Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134342e302f32332d3233203d3e203631373137.roa
File:                     34352e37312e3134342e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          ixEB9aMSKQ/RR1eFYtRAnO6mYYbg/oelNESESN6shKM=
Subject key identifier:   A0:0E:77:54:78:4D:0F:87:3D:5A:10:B7:77:9B:1E:8A:DD:E9:5F:57
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       3B2D1A893FA092A8B72F4B01E60116F3469763AD
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134342e302f32332d3233203d3e203631373137.roa
Signing time:             Mon 07 Oct 2024 11:06:06 +0000
ROA not before:           Mon 07 Oct 2024 11:01:06 +0000
ROA not after:            Mon 06 Oct 2025 11:06:06 +0000
asID:                     61717
IP address blocks:        45.71.144.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2d:1a:89:3f:a0:92:a8:b7:2f:4b:01:e6:01:16:f3:46:97:63:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Oct  7 11:01:06 2024 GMT
            Not After : Oct  6 11:06:06 2025 GMT
        Subject: CN=A00E7754784D0F873D5A10B7779B1E8ADDE95F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:5e:e7:51:98:50:bf:a8:3d:45:50:26:8c:
                    ae:d2:88:6f:73:1e:07:37:fa:9f:09:60:5f:8d:4d:
                    ff:23:a0:ed:c9:6b:5b:d6:22:60:71:12:da:78:59:
                    ed:cc:09:b9:3f:d7:1d:34:ae:5f:ad:a6:da:af:33:
                    80:73:22:7d:3f:bc:a6:7c:10:cc:02:e2:ea:d0:f9:
                    c6:61:d6:ab:56:15:92:64:9b:67:87:62:2b:7a:7c:
                    55:f6:b9:76:30:33:b3:36:a3:37:2a:43:30:df:a1:
                    5b:ec:67:ed:7e:b3:40:64:eb:49:8e:7c:03:a3:1d:
                    ab:30:5d:da:71:76:ed:16:e6:05:ec:18:73:02:07:
                    61:ac:b5:a0:b9:a3:af:cf:b4:0a:3a:47:37:7e:29:
                    b7:e5:66:fa:82:54:18:8e:fe:bc:2a:eb:9d:65:15:
                    01:42:38:fd:76:aa:f5:2a:ab:aa:83:2a:40:0f:d4:
                    5d:be:46:29:aa:de:51:37:f8:1c:8d:b7:be:21:cf:
                    91:15:10:86:15:36:42:04:ad:47:6e:ae:e8:94:1a:
                    5a:16:62:66:a7:48:6c:7f:06:96:fa:1b:34:0a:c6:
                    b1:86:a3:57:62:6a:2c:14:92:db:87:05:06:c4:27:
                    05:e0:f8:dd:f6:23:fc:c6:46:42:88:ff:13:be:52:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0E:77:54:78:4D:0F:87:3D:5A:10:B7:77:9B:1E:8A:DD:E9:5F:57
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134342e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:40:8a:f9:c3:48:f1:53:50:e1:8e:a7:54:4f:09:64:3f:20:
         61:60:46:8e:d5:86:85:b1:31:0b:7c:a2:08:cc:a9:67:0c:c5:
         6d:10:cf:47:bb:45:1c:55:bb:98:45:81:f2:3d:46:ab:3b:3c:
         22:34:18:88:bc:61:35:28:0c:fd:12:a6:2e:f6:94:6b:f6:45:
         68:4c:de:d6:58:f4:d5:1a:e4:0d:aa:ff:47:04:a1:f1:d4:c6:
         ed:56:02:10:64:c7:16:39:ef:3e:27:6c:be:84:a5:b8:e5:ba:
         89:6c:e3:e6:df:d4:e9:7c:18:80:de:13:ef:81:99:61:ee:ce:
         39:d2:dc:4a:5a:3e:8a:05:09:6c:f9:48:66:89:df:09:a6:44:
         19:46:f6:b5:86:1a:c9:1c:e5:f0:61:37:e7:f1:4e:72:38:2e:
         bb:22:44:76:d4:0b:09:e0:6c:df:5b:e9:75:a8:8f:47:8f:83:
         47:ba:f3:24:ce:68:e3:df:21:01:f0:30:39:20:a6:34:70:66:
         57:03:38:b7:f6:f9:58:8f:38:9a:02:f2:c2:61:81:c8:1e:25:
         75:bb:85:8b:85:5d:8f:53:9e:74:c7:ca:bb:d6:85:e9:18:d9:
         f9:68:f0:cc:db:b8:b3:fc:d4:36:7b:ab:2a:85:66:a2:57:8c:
         97:89:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:30:18 2024 by rpki-client on console-fra.rpki-client.org