Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa (raw, json)
Hash identifier:          yg28bec1w1M3TUuYizEk2GEDS53GRtixX+tLd9xHZME=
Subject key identifier:   56:CE:56:FB:1B:A7:B2:14:8D:7B:BD:E7:3A:99:05:6E:22:17:1E:B3
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       1DD81747F59B2480921D36245DE29E2BD227C863
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        45.227.168.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d8:17:47:f5:9b:24:80:92:1d:36:24:5d:e2:9e:2b:d2:27:c8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject: CN=3082010A0282010100C18D9CEB62C72A90788119E3EFD8F744A2629CBA4A2D797499798276A229302AACD12632AC58F5F678FCCE357CCF08453FDB34BB76F1F66B12DAED2264A49CE64227C945D03A67F2928E04980AAE6433199FDDB3CC7AFB093BAFA1DE63695423A3BB070278364D68302B2E255A868C824A6F322F56F5FA4726D40CE3B90E98C2359774D7D05A02A27A433CC52543A89BD4D21E0E10B805E60BD7281A64D5B603284435E7EB0411300B408E65A4571C14BDDD129F98D6510E89B1B24794EDBC79FD3BBE24B0A8F077169743CC5746403C5AF8C88E7B823924F8A93662B33ACFA7C37D4AE8C4C21BDD5DB244E728765412D392992510FA7B3629AA19CCD295ADAF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:9c:eb:62:c7:2a:90:78:81:19:e3:ef:d8:
                    f7:44:a2:62:9c:ba:4a:2d:79:74:99:79:82:76:a2:
                    29:30:2a:ac:d1:26:32:ac:58:f5:f6:78:fc:ce:35:
                    7c:cf:08:45:3f:db:34:bb:76:f1:f6:6b:12:da:ed:
                    22:64:a4:9c:e6:42:27:c9:45:d0:3a:67:f2:92:8e:
                    04:98:0a:ae:64:33:19:9f:dd:b3:cc:7a:fb:09:3b:
                    af:a1:de:63:69:54:23:a3:bb:07:02:78:36:4d:68:
                    30:2b:2e:25:5a:86:8c:82:4a:6f:32:2f:56:f5:fa:
                    47:26:d4:0c:e3:b9:0e:98:c2:35:97:74:d7:d0:5a:
                    02:a2:7a:43:3c:c5:25:43:a8:9b:d4:d2:1e:0e:10:
                    b8:05:e6:0b:d7:28:1a:64:d5:b6:03:28:44:35:e7:
                    eb:04:11:30:0b:40:8e:65:a4:57:1c:14:bd:dd:12:
                    9f:98:d6:51:0e:89:b1:b2:47:94:ed:bc:79:fd:3b:
                    be:24:b0:a8:f0:77:16:97:43:cc:57:46:40:3c:5a:
                    f8:c8:8e:7b:82:39:24:f8:a9:36:62:b3:3a:cf:a7:
                    c3:7d:4a:e8:c4:c2:1b:dd:5d:b2:44:e7:28:76:54:
                    12:d3:92:99:25:10:fa:7b:36:29:aa:19:cc:d2:95:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:56:FB:1B:A7:B2:14:8D:7B:BD:E7:3A:99:05:6E:22:17:1E:B3
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:94:45:a7:f0:eb:3a:5f:c1:f4:76:08:27:20:81:b0:b5:13:
         96:4c:1d:43:73:4f:ad:90:f8:14:cc:42:d8:6a:6d:9f:4a:d2:
         76:bf:de:9a:3e:3e:3b:98:b3:3e:7f:4b:55:58:85:1f:96:50:
         83:20:f0:de:1e:12:22:cc:e1:31:27:fd:d2:8a:12:36:03:f3:
         90:21:b3:07:98:fc:0e:9e:10:46:d0:b8:b3:b2:4e:1a:3c:ec:
         4d:aa:37:bb:af:d0:97:7d:bd:ce:ef:25:33:17:d0:a0:40:2b:
         27:d7:2c:94:a5:81:37:11:ad:20:c3:33:a7:08:3d:28:7a:01:
         5e:1f:4b:ee:98:f4:25:88:8d:a8:e0:17:75:7d:c2:2f:fc:b2:
         26:b3:eb:29:4e:8f:d2:70:55:7e:f5:ec:5d:aa:39:11:5e:1e:
         1c:cf:ff:89:b3:a2:52:f9:b8:f2:d4:d4:73:88:0b:fc:9c:ac:
         02:d5:a4:58:28:01:07:6a:86:8d:aa:f2:ff:3a:d9:ac:9a:c4:
         f2:48:a3:f1:7e:2d:88:57:0b:03:92:c7:82:c9:4c:9a:52:82:
         54:4f:c6:46:d4:e6:26:25:c6:31:61:85:e7:f7:c3:24:e8:af:
         66:98:b0:fb:03:c5:c8:f5:8e:76:1a:d3:6c:01:3a:4f:de:bb:
         97:c0:6b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:44:28 2024 by rpki-client on console-fra.rpki-client.org