Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          rh9993FYyzhdHWIgfTGK1erLv02eYIP5Td35T13c5Bg=
Subject key identifier:   6B:0F:28:54:CA:65:62:09:DE:88:07:EA:B7:2D:9B:4C:A8:59:D3:0A
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       137F995D0025740018424CB8C8DC5E7125366D1E
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:49 +0000
ROA not before:           Thu 04 Apr 2024 07:15:49 +0000
ROA not after:            Thu 03 Apr 2025 07:20:49 +0000
asID:                     268678
IP address blocks:        45.165.151.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7f:99:5d:00:25:74:00:18:42:4c:b8:c8:dc:5e:71:25:36:6d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:49 2024 GMT
            Not After : Apr  3 07:20:49 2025 GMT
        Subject: CN=6B0F2854CA656209DE8807EAB72D9B4CA859D30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:37:18:f0:7d:9d:8a:98:dd:04:3d:fa:e8:
                    d9:76:a2:90:aa:a7:cb:c8:36:91:1b:61:37:a5:70:
                    94:e9:7f:b2:1e:18:00:e9:00:dc:6e:ad:77:80:14:
                    32:3c:42:ab:88:b9:34:fa:7e:e6:40:cb:38:14:71:
                    4e:bd:56:60:1b:e5:b6:2a:a6:5c:44:de:75:26:67:
                    89:49:18:b0:d5:63:d3:2c:cf:48:89:68:db:2d:e2:
                    70:b0:72:56:e5:d3:e8:56:2b:0a:02:ce:cd:cd:d8:
                    4e:de:ff:ee:7e:6a:c7:87:d8:59:5d:9b:6f:37:15:
                    5a:c1:d8:e2:f9:e6:f7:1b:4a:e5:93:89:2a:a1:86:
                    c4:dc:66:51:60:ba:bc:4c:a2:88:eb:fc:bc:d8:e1:
                    f0:99:7e:11:0d:e1:67:54:16:34:81:1c:1c:b8:4c:
                    22:26:42:80:c2:b2:f9:a2:c6:93:2e:a2:d6:89:24:
                    d0:e4:10:69:2e:47:4e:8b:fb:10:b5:44:67:f1:55:
                    b9:e5:5f:64:a4:75:ef:8c:1d:de:85:b9:61:20:11:
                    47:12:42:93:6e:32:48:65:04:ae:4a:24:7c:12:47:
                    39:85:83:b1:cd:0a:80:8b:ab:2d:14:8e:d6:30:ee:
                    1d:3e:ce:66:9d:6b:db:b2:68:3d:d1:b1:84:e9:cd:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0F:28:54:CA:65:62:09:DE:88:07:EA:B7:2D:9B:4C:A8:59:D3:0A
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3135312e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:38:e3:cd:a9:56:b8:25:04:ad:31:6a:d5:99:e8:53:cb:
         cb:30:44:54:f5:b6:ae:f6:c5:a1:4c:d8:64:4b:51:3b:2e:93:
         84:10:ec:65:14:d0:b9:5c:81:87:57:f0:0b:cc:23:da:9d:da:
         f1:5e:78:9c:ce:cd:1c:7b:3f:d1:13:d4:f6:e6:8e:8f:7b:58:
         65:8b:88:59:b5:86:33:05:3c:86:75:06:94:0b:bc:17:11:32:
         9e:33:11:43:5c:fa:bb:5d:8b:37:04:e7:63:a6:5b:38:53:a9:
         5d:b1:31:c9:a6:00:85:32:46:d5:10:25:68:5a:70:8a:14:48:
         54:c5:30:52:b3:eb:29:96:c3:ba:f7:1d:fd:66:70:87:32:2f:
         e4:38:6f:61:0b:e2:bc:03:19:a8:1d:6f:9e:60:d9:e2:4c:18:
         4a:ac:b6:39:56:72:f5:ee:39:54:05:af:46:01:16:d5:30:25:
         df:a5:de:df:94:8e:9f:0c:aa:94:3b:5e:c1:46:61:9e:65:de:
         99:39:cd:c1:cd:ba:3d:df:9f:4d:cd:46:9d:f9:5a:30:33:2d:
         d7:b9:19:73:cd:47:77:7c:67:a1:ce:dd:fa:50:c9:58:4c:58:
         77:cc:57:2e:4d:cf:1f:3e:ea:2d:4d:36:78:09:7c:9c:6b:37:
         f8:f6:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org