Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3234203d3e20323637393432.roa
File:                     34352e3136362e342e302f32322d3234203d3e20323637393432.roa (raw, json)
Hash identifier:          VAgT33CS2JGfL/TvvRP7JsLtZPYNHUPXnZ5pbe3hAK8=
Subject key identifier:   AC:BB:D9:14:1E:BF:7E:5B:98:E2:01:1C:64:7F:7E:22:33:27:93:33
Certificate issuer:       /CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
Certificate serial:       596A520DCFA2C01AB1866C2B021BB3AAFA3DA792
Authority key identifier: F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3234203d3e20323637393432.roa
Signing time:             Fri 05 Jul 2024 20:32:05 +0000
ROA not before:           Fri 05 Jul 2024 20:27:05 +0000
ROA not after:            Fri 04 Jul 2025 20:32:05 +0000
asID:                     267942
IP address blocks:        45.166.4.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6a:52:0d:cf:a2:c0:1a:b1:86:6c:2b:02:1b:b3:aa:fa:3d:a7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
        Validity
            Not Before: Jul  5 20:27:05 2024 GMT
            Not After : Jul  4 20:32:05 2025 GMT
        Subject: CN=ACBBD9141EBF7E5B98E2011C647F7E2233279333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:ca:55:7a:c5:e0:43:57:78:6d:ef:93:d5:
                    d9:c6:28:84:20:59:a2:7d:f1:db:e8:7e:fd:83:f1:
                    96:32:6b:11:5e:be:ed:4f:92:fa:7f:c0:d9:fb:aa:
                    7d:42:f6:9a:5a:b9:4c:10:9d:b6:92:da:84:c6:e6:
                    38:3b:09:37:b9:a4:a4:04:c7:ff:27:d1:0e:ab:fb:
                    21:0d:4a:33:67:98:dd:c0:5f:8e:d8:bf:ef:31:9e:
                    69:60:a5:a1:bb:e1:7b:28:08:16:34:87:f6:6c:90:
                    25:00:94:f6:9e:23:a9:c7:79:54:99:23:1c:9c:8c:
                    2f:89:9f:2e:4c:1d:f7:aa:f3:69:94:68:91:95:76:
                    5c:c8:f4:d2:35:61:81:e3:a7:9f:c2:54:67:2d:4c:
                    54:ea:73:d0:2e:b6:7c:ed:9f:4f:9d:f0:e2:89:ba:
                    23:44:c4:23:af:d5:f1:d5:0f:26:17:af:a8:f7:5b:
                    ba:7c:28:04:aa:8a:45:6e:36:d9:81:7a:68:cf:30:
                    e3:79:af:7e:29:38:a1:c5:0c:ed:f6:6c:4f:83:38:
                    2d:26:a0:39:e2:9f:1b:b3:78:bc:7c:cf:25:a2:81:
                    b3:39:c8:91:85:eb:17:fe:5a:89:29:fd:4c:ba:bf:
                    e9:9e:33:58:8e:18:89:0c:9e:db:c1:7c:f3:c5:19:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:D9:14:1E:BF:7E:5B:98:E2:01:1C:64:7F:7E:22:33:27:93:33
            X509v3 Authority Key Identifier:
                keyid:F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3234203d3e20323637393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:a1:17:28:c7:a5:86:e4:13:60:03:e1:c8:e2:bf:38:49:34:
         cc:1c:51:f4:4e:c0:a4:c6:11:cf:1a:08:d8:5f:1e:27:b7:98:
         5c:66:5d:6f:4e:99:67:4a:80:c9:41:09:ac:3a:4c:6c:29:51:
         21:6c:28:4b:8a:68:aa:48:04:cd:79:1d:16:0a:89:d7:b4:65:
         a8:47:7f:a9:c9:ee:55:cb:f1:9d:58:7e:e1:d8:9b:9b:45:4e:
         5a:f2:d6:db:fa:f8:ce:4e:ec:ad:b1:57:26:7f:b0:70:09:11:
         af:eb:80:16:e1:06:91:04:94:65:0d:20:ff:8a:f8:4e:af:42:
         a2:d2:d5:d2:5f:23:6d:15:a3:6d:3a:39:ee:19:0e:dc:8c:01:
         be:4e:95:03:6b:1a:a4:6c:51:79:2d:19:bc:de:39:4f:5f:f5:
         aa:0e:61:fa:4c:03:e0:a2:15:6f:11:45:75:8c:f3:52:d6:03:
         91:f8:5d:b9:a5:52:b3:40:51:01:51:6a:72:73:3d:44:a5:9c:
         8f:7f:f8:89:03:62:11:ad:5b:ba:b7:39:b7:b8:c6:7b:3c:16:
         2b:fa:3d:76:fd:d6:7b:9a:4d:f4:d4:b4:f6:66:cd:c5:2a:de:
         5d:ba:8c:e1:aa:f8:99:89:b2:6a:f9:e8:78:97:e0:28:59:5c:
         06:bf:c9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 22:03:44 2024 by rpki-client on console-fra.rpki-client.org