Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa
File:                     34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          QKWp0WjamID1X5AFaFexpADFEV2UXn10WWHLnFGqigs=
Subject key identifier:   E2:D1:94:49:DC:86:80:C9:C2:B3:8A:EC:98:FB:DC:E3:E5:C6:53:90
Certificate issuer:       /CN=CA948884CA136F59A5F29D9B37F2E11919035585
Certificate serial:       22CBDDB302B384B3B0E88BE1D8E8D38A044EA8B1
Authority key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa
Signing time:             Tue 30 Apr 2024 20:43:13 +0000
ROA not before:           Tue 30 Apr 2024 20:38:13 +0000
ROA not after:            Tue 29 Apr 2025 20:43:13 +0000
asID:                     264562
IP address blocks:        45.174.188.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cb:dd:b3:02:b3:84:b3:b0:e8:8b:e1:d8:e8:d3:8a:04:4e:a8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA948884CA136F59A5F29D9B37F2E11919035585
        Validity
            Not Before: Apr 30 20:38:13 2024 GMT
            Not After : Apr 29 20:43:13 2025 GMT
        Subject: CN=E2D19449DC8680C9C2B38AEC98FBDCE3E5C65390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:93:53:bb:2b:75:9c:c3:1f:a3:26:b3:c5:
                    ad:52:f4:56:8b:fa:b0:f2:85:16:18:e1:bf:00:85:
                    bd:29:22:6e:f8:81:dc:e6:28:40:dc:13:4f:ba:cf:
                    36:09:5d:ea:0e:ba:76:b6:a8:af:e8:17:bb:72:2b:
                    98:6f:21:e3:c9:03:ce:af:29:a6:4d:45:0a:fb:8e:
                    ac:6f:1e:98:26:41:c7:19:f2:63:79:8e:21:b0:93:
                    ad:88:2b:d4:f8:3a:55:c2:d9:31:75:6a:f9:94:4e:
                    48:92:11:34:fe:63:87:f0:1f:ba:77:dd:a3:6c:0e:
                    c5:11:54:f7:e5:03:c7:f9:0c:8e:0d:03:18:33:f8:
                    2e:43:b6:33:0e:15:3d:a4:04:5a:b2:47:e9:24:63:
                    df:76:19:4c:05:68:1f:f6:a5:81:34:fa:6b:cb:f0:
                    44:1e:3b:c4:94:7b:86:69:76:63:3a:c3:d7:84:e9:
                    98:8a:dd:3c:2a:93:f5:16:92:8b:a1:cd:d5:4e:98:
                    62:5c:bf:2e:8e:12:6d:d2:4c:eb:fd:37:73:26:14:
                    fb:f1:62:ca:eb:6e:26:6b:55:78:31:da:0a:61:28:
                    29:30:be:7c:cf:d4:25:5e:8e:d7:ec:69:39:5e:b5:
                    a5:82:2d:23:5d:d7:7d:56:3f:c0:4f:3d:3e:50:cd:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:94:49:DC:86:80:C9:C2:B3:8A:EC:98:FB:DC:E3:E5:C6:53:90
            X509v3 Authority Key Identifier:
                keyid:CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3137342e3138382e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:c7:09:37:da:83:84:be:18:e9:92:75:c2:79:8e:08:f9:fc:
         30:c5:28:34:c1:b9:c5:69:ff:8f:b1:a1:59:24:1a:5f:70:d4:
         d9:45:59:0a:96:97:0b:3d:f0:6e:69:57:36:38:7f:ae:8f:4e:
         d8:6f:b7:6c:2a:7f:ae:a7:df:88:61:c7:80:a4:64:ed:fc:39:
         de:dc:00:14:91:b8:bd:ba:3d:a2:16:f8:7c:56:93:72:f0:04:
         94:9a:0c:32:fb:c3:81:9f:fb:3e:28:0f:ab:34:72:80:89:7b:
         f3:00:24:f2:e4:7a:c8:4e:46:f1:91:ef:0b:05:1b:35:84:68:
         60:15:51:a0:17:30:8d:ba:4d:1e:ce:d8:88:7d:02:41:98:8a:
         6c:fb:22:e0:bf:71:96:6d:5a:fa:ab:b1:81:bb:a9:af:68:7a:
         04:6b:c0:b3:88:2b:a0:a5:6b:cc:ca:98:6d:a0:71:85:fd:1e:
         7e:4e:b5:d1:81:5a:82:fc:62:c4:94:b2:c2:7c:17:df:6d:c5:
         08:04:85:11:c5:a5:af:b0:38:5f:b2:c3:99:43:de:b3:bf:7b:
         7b:5e:f2:b2:f3:a4:61:f4:61:ee:31:41:ee:d7:5c:e5:dc:5d:
         13:dd:22:a9:eb:0a:a7:82:23:40:15:d4:ff:b6:36:d7:09:f4:
         a9:a5:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org