Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32322d3332203d3e20323636393635.roa (raw, json)
Hash identifier:          vnZBlyXDlvnjEw9ST01AqYfF7t6lN3hrfktxtO27E5M=
Subject key identifier:   FF:70:26:A4:C2:39:3B:34:38:C2:93:26:C7:C8:8F:35:C7:60:A7:A9
Certificate issuer:       /CN=00F177A532971DACF94FC9D35094F3F30F7DB522
Certificate serial:       3BC4DB73401F2207C8301BECA428BF77A2E15CF4
Authority key identifier: 00:F1:77:A5:32:97:1D:AC:F9:4F:C9:D3:50:94:F3:F3:0F:7D:B5:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00F177A532971DACF94FC9D35094F3F30F7DB522.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa
Signing time:             Thu 19 Sep 2024 14:15:54 +0000
ROA not before:           Thu 19 Sep 2024 14:10:54 +0000
ROA not after:            Thu 18 Sep 2025 14:15:54 +0000
asID:                     266965
IP address blocks:        45.226.60.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:db:73:40:1f:22:07:c8:30:1b:ec:a4:28:bf:77:a2:e1:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F177A532971DACF94FC9D35094F3F30F7DB522
        Validity
            Not Before: Sep 19 14:10:54 2024 GMT
            Not After : Sep 18 14:15:54 2025 GMT
        Subject: CN=FF7026A4C2393B3438C29326C7C88F35C760A7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:41:ef:c9:82:a9:4f:85:da:79:8b:a6:e4:40:
                    36:19:16:ea:fa:68:80:0b:5f:a3:e6:70:7f:89:a6:
                    ba:f8:a6:35:82:d9:1f:81:25:e7:b8:25:2c:93:98:
                    6d:9d:f3:39:79:7a:91:57:4d:18:b1:08:d1:8c:07:
                    1b:54:4c:9c:3b:cb:ac:3c:de:53:c8:cb:fb:b0:3b:
                    6e:49:14:3c:65:36:87:f7:36:92:ca:60:50:64:1f:
                    1a:24:11:ea:9c:d1:a6:0e:b8:32:05:41:4e:ac:65:
                    44:c4:a1:10:73:b7:5f:94:a3:e7:fa:25:76:93:41:
                    60:95:43:c7:13:ad:24:50:08:35:0d:3b:55:53:24:
                    2d:55:44:89:6c:92:e7:70:cb:a9:19:d9:ad:e1:de:
                    e2:74:18:58:f7:56:ca:3f:3e:77:90:2e:d1:9d:98:
                    d6:e9:87:31:9c:4c:dd:79:06:4a:3e:c7:d1:11:6d:
                    5b:9f:89:df:f4:ae:e3:60:8b:ac:80:36:ab:d1:d2:
                    32:3e:91:50:5d:3f:1f:cf:fc:8b:64:f5:be:f1:b0:
                    2e:36:a4:f6:62:ae:9a:69:dc:d5:dc:8a:d8:31:85:
                    a9:ae:12:c6:da:d8:d0:2e:b8:b1:dd:df:27:31:8c:
                    70:36:a5:e2:28:14:62:5e:df:fc:0b:26:b6:83:43:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:70:26:A4:C2:39:3B:34:38:C2:93:26:C7:C8:8F:35:C7:60:A7:A9
            X509v3 Authority Key Identifier:
                keyid:00:F1:77:A5:32:97:1D:AC:F9:4F:C9:D3:50:94:F3:F3:0F:7D:B5:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/00F177A532971DACF94FC9D35094F3F30F7DB522.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00F177A532971DACF94FC9D35094F3F30F7DB522.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/34352e3232362e36302e302f32322d3332203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:51:b6:fa:ec:f4:ae:4b:60:18:ff:e6:dd:1a:ad:99:7f:13:
         c9:8f:4e:8e:0a:d6:b6:0c:49:7f:58:fb:96:51:19:a0:27:a5:
         fd:cf:20:5a:19:69:74:1b:52:81:e1:49:af:fc:07:db:6f:28:
         7d:e9:29:20:64:54:0e:a4:de:82:7c:7c:ab:92:f6:52:4e:1b:
         6d:83:30:cb:e6:e3:87:78:79:34:c4:39:a3:bb:c4:7d:0b:23:
         9e:e8:09:aa:12:fe:4c:7e:c8:f8:96:14:14:9b:34:15:d5:50:
         89:d4:d9:26:75:b7:3c:56:d8:34:dd:c1:58:b8:a9:d9:c6:31:
         54:32:13:3c:0f:06:fe:0c:a2:6c:e5:ce:d8:47:eb:97:c9:41:
         0b:27:56:cd:88:90:2d:6a:82:f0:77:d7:48:00:48:b0:4f:31:
         29:11:5f:cc:d1:7c:7d:a2:ea:a5:92:d7:d9:e2:1d:cc:e9:88:
         e0:6b:b7:f3:27:a5:70:85:0d:de:95:9a:af:0b:ac:11:05:2d:
         d7:5a:81:4b:dc:3c:b9:65:9b:ad:b0:c1:d9:46:fb:8e:18:0f:
         81:ac:1c:01:d8:44:26:a3:96:15:d3:a0:42:79:87:46:d3:f7:
         ea:08:ed:9d:20:ab:74:4d:be:c4:eb:d7:18:e3:52:4c:01:9c:
         79:83:05:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 19:25:34 2024 by rpki-client on console-fra.rpki-client.org