Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
File:                     34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa (raw, json)
Hash identifier:          5uhs+9xd7Ts1sXGL+wDC047w8+ZrlNvlfvyr34cbLys=
Subject key identifier:   0D:05:67:68:1C:11:54:81:13:4C:73:F5:16:51:9C:AA:1B:05:5E:55
Certificate issuer:       /CN=554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9
Certificate serial:       548ADED4B3D15D9C3EFB56220DD4058B769499DD
Authority key identifier: 55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa
Signing time:             Thu 04 Apr 2024 11:16:53 +0000
ROA not before:           Thu 04 Apr 2024 11:11:53 +0000
ROA not after:            Thu 03 Apr 2025 11:16:53 +0000
asID:                     268289
IP address blocks:        45.237.200.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8a:de:d4:b3:d1:5d:9c:3e:fb:56:22:0d:d4:05:8b:76:94:99:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9
        Validity
            Not Before: Apr  4 11:11:53 2024 GMT
            Not After : Apr  3 11:16:53 2025 GMT
        Subject: CN=0D0567681C115481134C73F516519CAA1B055E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:79:f7:79:e6:0c:e1:a7:57:d4:c8:4a:28:
                    f3:c1:ae:52:2d:c0:cf:73:ea:8f:bb:4f:90:c8:51:
                    e0:34:d3:da:0e:08:7f:6d:0e:f7:c2:58:b5:ca:f5:
                    45:0b:5f:f6:a5:d2:04:41:0c:1d:eb:5d:2a:31:01:
                    9b:bc:99:08:f9:9e:bd:4d:01:e4:0e:57:43:ea:31:
                    b0:3a:90:94:a2:67:58:e6:b9:dc:5e:15:fa:e3:7d:
                    98:b0:2b:15:76:51:ba:18:ed:f1:56:23:92:8b:28:
                    ab:2a:bd:a7:58:4c:3a:dd:d3:f3:40:70:fb:1d:f6:
                    86:9f:8e:43:f9:44:3e:16:09:a4:95:b8:41:81:df:
                    40:4e:3e:25:de:f0:fe:f0:fa:a7:56:9d:b6:77:c7:
                    cb:73:f1:7b:e4:d2:c2:fb:a2:18:78:6b:0e:d1:f5:
                    bb:31:4b:71:99:d7:9e:df:a5:19:33:80:40:b9:2f:
                    ed:c7:04:06:f3:86:18:0d:46:66:e3:c4:61:89:58:
                    fe:b0:52:9f:c2:19:86:39:cf:7a:ee:b5:e5:9f:c9:
                    e4:8c:16:fe:23:fa:41:46:7c:74:2e:3f:c6:38:e8:
                    45:3d:2e:1d:2d:03:1b:f6:43:e8:d4:c3:0d:04:44:
                    f4:c0:c8:be:c6:d2:63:cc:4a:1f:c7:df:5f:86:8b:
                    66:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:67:68:1C:11:54:81:13:4C:73:F5:16:51:9C:AA:1B:05:5E:55
            X509v3 Authority Key Identifier:
                keyid:55:4C:9B:7D:E7:6D:DB:DE:12:B5:80:B0:F0:7E:00:1D:7B:2B:57:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/554C9B7DE76DDBDE12B580B0F07E001D7B2B57A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/1/34352e3233372e3230302e302f32322d3234203d3e20323638323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:69:61:62:02:ba:a8:be:a3:e7:4b:0c:08:4b:31:0c:34:
         48:c6:ed:f8:a4:ae:85:fa:6e:86:18:9c:7c:f7:d3:fb:18:ec:
         92:dc:3d:7b:08:e4:02:e4:14:25:44:db:78:3b:10:c7:a7:3b:
         07:88:5f:c2:41:89:d0:9f:a4:6a:b7:a5:1d:fe:ef:79:9a:a0:
         53:dc:9a:4c:85:88:35:81:eb:4d:af:a7:cd:61:5a:9d:8e:8b:
         da:bf:18:f1:20:5d:ae:6d:9a:9d:9c:3e:2f:87:ac:a9:6d:14:
         66:54:88:94:26:4d:1f:05:07:d8:49:c0:b3:1a:83:73:fd:6c:
         a7:16:7f:cb:13:68:8f:3c:dd:df:a7:2a:32:9d:d5:9e:14:24:
         53:86:43:d6:fd:02:c4:a5:71:02:81:17:f1:0e:8d:ea:3a:16:
         25:ce:98:7e:d3:12:0f:64:8d:2f:98:68:14:99:7d:3c:c9:a6:
         7d:40:11:93:8d:50:31:c7:ce:ef:e0:2b:9f:59:38:4f:ff:a9:
         06:9a:1e:87:0e:90:1d:e4:d6:89:80:7d:75:55:81:92:f4:0a:
         eb:79:cb:1a:23:80:30:18:61:dd:1b:4e:cc:ec:e3:a0:ed:66:
         a9:80:4f:92:1a:c5:e3:7e:81:b4:ff:1c:b7:82:2f:b6:fa:1a:
         76:a5:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:18:16 2024 by rpki-client on console-fra.rpki-client.org