:4f:7e:b3:32:
                    f4:7c:5c:22:3e:11:2c:5c:0b:7a:28:90:45:10:37:
                    b1:86:3d:01:f4:00:ad:c9:18:16:4a:85:95:35:48:
                    00:c8:b4:bf:fc:12:19:bf:7e:bd:75:a4:1f:65:b4:
                    60:8d:6b:aa:fc:18:4a:05:50:5f:54:f6:8a:01:e4:
                    8e:ca:ff:9a:1e:9a:ee:19:af:75:9c:d6:2b:22:76:
                    ea:0d:6d:59:2c:e7:f8:72:8c:f3:57:41:8a:60:c9:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B1:0C:13:ED:91:EC:6F:C3:5D:34:ED:8F:AD:56:51:07:9E:76:71
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/34352e3138302e3139362e302f32322d3234203d3e20323639313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:3c:f2:74:d8:20:fe:64:e4:59:1a:8c:99:11:38:7e:c9:
         31:96:b0:59:b1:fd:de:8c:e7:d3:39:45:f2:e7:4c:91:b1:5c:
         23:0c:48:a9:b6:8a:64:d1:cb:55:59:03:3c:d9:76:f4:9a:4f:
         f2:e7:a7:17:87:da:e7:c2:1b:93:f9:25:41:39:cd:a7:6b:d7:
         75:e1:7d:ce:35:17:61:13:a9:27:83:1f:6d:7f:ca:b5:5f:87:
         58:0f:07:14:8f:09:c1:54:b3:4f:f6:f9:08:f3:55:1b:d6:05:
         59:2d:32:19:ee:3c:89:74:cd:7b:62:6d:cc:46:b3:2f:1e:66:
         a7:9f:06:7c:d4:d0:29:3d:46:d6:63:f0:84:50:18:c9:c3:8c:
         e2:f8:be:1e:85:fb:a2:63:38:b3:f6:5f:47:1e:9e:67:54:d5:
         0d:59:a3:c0:4c:5d:9d:67:41:89:ed:4b:2c:34:bd:68:a3:86:
         fb:0e:77:65:ae:38:f3:fd:7a:89:05:a6:44:f9:a4:93:cb:35:
         70:79:af:46:a8:23:72:ef:79:ad:09:37:ba:87:03:a4:94:3e:
         4c:10:68:4e:a9:6e:fd:1a:2b:c3:19:75:33:f0:57:47:86:0a:
         b1:52:e6:2c:94:7f:f9:16:54:f8:4b:d6:78:6f:6e:72:40:26:
         18:04:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 02:56:42 2024 by rpki-client on console-ams.rpki-client.org