Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/34352e3233312e31322e302f32322d3332203d3e20323637313830.roa
File:                     34352e3233312e31322e302f32322d3332203d3e20323637313830.roa (raw, json)
Hash identifier:          KH86QfHJzTQaqLH6V2ln2+2nspCwWJFH+A4ZEqZACi4=
Subject key identifier:   A9:CB:9C:2A:C9:D8:6F:96:FF:36:4A:32:D1:9A:D3:D9:E0:59:3A:70
Certificate issuer:       /CN=5561D2DB99D9149F730A58FD1CAE05445752A65C
Certificate serial:       7F645FD51CC94717762510D47960263C1CFA26B7
Authority key identifier: 55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561D2DB99D9149F730A58FD1CAE05445752A65C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/34352e3233312e31322e302f32322d3332203d3e20323637313830.roa
Signing time:             Sat 13 Jul 2024 16:29:28 +0000
ROA not before:           Sat 13 Jul 2024 16:24:28 +0000
ROA not after:            Sat 12 Jul 2025 16:29:28 +0000
asID:                     267180
IP address blocks:        45.231.12.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:64:5f:d5:1c:c9:47:17:76:25:10:d4:79:60:26:3c:1c:fa:26:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5561D2DB99D9149F730A58FD1CAE05445752A65C
        Validity
            Not Before: Jul 13 16:24:28 2024 GMT
            Not After : Jul 12 16:29:28 2025 GMT
        Subject: CN=A9CB9C2AC9D86F96FF364A32D19AD3D9E0593A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:39:2e:38:a1:a5:14:df:05:13:ec:a8:b2:
                    d4:19:9c:a9:bd:b9:d5:24:e5:32:7c:3b:ee:94:47:
                    56:41:e3:62:5b:1f:43:5e:cb:c7:0f:ec:47:bd:ec:
                    01:cf:8b:8b:3e:89:85:19:cd:34:e1:cb:cf:b2:8b:
                    0d:48:88:a0:de:05:d6:d1:85:bb:a1:16:8d:d7:a4:
                    15:4f:69:2d:30:50:94:cf:ca:57:07:78:a3:64:e4:
                    3b:23:ec:8c:6c:22:42:1f:2c:cf:93:1c:c3:a6:99:
                    b7:52:ca:eb:09:9e:b4:b4:ee:a1:33:30:4f:0a:97:
                    e9:8d:8b:b7:b1:5a:d8:12:a5:0e:66:6f:0e:45:2d:
                    3b:6e:a2:81:a3:ce:bf:65:a0:2e:2d:02:57:3f:7c:
                    f7:6f:a4:74:74:d4:b0:37:53:78:a3:5f:70:c6:c8:
                    b5:d0:c3:bf:08:50:3d:8e:79:e1:c1:9c:5f:93:dc:
                    e7:0f:e6:a0:63:63:a8:4a:60:81:5e:e2:03:8e:ea:
                    c6:7f:92:bf:53:d1:90:ea:2e:5b:d9:23:24:9b:8b:
                    25:2c:67:bc:9c:bb:e0:ef:c5:6e:ac:d5:bd:99:4f:
                    6f:70:a4:4e:5c:43:0d:16:15:81:cd:df:01:3f:8d:
                    67:98:00:2a:d0:7f:0a:50:a8:42:92:b5:a4:bf:af:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:9C:2A:C9:D8:6F:96:FF:36:4A:32:D1:9A:D3:D9:E0:59:3A:70
            X509v3 Authority Key Identifier:
                keyid:55:61:D2:DB:99:D9:14:9F:73:0A:58:FD:1C:AE:05:44:57:52:A6:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/5561D2DB99D9149F730A58FD1CAE05445752A65C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5561D2DB99D9149F730A58FD1CAE05445752A65C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5s5Xy65Xr6cXcaJg8WRsbL3PAzWEx3Ph9mKfN4MrB1oa/0/34352e3233312e31322e302f32322d3332203d3e20323637313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:b1:6e:d4:b0:c9:ed:75:c6:c5:6f:6b:b6:6f:50:2c:09:fd:
         14:80:ab:e4:e3:db:fc:4e:31:0c:d7:fe:98:e6:fe:e1:af:d6:
         48:d6:60:29:b1:e9:fd:f6:69:55:3f:37:58:f5:5f:7b:24:30:
         04:0a:56:a8:18:13:32:b0:16:35:d6:59:5b:76:aa:70:8e:64:
         dd:f0:eb:e6:e6:86:52:40:cb:39:41:89:c0:1f:f7:6f:b5:83:
         b9:07:ab:36:88:16:bd:e2:15:12:7c:a8:b8:0b:6f:fb:b8:97:
         92:0e:51:3b:88:e5:a3:da:04:ef:14:03:8b:3b:ea:4d:12:45:
         f5:2c:e3:81:87:11:bd:06:12:1e:c5:1c:d2:ed:35:08:a0:ae:
         0c:68:42:27:77:a2:ff:5d:74:5d:a5:ca:2b:d0:97:f5:d3:67:
         f2:a4:4e:2a:3c:6d:10:de:b3:fd:b5:dd:f9:bb:75:4f:d3:95:
         3e:c6:a0:0f:9c:84:6c:dc:66:aa:af:06:f9:f5:89:e6:01:ed:
         5e:6f:ea:72:36:97:71:0a:56:1e:fd:94:55:aa:66:51:80:a6:
         c2:30:bc:5d:8c:66:6f:40:5b:dd:ac:7b:c8:cf:ca:40:e9:c9:
         d5:2e:43:2f:b0:a0:2d:3f:8e:2c:d1:ac:7a:f5:d1:46:54:80:
         5b:25:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 12:58:27 2024 by rpki-client on console-ams.rpki-client.org