Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134352e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134352e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          xiKDJ0W9odof3ZTEIAeUuf/r2+Db6rXIwNVP6xEous0=
Subject key identifier:   BB:C3:99:3D:CA:FA:34:97:E4:E1:FA:5E:D5:DB:6B:90:70:B9:AD:1E
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       76E5870FA8E21C3A42C40A9936FCDED7CD491616
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134352e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:51 +0000
ROA not before:           Thu 04 Apr 2024 15:32:51 +0000
ROA not after:            Thu 03 Apr 2025 15:37:51 +0000
asID:                     61717
IP address blocks:        45.71.145.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e5:87:0f:a8:e2:1c:3a:42:c4:0a:99:36:fc:de:d7:cd:49:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:51 2024 GMT
            Not After : Apr  3 15:37:51 2025 GMT
        Subject: CN=BBC3993DCAFA3497E4E1FA5ED5DB6B9070B9AD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:ef:ac:a7:48:78:bf:28:18:f1:19:ae:41:
                    5c:cc:0e:20:ac:3d:e4:db:cf:55:58:90:87:f7:13:
                    ba:12:59:a6:2c:7a:92:fd:8b:09:56:9b:94:6c:74:
                    4f:f9:c9:b2:af:d1:ad:5e:e2:15:93:ea:0c:98:a8:
                    7b:eb:76:7e:ac:e7:e7:7d:bc:39:38:88:41:95:19:
                    6e:54:09:48:44:42:c0:b9:c1:c4:21:34:56:4f:85:
                    6f:13:d6:3e:8b:ea:e0:1d:f3:47:56:dd:1f:cc:f8:
                    02:b8:17:7c:37:29:53:35:d0:cd:3f:15:ba:9a:b8:
                    dd:b6:ae:dd:44:18:68:ef:d8:bf:bb:4f:c5:47:d2:
                    21:75:59:ea:80:e7:7b:5f:d4:5e:10:01:7d:21:d3:
                    b8:81:25:bd:4c:98:c9:49:65:17:bf:f4:75:db:1e:
                    d1:78:e7:25:50:f2:e1:5c:4e:37:d4:b9:f5:e1:e0:
                    c8:e4:e5:39:18:02:41:b4:9a:70:51:2d:61:18:a4:
                    1b:38:cf:b9:b8:d8:e5:ac:58:86:7e:e9:82:34:1f:
                    69:0e:da:47:02:b5:9b:1e:79:c0:05:97:5a:a8:4d:
                    b4:50:a7:2e:ef:f5:09:39:d8:04:44:ae:84:9b:8c:
                    06:83:e8:1f:5e:ca:cd:83:41:7d:f4:c0:4a:a1:63:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C3:99:3D:CA:FA:34:97:E4:E1:FA:5E:D5:DB:6B:90:70:B9:AD:1E
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134352e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:1d:53:8f:85:7a:28:7d:d8:71:1a:9a:39:57:08:30:56:9f:
         99:5e:02:7e:84:e9:1f:75:3f:cf:4d:3e:f9:3c:64:a3:12:47:
         ac:48:4c:5c:00:af:0f:f7:25:1d:5f:14:a8:e8:ca:19:1d:95:
         00:c3:81:97:76:85:41:67:71:36:69:17:7f:32:f6:ba:f4:b3:
         28:71:c8:2b:1b:40:2b:df:71:5b:7c:50:f4:1f:73:e7:0a:35:
         2f:db:b0:6c:dd:03:6d:e6:4a:de:57:46:12:d3:2f:35:6f:c0:
         3b:91:17:fb:22:16:0e:4d:09:df:e1:37:0e:24:5a:3f:13:bb:
         76:f3:0b:73:85:bf:82:a8:51:b3:56:b3:a0:cb:e7:8d:28:fc:
         32:97:fc:aa:1f:32:e0:b7:98:bd:9e:29:82:6d:7e:6e:48:d0:
         bd:12:be:09:cc:a5:10:ea:45:bf:a3:5e:55:79:95:f4:53:e5:
         36:7b:85:02:ac:72:55:e0:8a:40:a8:df:fd:c3:83:c2:bb:c5:
         75:cf:55:71:47:8c:bc:91:bb:9b:4c:1e:f5:07:7c:ea:37:9b:
         4b:a7:73:c7:8e:f2:19:50:19:b8:a3:61:e8:fb:29:3a:60:ef:
         7b:ab:7e:98:d7:f7:3a:82:9f:5f:48:42:a3:f9:41:6f:00:09:
         eb:2a:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:20 2024 by rpki-client on console-ams.rpki-client.org