Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
File:                     34352e3137342e342e302f32322d3232203d3e20323638393134.roa (raw, json)
Hash identifier:          BKbXmrNn7tPl1TWi83DQiJzV9GiZqA72SRR8+9arat0=
Subject key identifier:   0F:EE:91:5B:18:0E:C3:18:4F:2C:63:CD:2F:48:52:FF:8E:3E:5E:26
Certificate issuer:       /CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
Certificate serial:       7005247EDE16DCD3269DFAE39AE362CEF4912B69
Authority key identifier: B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32322d3232203d3e20323638393134.roa
Signing time:             Fri 30 Aug 2024 14:42:55 +0000
ROA not before:           Fri 30 Aug 2024 14:37:55 +0000
ROA not after:            Fri 29 Aug 2025 14:42:55 +0000
asID:                     268914
IP address blocks:        45.174.4.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:05:24:7e:de:16:dc:d3:26:9d:fa:e3:9a:e3:62:ce:f4:91:2b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
        Validity
            Not Before: Aug 30 14:37:55 2024 GMT
            Not After : Aug 29 14:42:55 2025 GMT
        Subject: CN=0FEE915B180EC3184F2C63CD2F4852FF8E3E5E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:88:1b:62:f3:d9:7d:cc:08:3f:92:bf:4b:
                    76:4a:8f:98:dd:49:4b:b0:54:f1:c9:32:5d:ee:cd:
                    40:17:d2:9c:f5:66:52:1b:d8:d3:e9:23:81:75:b5:
                    9c:da:5e:13:1f:35:09:e7:4c:d1:41:3b:53:c1:7a:
                    e7:e3:22:b4:80:0f:ec:d3:73:80:1a:7d:8b:7a:04:
                    f7:08:05:5f:09:ad:ea:82:ad:a2:4e:70:7e:de:67:
                    2c:99:39:fd:91:05:09:1c:9b:bb:63:26:c4:81:93:
                    3c:c7:72:0d:62:6c:0d:bb:20:ab:f2:9f:86:28:ba:
                    f7:a2:9e:b9:6d:9a:fc:c3:10:ab:32:69:9e:26:ac:
                    7f:e4:09:fd:ec:6f:cf:32:fe:ea:bc:b3:a5:a6:fd:
                    58:7e:7c:dd:e1:6c:d5:4c:8a:2f:4e:1a:b9:73:5e:
                    95:c7:e3:c7:78:5e:81:f8:1a:25:48:d4:4a:70:6e:
                    cd:24:00:2f:af:58:a4:f5:a7:3d:3d:b8:b6:a2:71:
                    86:de:76:96:37:c4:6b:b6:7b:a0:67:d6:69:55:77:
                    d9:7e:bb:9d:06:a3:93:fa:94:b4:c6:82:8d:bb:a2:
                    99:96:a9:b7:1f:73:49:5d:c7:47:32:cb:4b:3d:60:
                    42:4c:f1:8d:e4:1e:a2:3b:f0:71:54:8d:03:36:a8:
                    e0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:91:5B:18:0E:C3:18:4F:2C:63:CD:2F:48:52:FF:8E:3E:5E:26
            X509v3 Authority Key Identifier:
                keyid:B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32322d3232203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:8e:3f:5a:47:74:c2:e3:07:a0:55:b0:b8:4a:64:10:3c:df:
         95:5b:14:3b:23:d5:90:13:29:97:5a:ca:de:31:69:34:c5:cd:
         e8:27:a2:88:7f:07:7a:4a:06:4b:c9:25:43:69:58:87:23:a5:
         2c:26:9d:d7:46:17:62:12:e5:6a:ec:6b:14:9d:a9:04:48:91:
         16:7d:ae:0e:f9:04:53:e1:bf:a6:12:a5:10:22:1d:b6:0e:ea:
         cc:b1:3d:4f:08:9e:06:fb:c0:5b:3b:f2:39:d5:d9:3c:63:a4:
         64:39:14:1a:bd:d8:34:a3:19:9a:bc:eb:10:27:21:84:2a:a7:
         5e:12:33:ef:a0:6d:a7:46:63:2d:82:5b:85:19:4e:f5:cf:79:
         21:e6:ea:08:f5:cb:f1:66:31:51:1f:44:41:7b:00:88:cb:39:
         39:bf:1d:66:b5:5b:c1:2c:40:94:54:6c:37:85:1e:24:7b:df:
         65:05:d4:0e:5f:e3:8b:18:ae:2b:41:a0:f5:8c:9a:e2:68:22:
         d8:42:2d:6a:0d:3c:77:1d:32:c5:b8:d7:e2:27:d9:36:0c:da:
         34:52:0f:7f:df:bc:a6:08:f1:6a:6d:61:c4:73:95:b8:b5:53:
         38:2e:f7:fd:1f:61:11:90:59:73:ad:95:7b:43:62:8f:8d:f6:
         a2:8a:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 19:03:27 2024 by rpki-client on console-ams.rpki-client.org