Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32322d3232203d3e20323639353637.roa
File:                     34352e3138382e31322e302f32322d3232203d3e20323639353637.roa (raw, json)
Hash identifier:          gmb1ps3JtDEEdQ+bh/QuA8aRMRhonUw8Gqx1OUK1/wc=
Subject key identifier:   3E:F2:8B:93:30:7E:8F:05:36:89:4A:7C:8A:46:99:EF:45:A3:BB:BA
Certificate issuer:       /CN=BD19803DF8A7181DA82A6B073FC90304116C06E1
Certificate serial:       10B96E59047B70E3B97BD582933EEC32F1C2BE66
Authority key identifier: BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD19803DF8A7181DA82A6B073FC90304116C06E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32322d3232203d3e20323639353637.roa
Signing time:             Wed 16 Oct 2024 16:07:36 +0000
ROA not before:           Wed 16 Oct 2024 16:02:36 +0000
ROA not after:            Wed 15 Oct 2025 16:07:36 +0000
asID:                     269567
IP address blocks:        45.188.12.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b9:6e:59:04:7b:70:e3:b9:7b:d5:82:93:3e:ec:32:f1:c2:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD19803DF8A7181DA82A6B073FC90304116C06E1
        Validity
            Not Before: Oct 16 16:02:36 2024 GMT
            Not After : Oct 15 16:07:36 2025 GMT
        Subject: CN=3EF28B93307E8F0536894A7C8A4699EF45A3BBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:34:f6:c0:f4:c9:4c:9c:f0:af:eb:eb:cb:
                    a2:49:3e:da:b4:b3:08:74:c6:59:e9:be:d4:56:db:
                    13:17:37:10:d0:82:af:86:bf:8e:52:14:c6:42:1a:
                    16:b2:9a:1b:0c:9d:57:c0:7a:eb:17:0b:5d:ac:38:
                    ba:99:93:d0:07:a7:0c:94:6f:2d:e3:86:1f:a3:2f:
                    59:ad:67:c9:2e:09:03:95:c4:a3:62:2a:14:0a:c5:
                    de:c3:4b:48:9c:b3:fa:04:89:a4:a8:75:35:a8:31:
                    11:e7:09:26:04:80:f4:16:a9:5b:3e:a2:78:de:01:
                    e1:2b:d1:83:aa:8b:44:ad:8a:f8:c2:45:b2:24:ab:
                    c1:75:6d:f7:76:f9:6e:a9:c5:73:77:2e:09:a7:28:
                    66:43:b3:8e:c3:82:d8:a2:c1:7d:df:c5:26:cb:20:
                    38:ae:0d:88:93:af:1b:a5:38:76:6e:91:f5:2a:3a:
                    7a:a4:2a:60:a3:ba:06:c4:e2:37:72:90:32:c3:6b:
                    fb:50:aa:33:78:0b:20:4f:48:56:78:89:a6:d9:58:
                    0c:d0:6a:f6:64:04:00:57:0d:35:ae:41:2d:d8:d5:
                    ba:39:54:ab:9b:3c:90:02:67:6d:42:37:49:ad:b6:
                    e9:a7:0b:e0:75:65:e4:12:47:bc:2a:7b:73:6a:29:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F2:8B:93:30:7E:8F:05:36:89:4A:7C:8A:46:99:EF:45:A3:BB:BA
            X509v3 Authority Key Identifier:
                keyid:BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/BD19803DF8A7181DA82A6B073FC90304116C06E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD19803DF8A7181DA82A6B073FC90304116C06E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32322d3232203d3e20323639353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:0f:4d:66:42:31:55:e7:85:c3:ff:8c:43:c7:f0:6c:ac:
         55:a1:f6:64:a4:2a:06:e7:b3:23:d8:95:5e:83:17:90:52:54:
         fc:32:56:f4:e0:ff:38:42:2d:c7:7f:fe:cd:c2:8b:30:75:39:
         59:d5:6c:85:02:b7:4d:fe:53:c8:69:3d:79:08:c0:58:45:58:
         28:68:34:ed:b8:2c:b8:e4:39:73:b0:55:61:f3:13:1f:cf:66:
         a5:72:32:71:42:fe:0b:37:e4:a6:46:d6:1f:14:ec:f5:7a:f1:
         3a:50:87:b1:7b:de:03:41:2b:14:5e:cd:3b:cf:13:90:27:9e:
         62:1c:2b:79:eb:d7:e0:a6:66:b6:ad:09:c9:6f:31:e2:19:5c:
         e1:b1:75:60:6f:62:19:40:a0:2a:d0:93:ec:ea:25:32:71:06:
         ca:07:8d:59:79:46:87:9e:90:c4:a1:eb:dc:ce:4d:2c:cc:bb:
         f1:ad:2c:57:e9:0e:73:6b:ad:09:a4:22:fe:b6:5a:bf:ad:9b:
         fa:cb:ba:7e:55:8c:a1:b5:99:7b:3c:02:a9:f6:ac:8a:a1:9b:
         04:74:e5:86:6e:14:ea:00:c3:22:cb:48:73:59:1e:09:ad:73:
         7a:ac:99:83:57:a3:16:39:ab:29:df:53:fb:30:50:d4:bd:d5:
         2e:1e:47:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:09:35 2024 by rpki-client on console-fra.rpki-client.org