Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa
File:                     34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa (raw, json)
Hash identifier:          DnIKFROk+2cOLxI6tcDyL+wmjYrk6DWGljqB6o8uLXs=
Subject key identifier:   BE:36:51:C5:FB:10:70:40:A1:05:B8:2C:21:BD:DE:54:8D:DA:80:25
Certificate issuer:       /CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
Certificate serial:       461D02AEA7CECFF4318C36E9F66BC06508D93C68
Authority key identifier: D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa
Signing time:             Wed 03 Apr 2024 22:47:50 +0000
ROA not before:           Wed 03 Apr 2024 22:42:50 +0000
ROA not after:            Wed 02 Apr 2025 22:47:50 +0000
asID:                     268909
IP address blocks:        45.175.200.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1d:02:ae:a7:ce:cf:f4:31:8c:36:e9:f6:6b:c0:65:08:d9:3c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36EAE79059103C5416DAC3F9185031E78EF7E52
        Validity
            Not Before: Apr  3 22:42:50 2024 GMT
            Not After : Apr  2 22:47:50 2025 GMT
        Subject: CN=BE3651C5FB107040A105B82C21BDDE548DDA8025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:07:5b:46:15:81:3c:f3:dc:21:32:7b:d2:
                    c9:da:ba:1d:78:f6:5a:91:82:59:77:6a:9f:64:79:
                    24:e3:73:50:31:0f:77:a1:d8:8f:ab:80:07:9b:f1:
                    4b:8f:a3:3e:ba:db:a3:1c:91:e0:a3:59:d3:3c:4b:
                    30:44:03:65:91:63:b1:ee:5a:0f:c3:1a:59:a9:cd:
                    e9:51:8d:f0:e7:6d:bd:08:54:be:76:3d:79:a5:bc:
                    79:49:6e:22:87:5b:e6:42:ae:6f:a2:18:20:c4:54:
                    76:3c:e3:4d:40:47:fe:73:ff:fe:be:3f:4e:a1:6c:
                    19:e6:99:c9:98:60:7c:15:a3:8d:3c:b6:75:57:6b:
                    2c:3f:1f:0e:a0:3c:e3:68:33:b7:90:7a:8d:ae:2a:
                    76:0c:95:8e:d8:ad:fd:f8:a7:17:34:6b:49:4a:1f:
                    f4:f8:1b:3a:5c:18:1d:12:0d:1c:44:f5:55:5b:16:
                    61:43:11:95:7f:80:d2:7d:b5:27:ea:e4:fe:11:4e:
                    99:51:fd:46:59:69:2a:66:d0:81:5d:7b:4e:7f:e3:
                    87:ea:5e:48:b1:ba:b7:9f:d7:12:01:aa:b5:e1:ad:
                    07:4e:84:e0:6a:71:90:aa:2d:5d:bf:02:55:e7:40:
                    ff:97:83:cc:29:87:bd:32:62:4f:4b:e3:38:97:38:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:51:C5:FB:10:70:40:A1:05:B8:2C:21:BD:DE:54:8D:DA:80:25
            X509v3 Authority Key Identifier:
                keyid:D3:6E:AE:79:05:91:03:C5:41:6D:AC:3F:91:85:03:1E:78:EF:7E:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D36EAE79059103C5416DAC3F9185031E78EF7E52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6siqoKYb47LW1pQWDzyebzbgZEqtwiSPRtCbR7Cti6Gf/1/34352e3137352e3230302e302f32322d3332203d3e20323638393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:64:9a:5d:37:89:11:f2:dd:62:e6:75:82:3a:5d:b3:33:
         eb:97:ce:3b:05:6b:51:76:ea:56:21:72:b1:91:86:05:e2:64:
         8b:71:bc:c5:0a:e1:22:36:b2:4c:30:85:a0:72:cc:08:4e:57:
         72:b0:a2:6f:f1:5d:a2:15:b4:a7:2b:47:24:0a:93:8b:d6:6b:
         ce:db:23:91:28:e6:bc:4e:c5:db:c2:34:50:12:47:60:af:11:
         cb:4c:33:87:dd:76:ab:f2:2e:a4:ff:01:94:ab:0c:47:4e:c1:
         04:7b:1f:d3:43:0e:20:b7:b9:88:b4:b8:36:12:b5:fd:36:16:
         c5:f7:f1:01:e4:41:a0:79:b4:f0:b0:72:67:67:f8:f7:94:99:
         49:d7:a7:22:6a:4b:58:19:9a:eb:1b:39:7d:1d:4d:91:9e:4d:
         e1:b6:1f:6e:55:e7:30:67:41:1e:2c:a4:09:24:82:7d:a7:bb:
         03:4d:28:57:8d:cd:fd:3e:ee:3d:6e:fb:8b:01:3a:26:48:31:
         5d:49:e0:1e:ac:1b:21:62:d7:a3:d7:9a:54:c6:82:a3:5a:a4:
         9d:16:1d:cc:35:6b:a3:22:8b:0a:ee:31:73:d7:2a:fb:2c:5f:
         05:9a:fe:ba:6c:c4:ab:a7:ff:8a:45:fc:5d:0c:b7:0f:2b:99:
         14:0d:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 20:03:53 2024 by rpki-client on console-ams.rpki-client.org