Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32332d3233203d3e20323638363733.roa
File:                     34352e3136352e3130342e302f32332d3233203d3e20323638363733.roa (raw, json)
Hash identifier:          hEwTRxy8a79okFDV6Md2/A7Av+AcWnLiP1Frdao+2h8=
Subject key identifier:   52:B2:3E:38:F3:B1:1C:54:05:7B:6E:96:23:8A:4E:7C:E7:91:8E:4E
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       0DA834A3B48AEA02CCE7502DCE895F2F849E52AC
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32332d3233203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:11 +0000
ROA not before:           Wed 03 Apr 2024 23:18:11 +0000
ROA not after:            Wed 02 Apr 2025 23:23:11 +0000
asID:                     268673
IP address blocks:        45.165.104.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a8:34:a3:b4:8a:ea:02:cc:e7:50:2d:ce:89:5f:2f:84:9e:52:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:11 2024 GMT
            Not After : Apr  2 23:23:11 2025 GMT
        Subject: CN=52B23E38F3B11C54057B6E96238A4E7CE7918E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:71:56:0b:90:53:5a:83:71:95:97:29:35:
                    56:04:b2:e5:ea:32:dd:28:0b:ba:7d:62:36:86:a7:
                    1d:6c:7f:78:c0:0d:f9:38:52:bd:6b:48:12:b3:ac:
                    8c:23:a6:ce:93:75:76:5d:7f:c7:cd:04:cc:99:98:
                    6a:ff:42:a9:f2:35:73:95:1a:71:39:f2:5b:fc:ea:
                    cc:b9:ba:37:d9:c3:f0:91:d5:48:5e:42:49:d2:5e:
                    c0:e4:05:c1:3d:a1:fb:0b:39:71:e4:1e:7c:5f:91:
                    4e:9e:70:53:f1:4e:be:98:3b:ed:02:e3:28:59:e1:
                    07:0b:ad:c9:62:c2:aa:70:69:47:ed:92:96:24:a3:
                    e9:08:88:b7:cd:27:1c:10:7a:5f:ef:1d:b8:6e:cb:
                    17:b1:dd:60:80:17:66:8b:0c:62:e4:03:c3:85:4a:
                    e4:1e:99:a1:fa:e6:9f:f6:ff:bf:23:64:32:d5:0e:
                    66:75:94:a7:b7:8f:ae:11:a3:4e:8a:5a:c8:99:d4:
                    90:17:c9:ba:86:f7:b4:14:d1:e5:19:5a:ea:da:e9:
                    32:31:bd:4b:06:b0:fe:c6:84:f8:23:72:7e:10:12:
                    be:1f:9b:cd:bf:cb:ed:3a:b1:f4:76:d9:f2:8f:03:
                    db:00:82:85:66:9c:c7:b2:af:a8:37:c3:b8:f6:14:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B2:3E:38:F3:B1:1C:54:05:7B:6E:96:23:8A:4E:7C:E7:91:8E:4E
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32332d3233203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:31:aa:03:c1:4c:88:a4:8d:68:dd:cf:a4:33:df:57:0b:39:
         6e:0f:1d:cd:55:f8:54:d0:42:30:85:21:4b:00:ec:4f:88:01:
         bf:c0:13:31:4c:64:4c:d7:26:09:ed:f7:86:c6:02:9e:a9:46:
         8b:a9:76:a0:7a:32:72:73:23:6b:e5:ea:bf:7e:6b:0d:5a:3b:
         ca:85:8c:6f:d6:92:e9:1d:ae:09:8a:b0:46:bb:c5:7c:85:5a:
         6d:30:84:59:fa:61:61:fd:5f:a2:b5:71:e4:34:f4:70:00:cc:
         3e:f5:e4:f7:0c:f7:02:5e:8f:34:6c:19:b0:4d:37:84:e5:9e:
         f4:36:53:a3:cf:ce:f8:38:10:3f:c1:10:09:53:f1:f5:f2:f8:
         96:2f:68:6b:1e:2e:e1:60:b9:25:93:4d:40:0d:1b:15:cb:b5:
         38:89:3f:6a:01:7f:eb:85:dc:7b:17:5d:99:dc:2a:40:55:18:
         c3:89:ba:89:95:e0:70:94:b1:01:20:89:91:35:fd:a1:ac:6c:
         de:33:9b:17:65:fc:8b:79:be:7c:d6:24:57:41:10:f0:9f:fb:
         92:8d:b5:82:16:87:6c:45:03:01:a3:0f:a9:54:62:5f:c8:bc:
         72:a8:c3:08:ee:69:48:d3:d0:a3:e9:1d:c9:19:88:7c:b1:12:
         65:48:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org