Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234322e302f32332d3233203d3e20323634383939.roa
File:                     34352e3233362e3234322e302f32332d3233203d3e20323634383939.roa (raw, json)
Hash identifier:          BUQsI6z6cA9f088qYyQw8uw7W+aX9aBEWL08p2v0rFs=
Subject key identifier:   61:33:3A:C3:1C:BE:D3:14:C6:D7:05:69:6A:86:D0:E0:6A:26:53:74
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       398752E90BB7557ACDEF6C5A7AE937F02F816F67
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234322e302f32332d3233203d3e20323634383939.roa
Signing time:             Fri 30 Aug 2024 18:41:05 +0000
ROA not before:           Fri 30 Aug 2024 18:36:05 +0000
ROA not after:            Fri 29 Aug 2025 18:41:05 +0000
asID:                     264899
IP address blocks:        45.236.242.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:87:52:e9:0b:b7:55:7a:cd:ef:6c:5a:7a:e9:37:f0:2f:81:6f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 18:36:05 2024 GMT
            Not After : Aug 29 18:41:05 2025 GMT
        Subject: CN=61333AC31CBED314C6D705696A86D0E06A265374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:67:95:5f:2b:76:51:7a:f4:6d:d6:79:d4:
                    98:5c:58:cb:3a:5f:4f:c5:49:a4:51:ba:31:48:81:
                    55:75:2f:01:76:36:2e:16:e1:aa:1e:87:da:08:99:
                    2f:c4:00:4e:15:af:c1:c5:aa:78:37:72:11:fb:b8:
                    ca:85:6f:2c:44:b9:0a:3e:12:fe:53:34:95:48:df:
                    64:ea:58:08:95:cb:e5:b8:1f:51:12:44:ed:c0:4e:
                    f1:96:a3:5a:02:66:0e:dc:4d:02:f7:89:2e:9e:1e:
                    b6:c2:ae:35:cb:d1:b8:ac:cc:44:c4:1a:0f:7d:ea:
                    41:45:f5:d0:bc:9e:36:1a:ac:18:75:8c:9f:42:c1:
                    36:a8:11:0d:f1:8b:a4:e7:23:f5:a6:4e:fb:1a:ad:
                    7b:9f:f9:07:63:06:fa:ea:be:28:76:22:3f:7b:90:
                    ad:b6:7d:04:0e:b0:dc:d4:4a:d4:d4:29:2c:53:87:
                    14:75:ff:de:ab:1a:65:a3:a1:ee:b5:74:36:2b:22:
                    6c:1d:27:bf:e6:04:38:bd:1e:7a:c8:14:d5:cf:26:
                    fd:5b:2a:dc:5b:67:3f:da:be:23:b7:04:38:f3:da:
                    a4:04:c5:24:3b:f4:ee:fe:12:15:ae:02:44:4e:73:
                    d5:b0:cf:6e:8b:92:65:8e:75:f6:6f:94:7a:ae:15:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:33:3A:C3:1C:BE:D3:14:C6:D7:05:69:6A:86:D0:E0:6A:26:53:74
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234322e302f32332d3233203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:92:d3:7d:52:f5:7b:84:eb:08:15:9e:df:db:79:9e:9f:
         21:19:4a:a0:30:af:89:67:4e:cd:af:74:3a:77:d5:3c:5a:d7:
         65:b2:c6:54:25:94:07:17:38:4d:16:ab:75:74:71:d0:f5:60:
         d0:71:02:63:2b:83:50:c7:b1:0a:17:ab:8c:4d:76:be:67:b8:
         e6:ec:2e:38:27:36:6b:22:18:03:e2:ff:32:03:b3:a8:17:5c:
         c3:8c:2e:17:8f:42:c4:bf:3c:4a:83:e0:c2:5b:24:25:db:a7:
         72:1b:ba:ad:f6:c4:99:fe:e7:e5:8f:95:d1:b1:f1:f8:4e:6b:
         02:6c:95:94:30:a8:bf:2e:d2:d7:5e:fe:7e:6b:c8:13:cb:e0:
         d7:9f:ee:91:e2:82:a9:5e:30:64:e2:a8:52:14:b2:aa:4b:e7:
         77:f1:87:d6:83:f1:89:96:b2:24:ce:b7:5a:9f:21:6a:3d:69:
         d3:74:33:8e:19:2b:d7:f9:2a:40:f6:90:60:83:95:d8:4e:06:
         dc:bc:3b:35:92:6b:30:5f:4f:c2:f2:9b:66:ff:a8:dd:c6:0c:
         3b:0b:b7:f8:bc:a8:18:03:72:da:57:02:70:05:ee:ea:ba:33:
         a0:51:92:cd:35:19:98:5a:f9:51:b1:09:4c:cf:9d:7d:92:42:
         33:ec:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:45:06 2024 by rpki-client on console-fra.rpki-client.org