Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/34352e3136362e3133322e302f32322d3232203d3e20323637393730.roa
File:                     34352e3136362e3133322e302f32322d3232203d3e20323637393730.roa (raw, json)
Hash identifier:          9Pwsq6Zb8E2KpYuYuDQ7onaOqFQxMePL8Tquxd4COfE=
Subject key identifier:   75:A9:25:0E:FD:CA:B6:3F:CA:9A:B4:11:2C:99:8E:13:35:D0:81:0A
Certificate issuer:       /CN=25EE5038C0452FA9C55AB79814EC0BC9075A0252
Certificate serial:       0AEF5A1F69FD3D628646F21164734EC7AF7C5EE4
Authority key identifier: 25:EE:50:38:C0:45:2F:A9:C5:5A:B7:98:14:EC:0B:C9:07:5A:02:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/34352e3136362e3133322e302f32322d3232203d3e20323637393730.roa
Signing time:             Wed 03 Apr 2024 23:04:48 +0000
ROA not before:           Wed 03 Apr 2024 22:59:48 +0000
ROA not after:            Wed 02 Apr 2025 23:04:48 +0000
asID:                     267970
IP address blocks:        45.166.132.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ef:5a:1f:69:fd:3d:62:86:46:f2:11:64:73:4e:c7:af:7c:5e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25EE5038C0452FA9C55AB79814EC0BC9075A0252
        Validity
            Not Before: Apr  3 22:59:48 2024 GMT
            Not After : Apr  2 23:04:48 2025 GMT
        Subject: CN=75A9250EFDCAB63FCA9AB4112C998E1335D0810A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f3:72:2f:97:6a:ed:09:f5:39:44:72:d6:3c:
                    45:3b:ac:59:d5:c4:e7:24:0d:11:70:85:89:ec:c0:
                    e4:b4:39:fe:b7:20:fc:6a:e7:15:da:70:25:b8:eb:
                    51:8f:62:c0:a1:89:ab:3b:35:87:24:8f:56:91:69:
                    80:38:30:10:5b:74:31:c7:8e:c7:7b:6a:02:43:78:
                    ec:87:be:d8:59:09:fa:ef:50:02:79:97:7b:e3:7b:
                    b8:9d:90:3c:8b:15:e7:e1:5c:2c:0b:85:1e:b7:53:
                    7c:4c:2c:ac:21:b7:9f:9e:9f:ac:14:ff:b2:f9:9d:
                    6f:7d:68:03:fe:93:d4:57:cd:da:84:97:cc:60:be:
                    25:25:fe:f6:66:22:82:b1:9f:eb:a5:31:43:87:61:
                    54:57:92:83:24:20:54:5c:43:55:35:ea:69:e6:e6:
                    24:d8:d1:f5:c6:c2:6d:72:83:e8:e3:bc:24:c9:1d:
                    44:dd:b9:7b:69:af:dd:ac:00:b2:fa:33:fd:48:aa:
                    7a:61:2f:b8:7c:a9:3c:60:cb:4a:99:5f:9d:3a:63:
                    7e:9a:0b:1c:eb:85:18:14:3e:1f:52:a9:a1:d8:65:
                    0c:c8:10:d3:a9:9b:1d:da:cf:08:9d:e5:e2:4b:d9:
                    3d:0d:bc:86:79:3d:84:65:9b:93:b3:b8:46:47:fe:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A9:25:0E:FD:CA:B6:3F:CA:9A:B4:11:2C:99:8E:13:35:D0:81:0A
            X509v3 Authority Key Identifier:
                keyid:25:EE:50:38:C0:45:2F:A9:C5:5A:B7:98:14:EC:0B:C9:07:5A:02:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25EE5038C0452FA9C55AB79814EC0BC9075A0252.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fcSGDurFu6vytKX7GGLADPa8DDReTggzkz1SrnGeHZt/1/34352e3136362e3133322e302f32322d3232203d3e20323637393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:ca:1a:32:e7:08:5d:af:1b:5d:2d:20:ed:e4:ac:45:d6:4f:
         ab:fc:67:62:0b:c3:d0:7f:cb:0c:a1:97:c2:b7:ce:bf:c3:9d:
         41:2e:8e:d4:ed:d6:23:c3:34:6e:0c:20:a6:30:25:03:95:5c:
         76:bc:3f:40:e5:f5:3f:c0:ee:2b:df:39:44:2a:06:b0:1b:d1:
         3b:33:d6:6d:58:04:e5:cb:08:b0:6f:96:28:85:59:fa:84:8a:
         99:af:ec:b8:df:af:d8:e5:2b:20:b5:57:fb:1f:16:7c:67:17:
         e1:03:79:2e:29:a0:5d:02:2a:b4:ac:c2:fb:39:53:77:96:e3:
         fb:77:8f:bf:2a:b0:99:8c:22:b2:58:35:c9:b1:a1:2b:d1:48:
         84:52:28:8d:a8:22:88:fa:d1:12:2b:2b:55:8d:98:15:f5:11:
         a1:dd:3a:47:55:e4:14:c9:fe:59:27:c8:d9:46:05:20:74:53:
         ce:2d:8a:0a:f1:4f:43:f3:04:12:21:55:94:df:22:76:14:0c:
         4f:a5:b7:c1:f8:7c:3c:5a:59:ad:4e:a1:0f:af:89:36:59:cc:
         95:36:f0:13:01:18:b8:b5:b3:36:4d:9b:51:d7:40:13:4c:48:
         a1:3f:84:b9:46:0b:1f:39:aa:8e:bd:ca:a0:97:b4:94:e5:54:
         82:6b:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 19:07:52 2024 by rpki-client on console-fra.rpki-client.org