Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
File:                     34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa (raw, json)
Hash identifier:          XXeDM9fRVcj2opY113nr6nGI5zgv9J48ATtxkscRhy8=
Subject key identifier:   F3:57:9D:E9:95:45:70:FA:C8:34:3E:8A:4F:80:87:FE:96:44:FE:CA
Certificate issuer:       /CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
Certificate serial:       7E483FB48C00D5DE0153A4CE0855C3992C423E81
Authority key identifier: 9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa
Signing time:             Sat 13 Apr 2024 13:37:45 +0000
ROA not before:           Sat 13 Apr 2024 13:32:45 +0000
ROA not after:            Sat 12 Apr 2025 13:37:45 +0000
asID:                     267027
IP address blocks:        45.227.171.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:48:3f:b4:8c:00:d5:de:01:53:a4:ce:08:55:c3:99:2c:42:3e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C735966D1D875EFEDB80B5961E45249EF1F0EE8
        Validity
            Not Before: Apr 13 13:32:45 2024 GMT
            Not After : Apr 12 13:37:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:22:c8:1f:45:7a:a6:fd:bf:79:81:9d:2e:
                    5c:18:63:80:f0:07:ec:a0:a5:0a:3b:ce:55:13:51:
                    10:fa:cd:f3:15:3b:97:58:df:97:9d:d5:61:4e:19:
                    2e:e5:80:eb:7c:eb:d3:18:ab:d8:91:c3:c8:ee:ca:
                    02:5f:00:f5:7c:e5:bd:a3:f1:86:b5:82:43:a9:15:
                    84:bc:51:4f:f4:0e:37:0c:65:16:77:f4:81:0c:65:
                    af:dc:f1:d0:a5:d2:97:f7:57:53:9f:12:64:f7:bd:
                    c6:6c:59:ab:33:d9:25:0f:18:f9:5c:a8:e7:5b:d2:
                    67:2a:80:54:5f:71:24:60:23:2d:7b:36:f4:e0:e3:
                    6e:40:c8:ef:46:70:93:5c:47:79:71:57:4c:ea:bb:
                    2b:2f:08:e5:03:d6:35:80:b2:44:51:48:42:ae:13:
                    5f:3a:53:f7:4e:9d:32:71:f5:2f:47:d4:44:cc:c3:
                    b3:b8:ab:19:3f:7b:f8:76:35:da:23:68:02:0f:65:
                    3b:44:e8:65:5e:96:bb:a5:26:58:ef:2f:a3:e5:0d:
                    f1:97:9f:6a:06:99:61:44:e9:e0:3d:8a:da:7b:8f:
                    6d:9f:92:17:a6:cd:11:66:6e:8d:50:9a:6c:b0:08:
                    ef:bd:54:3a:52:19:a3:25:17:c9:09:e6:1e:68:08:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:9D:E9:95:45:70:FA:C8:34:3E:8A:4F:80:87:FE:96:44:FE:CA
            X509v3 Authority Key Identifier:
                keyid:9C:73:59:66:D1:D8:75:EF:ED:B8:0B:59:61:E4:52:49:EF:1F:0E:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C735966D1D875EFEDB80B5961E45249EF1F0EE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/1/34352e3232372e3137312e302f32342d3234203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:8e:bc:14:1c:e8:d4:57:84:4b:26:54:91:fd:ae:5f:fb:8b:
         86:02:50:71:d4:f0:64:ba:78:1f:c4:d5:21:94:7a:13:61:40:
         21:ab:72:8b:81:a2:42:52:a0:ac:ff:97:6f:21:99:18:31:c4:
         e9:ed:35:ca:bc:db:f2:7e:6b:03:65:be:2b:70:d7:13:a2:5c:
         9c:29:1b:3b:1a:f8:d3:0e:31:25:71:a0:c0:f7:cf:99:61:2f:
         c8:c6:74:0a:11:51:77:84:27:44:b6:1c:8c:36:6b:b5:8d:b3:
         23:f0:c2:77:cb:10:4a:57:dc:e9:0c:13:c1:01:13:14:7d:69:
         89:e6:5d:7c:02:70:83:98:43:14:0e:06:b2:3a:9e:1f:38:98:
         4c:92:c5:18:fe:15:7d:b2:e5:97:c8:7b:1b:58:35:87:88:46:
         ed:7a:7e:5f:08:91:09:e2:0d:4c:95:e9:e4:ff:02:18:a5:6d:
         c3:91:bb:57:ac:db:cf:9b:17:20:7d:92:92:73:3d:28:0f:40:
         aa:1a:97:a0:86:03:f8:b8:b1:10:4d:42:84:a5:0d:77:65:cf:
         85:11:e2:f7:43:c3:25:9e:4d:da:97:24:c4:45:bb:6e:f8:e8:
         9c:71:2e:2f:a4:36:d2:2b:1c:3c:81:17:47:81:cb:a5:82:96:
         c7:29:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:44:28 2024 by rpki-client on console-fra.rpki-client.org