Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa
File:                     34352e3233392e382e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          acniRhwVnr7Q9ZBAtp5cDPk9wiOL4sZNF+YfrE74zwo=
Subject key identifier:   39:9B:73:E0:6E:BF:45:4A:7F:5D:82:F9:23:70:76:94:7B:8C:C9:A4
Certificate issuer:       /CN=CA948884CA136F59A5F29D9B37F2E11919035585
Certificate serial:       0F9BEC7C464D500CAC2E759C808C3A27596EFA85
Authority key identifier: CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa
Signing time:             Tue 30 Apr 2024 20:43:43 +0000
ROA not before:           Tue 30 Apr 2024 20:38:43 +0000
ROA not after:            Tue 29 Apr 2025 20:43:43 +0000
asID:                     264562
IP address blocks:        45.239.8.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9b:ec:7c:46:4d:50:0c:ac:2e:75:9c:80:8c:3a:27:59:6e:fa:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA948884CA136F59A5F29D9B37F2E11919035585
        Validity
            Not Before: Apr 30 20:38:43 2024 GMT
            Not After : Apr 29 20:43:43 2025 GMT
        Subject: CN=399B73E06EBF454A7F5D82F9237076947B8CC9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:6d:93:26:5f:89:70:73:1e:c4:4b:f8:b1:f8:
                    18:73:99:48:58:88:ab:ae:02:16:52:b3:b0:15:d3:
                    7a:a1:c6:84:af:f4:4e:aa:80:d5:a5:b2:bf:e9:88:
                    54:99:87:e5:37:00:70:f9:05:76:fc:2a:ca:41:7f:
                    08:2d:9c:27:fd:66:da:80:79:b6:9a:92:42:19:7b:
                    20:eb:46:18:41:98:ab:7a:8b:af:91:1b:1c:cf:55:
                    27:a3:d6:9f:c6:cc:cb:d3:06:da:3d:de:22:0b:22:
                    b1:62:16:d8:c5:6f:4d:a7:83:04:3e:bd:97:23:bd:
                    24:22:07:ac:bf:0c:8b:3c:c9:ac:fa:14:92:4d:cb:
                    b5:3d:a3:5f:8b:f3:4a:4b:60:03:66:62:e9:90:85:
                    b0:35:e1:cb:18:5c:27:32:b0:80:29:0f:7d:53:c0:
                    8d:a2:d2:69:7a:9c:04:21:53:4c:0f:b8:cc:6a:85:
                    97:cf:fc:be:1f:a0:2d:b3:c0:c0:0a:ea:37:7f:7a:
                    92:6d:f4:83:c5:c4:6c:7b:4d:1d:aa:9c:86:a3:88:
                    47:97:aa:73:49:92:84:ba:08:bf:e8:a8:ce:98:72:
                    43:76:66:f5:d2:49:0a:d9:e8:a4:82:e4:f9:93:2d:
                    a8:b0:d0:af:ee:70:c6:2e:9f:ef:ed:eb:f6:01:76:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:73:E0:6E:BF:45:4A:7F:5D:82:F9:23:70:76:94:7B:8C:C9:A4
            X509v3 Authority Key Identifier:
                keyid:CA:94:88:84:CA:13:6F:59:A5:F2:9D:9B:37:F2:E1:19:19:03:55:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/CA948884CA136F59A5F29D9B37F2E11919035585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA948884CA136F59A5F29D9B37F2E11919035585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/34352e3233392e382e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:11:1b:cf:f6:4c:f0:a6:dc:db:ad:d5:f9:94:9f:d8:87:
         e2:3f:be:7c:cf:0c:12:d6:b1:59:4a:ef:12:10:f6:45:7d:a4:
         00:52:d7:08:a2:bb:37:55:44:8f:c3:b0:8b:a2:fd:ab:54:5b:
         72:3e:f4:b8:5c:3e:c6:48:67:dc:d1:fa:f1:e2:7c:ba:b4:66:
         52:f1:40:e3:84:69:32:91:95:fd:a3:00:20:62:c6:2d:7f:ab:
         92:e8:8c:46:79:21:b0:23:fc:e4:59:b5:33:ba:9c:e6:53:96:
         15:21:77:45:39:c1:e2:7d:9a:fc:20:7f:0a:33:59:bd:fe:49:
         fc:06:0e:73:05:c1:9f:f0:bf:d2:de:45:80:8a:82:66:96:64:
         61:68:b5:75:cc:f6:4c:6a:99:f4:4e:92:6d:5e:55:50:9a:07:
         75:ca:ed:8b:1a:63:a9:ec:00:b5:6f:32:ab:51:9d:f8:6f:35:
         a0:b4:2d:63:d3:4a:72:81:1f:08:5a:4b:c4:a6:26:63:dc:eb:
         ce:25:bc:1a:c5:32:08:be:63:e5:db:aa:0a:04:08:7d:db:92:
         e5:07:f9:86:0f:5c:63:0b:3f:b2:d5:30:d1:95:b6:06:3f:fc:
         8c:26:a2:89:ea:4f:28:c7:e0:2f:c8:76:94:29:62:8e:21:ee:
         ae:44:a7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 06:28:42 2024 by rpki-client on console-ams.rpki-client.org