Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132352e302f32342d3234203d3e20323638343038.roa
File:                     34352e3136302e3132352e302f32342d3234203d3e20323638343038.roa (raw, json)
Hash identifier:          Z+mO51N1jonCZ6Ob04r4anAHViUeSm1jrEMEPDkVuZc=
Subject key identifier:   49:B4:D6:F3:CF:C0:49:61:B5:F4:13:45:86:0C:B1:FE:9E:93:56:79
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       37CC0FF83C1004F281F4F6E0FA92C5BBE2679568
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132352e302f32342d3234203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:17 +0000
ROA not before:           Thu 04 Apr 2024 22:37:17 +0000
ROA not after:            Thu 03 Apr 2025 22:42:17 +0000
asID:                     268408
IP address blocks:        45.160.125.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cc:0f:f8:3c:10:04:f2:81:f4:f6:e0:fa:92:c5:bb:e2:67:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:17 2024 GMT
            Not After : Apr  3 22:42:17 2025 GMT
        Subject: CN=49B4D6F3CFC04961B5F41345860CB1FE9E935679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:28:52:c0:9e:35:0b:67:a4:be:8d:ac:4c:
                    d4:1f:44:7d:5b:7c:31:88:15:c1:60:51:e3:81:72:
                    86:70:23:66:c4:51:ef:37:95:cf:86:90:8f:8c:d7:
                    37:2a:7e:21:ed:31:13:d7:c1:74:b4:2d:c6:52:b4:
                    7b:30:25:0b:ac:2a:e8:c6:22:18:25:e7:38:4c:43:
                    ba:82:0b:02:7b:c9:69:8f:96:33:33:a9:e6:f4:0a:
                    a5:47:d4:4d:81:a3:1f:b9:86:b8:53:58:8c:e5:bd:
                    83:d0:3d:0a:24:32:68:96:39:2f:40:bd:a8:7b:95:
                    aa:26:e1:2f:95:b6:d3:ca:e4:f7:70:6f:e9:8d:ed:
                    4c:ad:6e:5a:66:c8:5a:95:f9:92:d7:ac:07:57:f3:
                    0b:a1:f6:d2:a7:b8:df:3d:7f:a1:13:ac:6a:49:1a:
                    88:55:7a:17:bc:03:a4:dc:26:70:02:15:e1:2e:6c:
                    c8:27:d1:76:3c:eb:03:7c:e7:79:ab:82:ce:1e:97:
                    d1:40:ae:3d:8e:01:49:90:64:d8:45:e5:cd:0d:bb:
                    66:ec:67:ba:18:56:0a:67:69:3e:7a:d1:16:e2:e8:
                    73:af:d8:bf:6e:d5:ef:43:34:d9:23:3a:7c:f5:3b:
                    4a:bc:6a:41:42:4c:61:79:a9:ae:eb:63:f7:77:9f:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B4:D6:F3:CF:C0:49:61:B5:F4:13:45:86:0C:B1:FE:9E:93:56:79
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132352e302f32342d3234203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:50:6e:c7:17:5d:b7:89:ef:2b:fb:16:1a:cc:37:41:a0:04:
         c9:a2:0f:ab:a1:fa:0c:9f:ae:7d:a9:19:71:38:18:1c:bd:b0:
         4a:c2:0a:c1:a1:b6:ac:f9:c5:ed:7c:9b:24:9c:69:ee:c7:bf:
         a8:5c:a5:f8:b0:6e:0c:9a:35:5d:86:7b:48:a6:75:ff:da:e3:
         b6:1e:d1:b7:81:d1:e9:9b:ae:04:90:c5:e1:48:7b:46:76:09:
         b1:b6:31:59:75:93:c0:ca:be:16:6e:49:c1:74:c0:69:69:81:
         fe:26:7b:0f:98:bd:3f:aa:b5:90:62:5b:77:17:51:f2:ce:14:
         0d:e7:32:53:e6:78:e3:6a:01:55:15:b4:a3:af:a9:61:12:87:
         46:75:d5:0f:7e:c3:d3:72:c0:b4:34:ae:38:e7:18:2c:67:c2:
         d5:3f:4c:78:12:1e:80:8b:47:1b:cc:d2:b7:3d:01:e2:d1:58:
         66:e0:54:20:2c:bf:fc:40:f3:88:08:33:87:a2:ed:d4:24:4a:
         01:63:5e:e4:48:36:ac:be:00:7b:7f:bb:8a:a7:54:87:ab:15:
         0d:9a:c2:52:74:af:81:7b:9c:7a:58:4b:a0:d2:91:29:e5:85:
         00:3f:d5:dc:1b:c2:8d:fa:6d:3c:18:f0:07:64:3d:d0:d0:12:
         27:77:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:39 2024 by rpki-client on console-fra.rpki-client.org