Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234332e302f32342d3234203d3e20323638323537.roa
File:                     34352e3233362e3234332e302f32342d3234203d3e20323638323537.roa (raw, json)
Hash identifier:          wNzKBugmdMYj2r3JbOp7Id/MeHfvk5aWp7CvSgphXQc=
Subject key identifier:   E9:00:C0:88:23:8B:59:BE:38:52:0D:02:A2:AA:31:C0:F3:C4:BE:91
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       74CB9823FDDEAAB4050CD93CA4E60499BF50E10D
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234332e302f32342d3234203d3e20323638323537.roa
Signing time:             Fri 30 Aug 2024 18:33:53 +0000
ROA not before:           Fri 30 Aug 2024 18:28:53 +0000
ROA not after:            Fri 29 Aug 2025 18:33:53 +0000
asID:                     268257
IP address blocks:        45.236.243.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:cb:98:23:fd:de:aa:b4:05:0c:d9:3c:a4:e6:04:99:bf:50:e1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 18:28:53 2024 GMT
            Not After : Aug 29 18:33:53 2025 GMT
        Subject: CN=E900C088238B59BE38520D02A2AA31C0F3C4BE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:ac:8e:f8:c9:ee:b7:dd:2f:9e:f4:da:46:
                    90:a0:21:e3:76:70:a6:bf:81:fa:b5:c8:f8:ac:72:
                    19:0c:e3:33:b2:ac:fa:f1:e3:f6:44:e1:ce:80:4c:
                    14:15:4b:86:e1:ae:99:b7:94:33:45:69:2e:64:57:
                    cf:d2:5b:15:51:3a:69:56:8d:12:83:39:3e:b8:e8:
                    b9:f1:7f:22:82:d3:53:5c:d0:8d:4c:0f:ee:8b:9e:
                    5b:81:e5:d8:5e:2d:f4:f7:3d:1f:5e:f6:44:b4:97:
                    d8:55:b1:c4:0b:a0:3f:00:4d:98:63:14:36:f8:9a:
                    1a:9f:e2:ab:87:0b:33:7e:a6:a5:5f:77:7a:62:d6:
                    4d:83:e4:31:bf:65:c1:9b:a3:ed:a1:d7:63:cc:c8:
                    db:a5:bf:e4:a8:76:d2:d0:1e:42:3f:89:46:63:8f:
                    05:18:7b:df:2f:31:ea:cb:9b:14:75:f2:00:75:60:
                    60:d8:4f:4a:e0:d7:e4:03:1a:5f:77:de:37:61:59:
                    c7:a8:bb:f3:1e:d2:3b:47:27:08:9f:27:e3:eb:2c:
                    de:db:0c:f4:32:07:af:5b:70:4b:ac:ec:ec:ae:79:
                    02:54:ba:c4:d8:f2:87:21:15:4b:07:83:a9:18:77:
                    fd:78:5d:78:d2:6c:7b:80:88:a0:1f:a7:ed:b6:5e:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:00:C0:88:23:8B:59:BE:38:52:0D:02:A2:AA:31:C0:F3:C4:BE:91
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234332e302f32342d3234203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:83:87:96:81:97:ad:dc:2a:41:50:9d:95:a4:3c:f1:61:7c:
         71:eb:96:c5:2d:12:54:5c:2e:c1:07:48:7c:1e:56:5d:2d:8d:
         88:91:bf:cf:aa:bf:65:fc:1b:88:ec:bf:01:40:89:6b:03:d4:
         b9:7c:36:c4:e1:2e:cc:fc:4f:e7:2a:ed:14:2d:56:33:ec:b9:
         a1:47:10:b1:64:7e:6c:3d:d0:a7:c2:e9:ca:4b:53:a2:59:98:
         6e:96:da:56:30:c5:bb:81:86:68:df:02:8c:c5:7b:2e:41:ba:
         64:75:5e:16:72:69:bb:50:48:08:af:31:37:a1:f7:46:07:2e:
         c8:08:0f:82:d7:57:46:80:ba:5b:7c:76:e0:6d:21:f0:9e:d0:
         68:17:48:f9:c1:37:c5:95:af:9a:9d:8a:af:ca:f4:d3:d4:5a:
         96:15:86:bf:62:e7:55:e8:f8:b3:57:67:11:ef:0b:66:9e:95:
         7e:b0:d7:5c:b5:08:73:f1:17:24:60:5a:e1:74:df:53:8b:17:
         72:e3:1c:0c:7b:20:87:80:92:ca:72:c2:d2:73:a7:ad:e5:b8:
         75:87:54:70:ba:0d:46:79:10:ac:0e:53:8f:57:e8:2e:53:3a:
         d0:70:66:20:66:93:2a:6b:5c:9d:be:bf:31:10:4d:ff:f5:13:
         cb:b7:05:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org