Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3232203d3e20323637303739.roa
File:                     34352e3232372e34342e302f32322d3232203d3e20323637303739.roa (raw, json)
Hash identifier:          2N3P12/DB4Zamcx5HH9viSCWFFdntXlTNdwCaTPPHxQ=
Subject key identifier:   47:E1:F7:28:2A:20:41:77:EE:6E:62:03:2B:CC:25:33:11:84:CB:31
Certificate issuer:       /CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
Certificate serial:       7627A648A77625F24E88AA7E55FE83DDB8E67B05
Authority key identifier: 01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3232203d3e20323637303739.roa
Signing time:             Mon 23 Oct 2023 23:06:28 +0000
ROA not before:           Mon 23 Oct 2023 23:01:28 +0000
ROA not after:            Mon 21 Oct 2024 23:06:28 +0000
asID:                     267079
IP address blocks:        45.227.44.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:27:a6:48:a7:76:25:f2:4e:88:aa:7e:55:fe:83:dd:b8:e6:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Validity
            Not Before: Oct 23 23:01:28 2023 GMT
            Not After : Oct 21 23:06:28 2024 GMT
        Subject: CN=47E1F7282A204177EE6E62032BCC25331184CB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:cf:d0:86:cc:83:da:d5:46:51:73:e7:f3:
                    a5:95:8f:30:f1:7a:23:1d:48:88:25:c8:2f:54:46:
                    2a:3c:c8:b8:c6:b9:49:f7:d8:44:8c:2b:24:4e:10:
                    b7:8a:3c:23:b1:5c:94:bf:30:3d:e4:20:b4:54:82:
                    60:f8:35:b7:30:2d:ab:e7:70:75:39:ba:e6:86:45:
                    d2:8c:6b:e7:85:54:06:dd:71:30:a0:1f:04:40:cd:
                    05:e9:0f:f1:e5:b7:66:51:12:f0:e2:33:ca:aa:3c:
                    8c:dc:30:78:15:60:c5:f7:23:64:bb:6d:9b:93:90:
                    2c:5b:7a:a3:37:08:75:15:80:bb:e3:22:d8:a5:05:
                    b4:ff:d1:d1:e6:47:ab:2f:a2:a7:11:f3:e9:f6:70:
                    a3:77:4b:1c:c9:73:34:0e:ec:ea:1f:2f:81:d0:fb:
                    04:a0:f2:a9:2c:55:22:b1:9d:63:37:e5:5a:32:c8:
                    ac:16:4a:b0:a5:ce:0e:8f:65:34:0a:a6:e8:78:d9:
                    68:2f:5b:71:bc:bf:9e:f7:78:15:0e:c8:89:74:04:
                    44:93:a8:01:20:ee:bd:6e:35:bf:d5:6d:fb:61:c4:
                    36:a7:79:8f:dd:c4:e3:b1:92:fc:1b:db:56:f6:72:
                    5a:14:4d:f7:b3:28:a7:45:06:a8:5a:07:9f:5e:e8:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:F7:28:2A:20:41:77:EE:6E:62:03:2B:CC:25:33:11:84:CB:31
            X509v3 Authority Key Identifier:
                keyid:01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32322d3232203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:1a:96:fc:e5:f4:f7:ba:5f:4f:5e:4f:f7:33:be:e1:f7:52:
         9a:8e:b9:dc:bb:ec:1a:50:b7:b7:90:a9:5a:5d:0d:70:45:e5:
         c6:e2:3e:db:40:18:67:0a:75:74:92:d1:27:60:54:2f:3e:d6:
         ca:16:de:25:9c:bd:60:66:55:d5:d7:65:8c:ee:b2:4a:6b:10:
         df:0e:fd:f6:bd:73:de:ed:5f:ee:bf:f8:c8:99:48:70:2c:3f:
         b7:ae:92:76:7d:a8:8f:08:70:d2:33:70:d4:17:69:bc:01:75:
         c6:fe:90:c7:37:f8:34:ca:5b:32:f4:55:b1:39:46:ab:22:4f:
         93:f8:eb:8a:c3:23:56:a3:13:9b:b9:fb:e6:97:6e:33:27:c2:
         6d:ca:91:b3:ad:a2:0d:e3:dd:ab:69:d1:2d:f7:a8:ed:4a:cd:
         cf:d1:ae:c7:2b:8b:68:d7:0d:03:76:c1:53:bd:ee:9b:e0:5b:
         af:2a:04:21:30:78:1a:25:cc:6c:89:37:cb:43:69:c3:2d:4d:
         8e:3a:5b:b2:3f:c9:2e:bb:2a:66:71:99:87:11:c8:bc:6e:35:
         ea:fa:9a:ed:1d:04:cd:f5:a0:80:0f:db:56:85:b6:a4:7c:37:
         af:75:8b:7b:d4:76:f0:ff:b7:21:ba:47:0a:8e:26:4b:65:3d:
         09:90:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 09:34:02 2024 by rpki-client on console-fra.rpki-client.org