Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36332e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36332e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          P7e6P8wpWWZq4rT7OjPsx2rOGtkPaYuHTp5podY02b0=
Subject key identifier:   E1:EC:28:7D:4A:AA:0F:E9:35:F7:94:61:AE:E1:4B:CE:C1:81:E3:F1
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       0724465345F7AAB96DF203E7EB81041F4F728E3B
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36332e302f32342d3234203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.63.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:24:46:53:45:f7:aa:b9:6d:f2:03:e7:eb:81:04:1f:4f:72:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ff:ac:32:25:99:48:4f:1e:69:3b:74:5f:dc:
                    19:3b:fe:77:fd:34:e3:c5:ac:5c:d1:30:6a:bd:60:
                    ae:26:57:3a:68:1f:bd:49:66:48:a0:01:6a:26:a8:
                    77:69:8f:1d:c1:ce:97:d3:01:d4:b8:b3:d6:9d:65:
                    c4:77:60:2b:12:d4:c3:47:f3:ee:df:26:d6:4e:b8:
                    88:fb:39:db:99:6a:e1:98:cc:30:df:76:ba:42:44:
                    33:21:3e:ea:52:e0:de:94:68:39:09:96:2e:a2:6f:
                    d6:68:9a:d4:e4:cf:ff:0e:b3:66:73:e3:c3:7e:6c:
                    9d:c1:05:97:f6:d8:60:ad:e1:7e:4a:73:a4:b4:7a:
                    76:a6:52:0b:9a:ac:1d:65:37:ec:16:be:8e:d3:3b:
                    27:bf:68:2b:76:bb:c1:b9:f8:55:83:5c:af:8d:72:
                    8f:14:41:a5:cf:28:90:c0:39:a1:0b:de:0c:3d:2d:
                    c2:b4:c2:6d:4e:ce:6f:56:16:b7:47:37:b0:fe:f5:
                    b1:0f:af:b8:40:01:02:75:62:d9:7a:f7:a7:84:d0:
                    12:53:cd:e5:c2:0d:99:e1:2f:de:b2:3b:38:3e:35:
                    9f:16:fc:ba:cc:01:8b:18:5a:f4:82:08:7b:a1:e3:
                    a7:b1:2f:b2:8e:da:72:d1:3a:4f:3e:a6:d4:21:67:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EC:28:7D:4A:AA:0F:E9:35:F7:94:61:AE:E1:4B:CE:C1:81:E3:F1
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36332e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:f0:16:61:a2:a4:00:4f:09:63:d1:ea:5a:bc:51:3d:ae:9c:
         cd:db:6b:a8:1b:8d:b5:3f:f8:51:d4:b6:d2:12:34:8f:b7:4c:
         f1:df:1b:36:42:90:26:02:8f:2b:cd:06:09:17:92:37:f7:42:
         96:50:b0:e2:2a:cf:1c:18:b2:00:f0:df:b2:99:99:90:28:76:
         cb:e4:44:ab:a9:ad:d1:a4:69:79:4f:ed:96:ec:85:1c:86:2e:
         d0:55:8f:ed:0c:57:66:58:3c:ef:ae:18:e3:4e:4c:88:8a:5e:
         57:0c:c6:6f:8b:11:12:6b:f1:91:6d:eb:87:8a:ec:bf:6d:0c:
         3d:f4:06:dd:1e:cf:ba:91:44:1b:a5:53:09:18:e7:4e:35:7a:
         76:27:f5:2e:29:dc:ee:84:20:6a:a3:50:51:2f:44:85:28:d8:
         f4:2d:56:57:08:4a:aa:e0:db:dd:d5:f8:1d:d3:08:fb:cc:09:
         af:ca:02:3b:3f:1f:1f:ae:af:e0:d3:9d:73:0a:9d:1e:4f:a0:
         15:8c:dd:a5:54:14:7d:de:8d:c5:70:5c:e6:2a:d0:76:d8:b1:
         83:11:68:13:8c:ca:e4:e0:28:68:41:81:e0:73:17:c0:46:f7:
         23:62:f4:87:cd:f8:be:7e:e1:26:5b:e3:c1:e5:4a:c2:b0:91:
         72:5b:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org