Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
File:                     34352e3137342e362e302f32342d3234203d3e20323638393134.roa (raw, json)
Hash identifier:          EKem3FVPZlynJKLtpoR490yAsFIkS51q8NghplyEXyE=
Subject key identifier:   F8:40:4E:9A:34:9A:A2:58:64:4C:18:E3:E8:62:2E:C0:5E:F7:AD:1B
Certificate issuer:       /CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
Certificate serial:       2BA30F9DC540CB06B086B187B78CE6C81EE1F7EA
Authority key identifier: B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e362e302f32342d3234203d3e20323638393134.roa
Signing time:             Wed 03 Apr 2024 20:33:37 +0000
ROA not before:           Wed 03 Apr 2024 20:28:37 +0000
ROA not after:            Wed 02 Apr 2025 20:33:37 +0000
asID:                     268914
IP address blocks:        45.174.6.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a3:0f:9d:c5:40:cb:06:b0:86:b1:87:b7:8c:e6:c8:1e:e1:f7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
        Validity
            Not Before: Apr  3 20:28:37 2024 GMT
            Not After : Apr  2 20:33:37 2025 GMT
        Subject: CN=F8404E9A349AA258644C18E3E8622EC05EF7AD1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:88:4d:71:b4:8c:1f:e1:4a:0d:7d:d0:7e:
                    e3:65:1c:44:ac:5a:b8:ab:88:f2:19:9c:cb:8c:24:
                    0e:8d:03:52:59:86:c2:03:74:c6:e1:1c:29:51:a7:
                    72:63:6a:b4:dc:15:47:7b:30:d4:c7:93:93:b5:05:
                    e0:0d:b8:90:96:f0:bb:1d:45:e3:cc:c9:b0:16:f0:
                    2a:03:2c:46:61:3c:0c:79:c8:b0:70:a5:e6:cc:ec:
                    9f:e1:44:98:27:e0:94:53:bb:42:0b:a1:32:42:39:
                    09:2c:13:42:45:b8:ba:01:b6:bf:c5:eb:c4:f3:67:
                    06:f2:40:1b:d5:11:6a:4d:e5:18:da:52:ac:21:70:
                    6c:08:62:c5:ae:35:e3:e2:58:87:12:c8:7e:33:fd:
                    4b:d3:b0:5e:7c:ed:ad:54:a6:3b:0e:81:d6:ad:03:
                    d0:20:23:dd:21:de:f7:36:86:a3:7c:fc:f9:54:94:
                    72:46:55:6f:95:5e:b3:5a:64:94:79:3b:e7:95:2a:
                    8f:0e:c4:bb:15:77:b2:f8:b9:b8:ae:c2:e7:17:73:
                    ac:8c:bb:72:43:64:81:ff:15:1d:3b:18:6f:ce:b8:
                    d7:0a:97:2c:15:ea:73:60:02:31:2e:cb:a4:6a:ff:
                    46:7e:61:60:bf:ab:cd:6d:d6:ff:fb:8b:12:4e:2d:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:4E:9A:34:9A:A2:58:64:4C:18:E3:E8:62:2E:C0:5E:F7:AD:1B
            X509v3 Authority Key Identifier:
                keyid:B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/34352e3137342e362e302f32342d3234203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:7b:66:5a:34:03:82:95:63:cd:7d:c7:a9:79:fc:21:6e:88:
         65:85:a7:c1:9b:3a:bb:e2:f9:cb:bc:13:ea:f8:dd:ec:8b:3a:
         50:62:fa:eb:78:5e:18:98:15:0d:3d:71:51:f9:5f:9b:22:6f:
         1a:cc:b1:fa:45:55:81:94:e0:fe:99:98:19:29:c0:92:8e:33:
         10:81:34:b0:c2:1c:ba:c4:11:ad:91:e0:27:b8:97:c9:d7:c8:
         82:79:9d:75:14:33:70:fb:6d:d8:bd:ec:da:97:f4:0a:a0:a8:
         71:d5:4f:4f:81:55:1d:d2:65:02:ec:a1:ed:40:db:ad:4a:d0:
         ea:2b:34:68:f8:c2:22:84:47:12:78:93:f8:35:7b:20:ae:b6:
         f0:8f:53:81:23:3c:ee:7e:0b:7b:3d:5e:9c:49:02:f0:34:c4:
         70:d9:fb:68:9e:03:47:fd:42:59:98:9b:9c:37:0d:93:08:83:
         ba:0a:c0:af:30:0b:8c:6b:2e:b4:13:99:8a:f5:12:ee:0f:58:
         66:e2:38:6f:3e:6e:49:35:c1:0c:9d:35:fc:51:89:6a:69:f4:
         06:9c:f5:ae:5e:71:fa:97:3d:c9:6c:e6:a2:af:1f:a0:a2:a0:
         d0:ac:89:5f:94:3e:a5:aa:ed:07:6b:6e:bd:0b:56:22:d8:ba:
         9e:4d:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 17:45:25 2024 by rpki-client on console-fra.rpki-client.org