Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa
File:                     34352e3138382e31332e302f32342d3234203d3e20323639353637.roa (raw, json)
Hash identifier:          5gNrfi+Zffu6a/zUuUTsX5tHkJOnVguVr8Gt6oqe/Kc=
Subject key identifier:   E6:75:85:FE:1D:D1:8A:B6:A7:49:EB:02:A0:9A:B3:82:3F:DC:42:09
Certificate issuer:       /CN=BD19803DF8A7181DA82A6B073FC90304116C06E1
Certificate serial:       130A1E72FAC37076F6A1A4C8A2D8D872DBFBC198
Authority key identifier: BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD19803DF8A7181DA82A6B073FC90304116C06E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa
Signing time:             Wed 16 Oct 2024 16:07:42 +0000
ROA not before:           Wed 16 Oct 2024 16:02:42 +0000
ROA not after:            Wed 15 Oct 2025 16:07:42 +0000
asID:                     269567
IP address blocks:        45.188.13.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:0a:1e:72:fa:c3:70:76:f6:a1:a4:c8:a2:d8:d8:72:db:fb:c1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD19803DF8A7181DA82A6B073FC90304116C06E1
        Validity
            Not Before: Oct 16 16:02:42 2024 GMT
            Not After : Oct 15 16:07:42 2025 GMT
        Subject: CN=E67585FE1DD18AB6A749EB02A09AB3823FDC4209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:76:0b:4d:56:d2:17:9c:77:c6:61:10:06:
                    07:65:08:1a:3c:58:f4:d8:ba:4c:46:e0:d5:25:30:
                    47:53:d3:60:67:bf:ab:a3:7d:d6:08:09:88:f8:01:
                    35:4f:dc:cd:f5:19:dd:c9:c9:4d:ed:bd:d2:b2:da:
                    b0:8d:8f:55:1b:a0:be:fb:78:46:ef:cd:6e:ef:d4:
                    af:59:44:47:f2:92:3c:b7:c6:bb:6c:ab:3d:6d:35:
                    ce:91:4c:fb:81:b2:05:f3:80:f6:b2:10:e1:ac:31:
                    59:d0:d7:8c:fb:b7:28:a8:c6:e7:79:30:e5:c0:0d:
                    e7:ed:fe:7e:35:a2:96:7d:b6:a5:de:5d:85:3e:2c:
                    e7:d4:8b:fb:2b:b0:52:3a:e0:1a:4b:b8:b4:51:67:
                    3d:90:2c:4c:fc:87:1c:b1:7d:82:ff:d6:f1:77:8a:
                    24:30:92:1b:cd:28:11:95:54:91:6c:1c:7c:96:d2:
                    3b:1c:b2:5a:cb:bc:fc:9f:c0:e3:e7:d6:de:f6:89:
                    8f:05:29:07:c5:04:23:99:8f:01:0b:ce:4d:f1:1f:
                    eb:87:b0:1c:9f:71:d6:5e:16:75:b8:92:9e:10:be:
                    ea:06:e4:8c:87:94:b4:10:e8:bb:28:58:71:20:d4:
                    9f:68:dd:76:55:a4:98:19:cf:35:c4:f5:a6:8d:ef:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:85:FE:1D:D1:8A:B6:A7:49:EB:02:A0:9A:B3:82:3F:DC:42:09
            X509v3 Authority Key Identifier:
                keyid:BD:19:80:3D:F8:A7:18:1D:A8:2A:6B:07:3F:C9:03:04:11:6C:06:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/BD19803DF8A7181DA82A6B073FC90304116C06E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD19803DF8A7181DA82A6B073FC90304116C06E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31332e302f32342d3234203d3e20323639353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:72:91:bb:b9:0f:d7:84:5b:32:44:38:e4:aa:b6:0b:5d:20:
         34:e4:05:b6:70:83:69:75:d1:02:0e:4a:04:a6:95:7a:ad:ea:
         69:2a:8b:8b:26:b6:6b:2a:d5:79:c6:46:5d:11:ba:31:87:a4:
         e9:25:1f:60:94:85:1e:e5:30:9c:45:fd:78:81:fe:dd:6f:6d:
         22:89:dc:9b:f5:6c:21:19:42:27:8e:c0:fc:ab:76:df:c1:26:
         5d:fc:4a:74:67:cf:7a:bb:05:7f:66:93:85:8e:5b:a1:30:d0:
         85:9f:1c:19:dd:c3:82:f9:c7:08:41:44:51:61:de:19:72:d3:
         08:75:25:a6:a2:1a:35:71:83:fc:aa:cd:14:d3:06:6a:b1:a8:
         86:98:02:fc:81:db:6d:67:84:5b:b5:bc:a0:94:78:12:e5:04:
         15:53:48:01:f1:7a:bf:b8:03:0a:de:bc:6b:4d:05:ae:3c:b6:
         f0:84:c1:f8:fa:6e:c1:53:e3:d4:54:87:95:89:60:3e:b5:d4:
         10:af:b8:bb:9f:27:f9:bb:0f:6f:9a:44:b6:35:3d:1b:c3:ab:
         c3:70:fe:ba:79:5b:c8:b3:96:10:bd:46:3e:0f:95:d9:01:f4:
         ee:b0:a2:8b:6a:7c:cf:a6:3b:49:69:1b:21:25:1b:46:62:0d:
         6d:65:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:09:35 2024 by rpki-client on console-fra.rpki-client.org