Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          CP22o5a7OnF1QK7EqDHDmBhHJq+AaxafQN22dkOLw3k=
Subject key identifier:   EC:26:2D:C8:01:B5:2F:AC:61:66:14:E4:D8:8E:D7:F2:A1:ED:A5:47
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       62FDDA8593D823AC10A01CD0DD33020807D8A230
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:43 +0000
ROA not before:           Thu 04 Apr 2024 07:15:43 +0000
ROA not after:            Thu 03 Apr 2025 07:20:43 +0000
asID:                     268678
IP address blocks:        45.165.148.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fd:da:85:93:d8:23:ac:10:a0:1c:d0:dd:33:02:08:07:d8:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:43 2024 GMT
            Not After : Apr  3 07:20:43 2025 GMT
        Subject: CN=EC262DC801B52FAC616614E4D88ED7F2A1EDA547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3c:02:42:96:27:3e:c8:d3:42:0a:02:5d:23:
                    93:92:f0:d6:0e:b0:3f:6b:3c:84:9b:a3:d9:f2:04:
                    c8:e8:37:69:30:85:12:98:d1:54:b5:04:e3:8a:70:
                    01:c0:7a:1d:60:09:c8:e5:3a:cd:35:9f:fb:b2:81:
                    61:17:9b:f6:31:14:c1:78:bc:db:e1:51:38:02:a3:
                    d5:5f:7c:8c:1a:ab:de:09:43:13:cd:68:65:6b:9a:
                    3f:28:78:d2:0c:29:9f:fc:85:b5:7a:87:87:99:ea:
                    f2:ed:32:9d:94:64:67:6c:99:06:c3:7a:02:c5:45:
                    21:c0:c2:55:31:cc:d4:37:cf:17:41:28:3f:99:76:
                    57:7b:5c:cf:82:30:71:12:6d:a0:71:14:4a:e4:77:
                    5d:46:ac:b6:da:fa:c9:87:19:be:3c:20:66:5e:db:
                    6d:67:a5:f6:63:80:f7:98:97:ce:57:96:f9:ac:f2:
                    88:ec:8b:36:48:56:01:da:34:68:d6:f3:89:a9:6a:
                    a3:ab:ea:42:2c:b2:97:0d:b8:f3:4e:e2:cc:0f:cd:
                    11:d9:56:a0:61:ee:13:62:9a:cc:08:9e:9f:32:7b:
                    b4:7a:8b:7f:cd:f3:01:65:ea:82:f9:ff:e3:b9:47:
                    1f:c5:53:34:dc:b8:87:1b:f6:37:e9:bb:59:6b:21:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:2D:C8:01:B5:2F:AC:61:66:14:E4:D8:8E:D7:F2:A1:ED:A5:47
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:36:c1:dd:c3:67:ff:f7:8e:85:f6:70:67:33:04:ef:b3:
         76:28:a3:2f:f2:91:98:0c:c4:df:45:a3:d7:39:a9:a4:b0:94:
         d1:24:f0:d8:63:77:7a:8e:db:f6:2c:ac:66:ff:f5:a5:7b:da:
         1f:b4:30:6c:11:41:79:e1:c7:7f:4d:fb:49:88:0d:50:c5:eb:
         ba:86:be:8c:38:51:5d:b4:7f:6b:60:70:9d:d1:05:a8:fb:81:
         41:eb:b6:93:7c:79:04:93:b5:1d:f2:05:e7:7c:13:1d:d5:b8:
         d8:47:ab:2b:69:c0:09:e3:0f:2f:2f:90:6e:1b:0b:0c:98:0c:
         d9:13:2c:d3:22:49:6c:6a:16:7b:12:3d:47:e0:b3:8a:d4:a4:
         a8:1e:4f:ad:58:ff:69:f4:12:60:fc:72:b9:30:4c:56:3d:98:
         c0:01:76:d9:a7:b7:9f:73:44:f4:2a:57:bd:e8:47:16:e8:ec:
         36:53:74:66:07:26:6a:d5:51:24:21:d2:96:5a:96:7c:a2:c6:
         44:d0:50:24:a3:32:42:11:74:ba:38:0a:96:1e:32:06:28:51:
         92:f1:f1:b0:b1:4b:1b:d9:3a:00:30:ac:68:d8:ea:b2:db:39:
         74:82:81:c4:7c:5e:82:ae:fe:7a:88:51:31:d9:29:53:95:ee:
         2d:14:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org