Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32332d3233203d3e20323638393134.roa
File:                     34352e3137342e342e302f32332d3233203d3e20323638393134.roa (raw, json)
Hash identifier:          VffVj5kYpk/PunmHgkwqKwMutt0okQvI2ijnjPUifSc=
Subject key identifier:   65:C0:7B:23:FF:FE:D0:2A:90:AE:9F:35:87:FC:2A:7C:C2:FA:88:E7
Certificate issuer:       /CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
Certificate serial:       24B20D236F5DA77BED96DAEC71D4ABEA167A68BC
Authority key identifier: B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32332d3233203d3e20323638393134.roa
Signing time:             Mon 02 Sep 2024 18:35:25 +0000
ROA not before:           Mon 02 Sep 2024 18:30:25 +0000
ROA not after:            Mon 01 Sep 2025 18:35:25 +0000
asID:                     268914
IP address blocks:        45.174.4.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:0d:23:6f:5d:a7:7b:ed:96:da:ec:71:d4:ab:ea:16:7a:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
        Validity
            Not Before: Sep  2 18:30:25 2024 GMT
            Not After : Sep  1 18:35:25 2025 GMT
        Subject: CN=65C07B23FFFED02A90AE9F3587FC2A7CC2FA88E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:0c:15:74:ed:ff:0c:02:cc:a7:55:22:f8:
                    15:34:c6:30:4b:f6:2c:c8:7e:17:14:7c:3e:e6:49:
                    fe:c6:a6:1c:fd:35:7e:90:c4:42:0e:a1:83:33:98:
                    94:e6:15:c8:a7:cf:a4:7a:9e:48:48:38:15:b2:44:
                    91:93:84:5a:b3:d0:77:39:0d:d1:f1:c4:f6:99:08:
                    e6:3b:fd:61:45:9f:df:75:dd:05:8c:9d:4f:cd:b4:
                    78:1d:33:ef:29:55:72:54:eb:74:24:6b:8a:cb:ed:
                    15:36:5d:76:c6:70:74:45:3e:83:e1:d4:6b:a5:21:
                    af:2c:fa:66:eb:14:d4:4f:36:cd:9e:89:8a:3d:3c:
                    5d:98:9d:ba:25:79:18:4e:72:38:60:56:3a:61:2e:
                    00:f5:69:f5:e6:cd:dc:53:40:b2:cc:74:56:04:6b:
                    c1:01:57:0b:45:8a:65:67:67:6c:c0:9d:bc:bd:c9:
                    e1:28:99:f5:a3:86:db:c5:e5:b7:ce:fa:66:3e:2c:
                    d3:18:c2:6e:dd:f0:4d:c0:0e:a7:81:2f:12:bc:05:
                    48:21:af:58:a9:ff:5f:43:4e:1b:59:0e:d7:c6:0b:
                    07:e2:47:82:fb:ac:a6:16:ab:34:f1:03:be:24:be:
                    a2:aa:50:95:77:3f:1b:35:85:84:87:3d:a5:1b:fd:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:7B:23:FF:FE:D0:2A:90:AE:9F:35:87:FC:2A:7C:C2:FA:88:E7
            X509v3 Authority Key Identifier:
                keyid:B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e342e302f32332d3233203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:f5:f4:0d:3a:ac:f3:e7:4a:ea:7a:61:0a:1c:30:f1:e9:9b:
         72:7a:51:74:26:2e:94:ae:36:ff:b5:3c:db:c5:90:40:b4:fa:
         ef:4a:ed:06:8d:02:38:a5:15:01:32:8c:14:25:53:e4:b2:bd:
         e8:ca:6c:d2:38:00:46:04:31:ea:90:23:87:c6:b9:85:c9:51:
         90:15:7e:a7:a3:23:5d:fb:32:e6:e6:f2:45:38:26:48:30:80:
         62:6e:2c:73:75:5c:95:1b:4a:6c:16:9d:8d:46:64:9c:83:91:
         1d:c8:80:e2:c9:43:d7:82:a1:d4:68:fa:80:96:91:0d:3b:c0:
         f4:40:cc:63:19:95:0f:cf:a9:2f:2c:1d:d5:08:c4:26:65:5f:
         42:e4:55:a8:ab:e4:50:37:5e:09:b7:f9:3a:30:bf:f2:95:b5:
         96:ba:83:a0:fe:4b:4f:fb:3b:06:d8:f0:6f:2a:7d:fb:d1:7b:
         a1:6c:b3:d9:55:15:12:cc:c6:21:98:a5:ef:da:d1:83:2a:e0:
         c4:39:32:37:b5:3e:33:36:85:55:93:3a:ef:cd:9a:09:56:08:
         79:fa:7c:44:80:9e:11:cc:36:92:5d:bf:ad:26:ff:9d:76:e7:
         ef:60:4f:c2:09:82:5b:9a:92:cc:ab:28:d1:4b:67:65:59:2f:
         aa:bc:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 19:03:27 2024 by rpki-client on console-ams.rpki-client.org