Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          fcFzU94jxVkeOk51GurWMegPuQYs9poO5ZtVyT7PI5w=
Subject key identifier:   0C:11:BB:ED:7A:E6:47:56:45:CF:9F:2F:C6:BD:FF:D7:0D:DB:49:56
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       1693018893E258EB8E94C45CB36C680D08816A0B
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        45.227.170.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:93:01:88:93:e2:58:eb:8e:94:c4:5c:b3:6c:68:0d:08:81:6a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cf:38:d7:3a:1d:72:89:54:8b:3c:5d:af:fa:
                    ce:b1:f4:e7:14:cd:e8:a4:73:43:01:af:83:95:9c:
                    c0:e9:e8:85:6b:7e:1d:7b:8f:7a:35:71:25:f2:8e:
                    8f:e5:bf:60:86:31:56:0e:ec:7d:09:83:bc:b6:ef:
                    c8:ef:51:18:22:d4:6a:87:62:25:6e:14:58:1d:70:
                    29:f3:b6:07:eb:7c:8e:ad:39:24:5f:67:2f:5f:55:
                    da:5b:04:61:e1:e9:3e:84:d6:f0:d5:22:70:ba:03:
                    38:55:54:bc:73:01:df:fa:1e:fd:15:6b:3d:06:a4:
                    03:32:d9:48:f6:51:50:94:f4:8a:d7:2e:84:a2:02:
                    f5:0c:15:23:cd:35:89:7b:dc:93:6f:f8:c8:ba:29:
                    38:69:bc:5a:28:f4:25:cc:0d:8e:24:32:7f:1c:b8:
                    e5:d3:6e:f1:7a:12:84:1f:9c:2d:2e:63:7d:06:8d:
                    ea:02:8e:6b:ea:34:83:81:45:98:dd:4e:86:56:6e:
                    43:86:82:79:77:5d:10:5f:e5:67:eb:c3:71:9a:b1:
                    0f:f0:42:ff:96:a4:b8:e3:26:de:c5:a5:ed:c7:f9:
                    29:fd:d9:3f:9b:03:9a:a3:31:ef:07:c9:5d:e9:c9:
                    23:d0:85:1d:c0:13:d0:45:f7:ee:2c:67:d1:52:c9:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:11:BB:ED:7A:E6:47:56:45:CF:9F:2F:C6:BD:FF:D7:0D:DB:49:56
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137302e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:d9:0f:1f:06:99:32:d7:84:fa:10:d8:42:cb:71:7c:f8:
         23:65:72:ad:3a:0d:1c:c3:c1:6b:8b:49:e8:71:58:a3:7a:cf:
         9e:66:75:45:ab:dd:32:38:3c:32:68:7f:8a:d9:1c:b2:14:52:
         bf:3a:90:3b:6f:ff:39:c3:26:e8:80:c8:0c:a6:af:86:44:d7:
         fd:87:81:97:be:b4:bf:d9:ce:62:4a:4f:fe:4c:5d:69:73:61:
         1a:bf:c4:91:08:8e:d7:ca:39:86:1f:38:0b:25:c5:9b:23:7d:
         3d:5b:04:5b:ee:6c:f2:31:58:f9:e4:92:b2:62:34:a2:27:ef:
         69:c7:20:56:55:b1:14:7d:3d:53:0a:64:83:b2:cd:69:a8:b8:
         58:26:69:2a:f7:42:d1:72:69:ff:71:82:7f:ef:b6:f4:e8:eb:
         cd:c1:12:eb:5d:c6:71:ac:69:fa:14:eb:cf:c0:04:f1:db:70:
         65:03:ef:78:c1:62:9e:52:06:96:24:c9:76:6f:9d:ec:0f:96:
         9b:50:6e:60:f3:71:4d:5d:2f:19:32:97:fa:4a:40:52:11:a0:
         a2:cf:c6:4a:63:ee:14:e4:02:18:82:d0:c6:0f:5a:4c:5f:e6:
         e6:a4:c4:66:e8:f3:b1:8b:93:c3:0e:8a:a2:9a:b7:4c:c7:20:
         e2:3d:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org