Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa
File:                     34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa (raw, json)
Hash identifier:          19lshoyT5UHK0OneyHvHxXWciN34Ux2Uidp7WG4Z9Vk=
Subject key identifier:   9F:F0:5E:BC:30:FD:5E:91:CE:C9:EF:55:2C:18:CE:B8:6B:8F:D7:EC
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       4A13228F46ADBBD0AE02297B30AAD804DA3A2196
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa
Signing time:             Fri 30 Aug 2024 17:50:13 +0000
ROA not before:           Fri 30 Aug 2024 17:45:13 +0000
ROA not after:            Fri 29 Aug 2025 17:50:13 +0000
asID:                     268257
IP address blocks:        45.236.240.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:13:22:8f:46:ad:bb:d0:ae:02:29:7b:30:aa:d8:04:da:3a:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 17:45:13 2024 GMT
            Not After : Aug 29 17:50:13 2025 GMT
        Subject: CN=9FF05EBC30FD5E91CEC9EF552C18CEB86B8FD7EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:14:bd:cc:b8:a5:83:a5:57:15:a6:b3:0c:
                    3c:36:51:6c:02:df:b4:e7:85:5a:6c:c8:2c:58:97:
                    14:1e:28:2c:75:be:2a:78:72:2c:d2:b4:ff:d7:27:
                    27:f5:41:a6:c3:5e:fc:84:f6:66:bc:59:ab:ca:53:
                    8d:54:bc:a4:ce:09:43:a5:c8:ad:94:70:42:31:c7:
                    c4:6f:c6:9b:05:b0:a0:5f:c3:15:13:f9:05:46:c6:
                    4b:52:c6:51:17:7e:15:f5:f9:88:de:32:22:67:32:
                    dd:01:39:8d:88:5a:74:99:4c:46:78:d1:49:0b:ca:
                    c0:79:3b:51:89:e1:2c:c4:89:de:a0:cc:bf:dd:09:
                    d7:ff:23:5b:d2:09:1d:76:49:9a:7f:19:57:16:59:
                    7a:c2:7d:a2:4e:b0:91:e6:c3:97:df:13:d3:91:58:
                    3c:54:d4:3f:28:a8:e0:c0:bf:f2:88:64:14:b6:86:
                    a8:4d:58:10:92:b0:a2:55:62:4c:03:28:7e:f2:2a:
                    86:32:2e:82:2c:97:66:33:e9:20:a6:57:d4:86:20:
                    03:1c:d8:49:9e:d4:38:07:c9:d5:38:92:70:38:e9:
                    10:df:66:dd:88:a8:e0:5c:b3:49:e4:74:12:1f:3b:
                    b9:30:5b:65:b8:1f:50:69:91:7e:3a:32:8f:d0:24:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:5E:BC:30:FD:5E:91:CE:C9:EF:55:2C:18:CE:B8:6B:8F:D7:EC
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32322d3232203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:e8:e6:77:12:ce:ac:28:87:f9:be:01:44:46:ca:dc:f7:
         7c:4a:2a:df:e6:75:7f:81:5a:09:e1:f5:57:02:69:86:5c:76:
         46:50:a3:b3:2c:7a:e8:14:7e:65:2f:3e:36:03:8a:95:68:35:
         da:55:9a:6a:08:d9:22:04:d8:0c:c3:3f:9a:4b:a7:6c:ca:9b:
         33:84:7c:85:f6:23:43:73:00:bf:ec:01:3f:eb:26:c5:05:0a:
         9f:4c:84:b8:28:40:00:d7:41:02:64:9b:1b:73:ae:59:72:c6:
         4e:a6:ed:f4:08:8d:ff:af:a8:3b:30:16:9a:98:75:d5:a0:26:
         56:54:7a:d4:2a:d2:81:5d:9e:f9:21:2b:ed:47:d2:3f:b3:a1:
         84:0e:43:3c:b9:ba:83:32:a5:ae:d5:50:42:0c:01:47:4c:5a:
         a0:1d:79:97:24:3a:8c:23:be:1a:83:44:82:39:da:de:81:bf:
         4b:2c:c0:60:54:96:a6:45:1d:24:2a:a7:23:0e:16:96:ae:53:
         08:2d:f1:8f:de:c8:66:6a:54:8d:cb:51:e8:89:bd:f1:7c:46:
         8a:dd:3f:53:2b:74:00:c0:3f:38:1e:fd:bb:70:60:28:61:3b:
         3b:38:ff:46:b5:b8:d9:b2:63:09:34:3c:03:6e:b5:19:4c:f5:
         db:ae:7d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org