Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130352e302f32342d3234203d3e20323638363733.roa
File:                     34352e3136352e3130352e302f32342d3234203d3e20323638363733.roa (raw, json)
Hash identifier:          B8PS5X2QSeuvyLKnp1DI9AX+BrsQ/4V2HevM/sAAFzA=
Subject key identifier:   9B:3B:11:35:6D:C3:7F:7D:B7:08:2E:DC:C2:23:AF:16:D4:F2:27:94
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       3EB633BA51E98F84485CB68DB6E9C94733D3C1CE
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130352e302f32342d3234203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:11 +0000
ROA not before:           Wed 03 Apr 2024 23:18:11 +0000
ROA not after:            Wed 02 Apr 2025 23:23:11 +0000
asID:                     268673
IP address blocks:        45.165.105.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b6:33:ba:51:e9:8f:84:48:5c:b6:8d:b6:e9:c9:47:33:d3:c1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:11 2024 GMT
            Not After : Apr  2 23:23:11 2025 GMT
        Subject: CN=9B3B11356DC37F7DB7082EDCC223AF16D4F22794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:78:31:6d:cb:d3:b8:e9:b3:ea:c5:a2:2e:
                    a6:bb:21:94:f3:b1:17:52:48:2d:e8:08:ac:33:06:
                    a8:60:64:e0:44:f5:ad:82:ab:60:63:91:ae:37:bd:
                    2d:1b:31:e6:dc:9b:1e:23:8e:3d:b6:c4:29:a2:e8:
                    d9:70:22:93:15:d4:3c:aa:02:0c:37:d6:18:10:d1:
                    8f:12:32:e2:6c:7d:78:bf:94:98:23:89:e6:ae:c9:
                    a5:5f:27:77:dc:22:c0:88:a9:13:66:f7:97:63:21:
                    5b:17:79:b6:aa:91:5c:3d:e3:8f:9e:a9:42:65:bd:
                    2e:58:42:e2:99:07:f3:b8:e1:58:43:9a:33:c5:55:
                    c9:12:21:45:18:4f:e5:50:c7:62:a0:75:0a:e0:eb:
                    5b:8c:fc:90:fc:ee:63:31:af:5f:ca:91:3f:62:3c:
                    f1:9b:fc:4d:a5:50:86:cb:92:7e:da:6e:10:f9:ba:
                    b1:7f:8b:c3:ad:b3:9d:af:43:87:48:f5:47:af:c0:
                    ec:4e:be:8a:f9:bc:c5:bd:fc:37:2a:e7:83:77:ae:
                    ae:fc:c2:cf:e1:13:4e:e3:35:26:fb:f7:67:53:b5:
                    3f:53:9e:bf:7e:9e:77:b6:76:5f:f3:c6:5d:1a:57:
                    82:75:4c:4b:4a:78:5f:be:3d:78:76:a1:09:c4:64:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3B:11:35:6D:C3:7F:7D:B7:08:2E:DC:C2:23:AF:16:D4:F2:27:94
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130352e302f32342d3234203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:75:9e:93:55:ee:84:42:d0:d9:c8:41:1f:57:aa:12:a3:ea:
         ed:9f:48:82:3b:a5:e5:59:8a:f2:75:67:b7:d4:83:8c:b0:4d:
         b6:a9:50:a1:4e:5f:d0:da:43:de:70:85:d9:d1:e9:0e:d4:dd:
         c8:90:d1:2d:3b:56:0e:f0:c6:3c:82:66:97:38:93:6d:53:d8:
         e3:34:8e:ce:75:06:00:62:8d:5c:76:79:bf:28:6d:29:fe:ee:
         37:a5:80:4a:c0:92:6b:7b:4e:90:a3:6f:41:6d:08:f9:95:d1:
         29:88:8c:91:af:49:de:90:ac:ce:10:f1:18:ff:1d:43:b1:c5:
         71:3b:0b:b8:1c:ea:4b:c5:27:b7:77:56:25:cf:6f:23:e1:8e:
         f2:d5:c7:af:10:14:a7:c8:40:46:ea:c1:26:0d:97:0a:f9:22:
         4e:58:52:dc:df:53:9c:4b:5a:fa:08:dc:79:bc:16:3e:6d:3e:
         ee:04:d8:50:36:08:05:f9:93:af:e9:09:34:e2:ee:3b:40:c4:
         d3:9b:00:96:87:19:68:12:d9:6d:48:27:f4:0c:80:b7:da:aa:
         0b:40:87:b2:62:c3:2c:b8:3a:45:82:3a:22:f2:8c:29:c5:33:
         6b:5b:16:64:52:4d:e7:9e:81:69:e8:9c:c1:ad:53:70:48:3a:
         d5:d0:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org