Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          5+DeYCb44Sz6w4pomevqsfEH82EplGgPsfKaDCBXd0k=
Subject key identifier:   B0:A0:02:8C:6C:D0:27:B8:CD:85:09:E6:BC:81:8B:CC:12:35:F1:B6
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       228AA396BE048D9D58D7FAF845019DDE5C51F572
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:46 +0000
ROA not before:           Sat 13 Apr 2024 13:32:46 +0000
ROA not after:            Sat 12 Apr 2025 13:37:46 +0000
asID:                     267027
IP address blocks:        45.227.168.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:a3:96:be:04:8d:9d:58:d7:fa:f8:45:01:9d:de:5c:51:f5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:46 2024 GMT
            Not After : Apr 12 13:37:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:c6:3e:23:5e:4d:6d:ae:1f:8c:6d:a9:87:
                    2a:a8:40:27:81:be:f3:4d:bb:e1:30:be:f3:6c:5a:
                    0b:f9:79:09:8f:70:0f:df:93:b4:32:04:26:6a:4c:
                    9d:6c:42:e1:6a:62:f1:fa:35:40:ba:74:10:9a:8a:
                    f7:fd:f6:ae:2c:f1:9b:3a:b6:e0:52:42:10:93:7d:
                    22:30:cc:ef:72:70:3b:84:28:15:37:57:8e:db:fd:
                    5b:be:d5:b6:01:f2:bd:6d:5e:ca:10:3e:05:c1:c4:
                    0b:2a:38:2d:fd:2d:ae:c4:c6:9d:b4:ed:1f:35:5b:
                    4d:2c:2b:1b:85:cb:7f:cb:33:dd:33:1a:e4:9a:1c:
                    3a:70:b6:1a:f9:e4:b6:fc:e2:25:9b:40:65:65:3f:
                    a0:da:b3:22:29:a0:70:78:e9:64:2a:7b:97:58:0a:
                    ca:0a:78:2a:fa:05:da:0b:2e:57:3f:31:78:2b:fd:
                    83:71:2e:e2:bc:ab:7d:62:c4:00:b6:98:b5:f9:77:
                    1d:c1:4f:5c:d5:34:97:99:c7:4a:21:57:62:ea:e8:
                    f6:90:23:b5:7b:c2:9c:de:1f:12:cd:00:61:08:35:
                    a3:19:d4:a7:e4:3e:9c:ba:5e:c9:df:6a:9b:eb:3e:
                    36:0e:7e:52:53:11:4e:0d:68:26:1b:56:31:fc:30:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A0:02:8C:6C:D0:27:B8:CD:85:09:E6:BC:81:8B:CC:12:35:F1:B6
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136382e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:39:9b:d0:f1:66:03:4a:53:3b:27:0f:8a:d3:98:8c:09:
         07:90:17:c5:14:24:66:e3:05:cd:9a:21:9d:3a:46:af:7f:c5:
         0c:2a:d4:3c:05:6f:6b:0c:66:5f:f6:08:8d:bf:82:1c:b4:cd:
         c0:14:53:4a:db:27:0f:09:6a:61:10:d4:35:c7:5a:24:5f:ad:
         b3:be:94:f9:b9:ae:16:bc:7d:e2:b3:ca:fe:10:5d:ca:79:6d:
         e1:32:b7:06:e4:96:3b:dc:f6:47:17:32:e2:e5:c9:55:cd:16:
         08:97:ff:1c:05:d3:95:4c:fc:ca:17:59:89:b7:95:c6:76:0c:
         f6:a5:57:42:1b:9f:1e:1a:20:3e:b8:f8:8f:81:54:07:cd:18:
         dc:73:dd:15:12:9b:f5:7d:99:2c:e8:9f:d0:71:a4:f7:a6:0c:
         28:f0:85:d0:6d:cd:99:0f:a0:78:6a:0c:41:a4:6e:3f:4e:34:
         83:c2:35:fd:a3:bc:fc:3d:44:29:5a:84:af:26:4b:a4:07:e1:
         3c:8d:ef:f2:d1:66:f9:af:b0:be:8e:f3:94:cd:5a:f6:38:44:
         de:3f:50:cb:e2:f6:f4:b0:49:52:81:82:3a:d2:ad:78:3c:91:
         0e:87:d5:34:38:58:74:92:86:48:9b:4f:d1:f3:7f:25:62:ef:
         04:09:a4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org