Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          JBtECtvieWw8jDul5m4y25O6fLijEZeQmqK0OuxQ9AY=
Subject key identifier:   7F:F8:C8:29:8B:5E:CE:B1:EB:74:37:B3:1E:3D:58:8E:A4:60:16:CF
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       449EA21DBAB41598245F15267226661630B5029B
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:46 +0000
ROA not before:           Sat 13 Apr 2024 13:32:46 +0000
ROA not after:            Sat 12 Apr 2025 13:37:46 +0000
asID:                     267027
IP address blocks:        45.227.169.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9e:a2:1d:ba:b4:15:98:24:5f:15:26:72:26:66:16:30:b5:02:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:46 2024 GMT
            Not After : Apr 12 13:37:46 2025 GMT
        Subject: CN=3082010A0282010100B4050B3FC634FC5D7EC5052411A779CBFC3E2D7031A37165D5EDC5FCB165D0F2C839239D81DFBC59403C0827D615CBFAED966C975B8B293A01B583E7E28CB5EC941DA9875D052444175934787B8F6A6122CE57F2AEC8BF82C7D0AE3E05773CC899FD5F370CD74C95A953C138C6013E2805773D1D6AA8711A4E709CBECF1165ACCFA05AD147F4B5235C1077722E09B8188E37A3C2194DE04B2DAB4E4BC715F65A817167B057A438A3904EAB81B1E0098DF3CB0E17B444A3E732804F2EB2EBEC35CD0FF2DC54ABB8BC6430740899F9D988B34A9E53561DA691108E1F805632FB884CE2939165CADC81D2750E6F77EB77DC86EF83AB34065F10304BF8FE2929018D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:0b:3f:c6:34:fc:5d:7e:c5:05:24:11:a7:
                    79:cb:fc:3e:2d:70:31:a3:71:65:d5:ed:c5:fc:b1:
                    65:d0:f2:c8:39:23:9d:81:df:bc:59:40:3c:08:27:
                    d6:15:cb:fa:ed:96:6c:97:5b:8b:29:3a:01:b5:83:
                    e7:e2:8c:b5:ec:94:1d:a9:87:5d:05:24:44:17:59:
                    34:78:7b:8f:6a:61:22:ce:57:f2:ae:c8:bf:82:c7:
                    d0:ae:3e:05:77:3c:c8:99:fd:5f:37:0c:d7:4c:95:
                    a9:53:c1:38:c6:01:3e:28:05:77:3d:1d:6a:a8:71:
                    1a:4e:70:9c:be:cf:11:65:ac:cf:a0:5a:d1:47:f4:
                    b5:23:5c:10:77:72:2e:09:b8:18:8e:37:a3:c2:19:
                    4d:e0:4b:2d:ab:4e:4b:c7:15:f6:5a:81:71:67:b0:
                    57:a4:38:a3:90:4e:ab:81:b1:e0:09:8d:f3:cb:0e:
                    17:b4:44:a3:e7:32:80:4f:2e:b2:eb:ec:35:cd:0f:
                    f2:dc:54:ab:b8:bc:64:30:74:08:99:f9:d9:88:b3:
                    4a:9e:53:56:1d:a6:91:10:8e:1f:80:56:32:fb:88:
                    4c:e2:93:91:65:ca:dc:81:d2:75:0e:6f:77:eb:77:
                    dc:86:ef:83:ab:34:06:5f:10:30:4b:f8:fe:29:29:
                    01:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:C8:29:8B:5E:CE:B1:EB:74:37:B3:1E:3D:58:8E:A4:60:16:CF
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3136392e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:48:58:07:9d:9c:85:3e:c4:1c:a0:9e:d8:5e:f9:f1:9d:
         f7:b3:cc:0c:df:3e:d9:18:69:06:ef:5c:f6:16:05:26:34:f6:
         4d:81:e5:31:4b:88:17:ac:92:1b:00:5f:a0:3f:6b:fc:ca:c2:
         90:8e:ca:d3:3e:c9:c0:c8:a6:12:24:4f:aa:09:a9:94:3a:80:
         e4:4f:13:0e:4a:46:a9:7a:fa:79:e7:64:c9:d7:0b:d8:12:1c:
         b2:b8:57:6c:44:56:9c:fe:77:6b:1d:67:79:71:9d:ea:52:6e:
         1b:42:fd:3f:b9:4e:b3:89:df:41:86:8b:53:e3:66:10:53:89:
         37:b5:f3:21:95:5e:c1:86:70:90:0a:c3:c6:79:7d:d0:34:fe:
         29:32:a8:dc:55:fe:1e:b2:2d:a0:b4:c7:c9:2d:fd:74:af:b9:
         49:b2:bf:95:18:18:0d:2e:49:6a:9e:6b:5f:15:e0:e4:b0:3e:
         03:cb:0a:9a:3d:f5:59:3b:59:0d:7a:a8:ba:58:d5:84:d3:bf:
         0c:a4:6f:4f:aa:62:4d:26:57:35:e6:02:95:02:2a:fa:ff:d2:
         3b:7d:fa:72:32:a6:77:ca:e4:87:50:28:d2:26:44:fb:13:d2:
         4f:90:42:96:e7:47:07:89:16:5c:08:d9:9d:42:10:40:c3:eb:
         43:b2:bd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org