Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34342e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34342e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          eqFvTYsD74ifoqbgj8RhNl5M0Om304iZ28Wyxgda7cI=
Subject key identifier:   27:60:86:E8:EF:36:66:62:20:D5:5C:83:47:E0:1A:2D:8B:3D:1B:3C
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       4CB602378CA3DA9137CC1BCB067B49D56A71370D
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34342e302f32342d3234203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:52 +0000
ROA not before:           Thu 04 Apr 2024 11:04:52 +0000
ROA not after:            Thu 03 Apr 2025 11:09:52 +0000
asID:                     267079
IP address blocks:        45.227.44.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b6:02:37:8c:a3:da:91:37:cc:1b:cb:06:7b:49:d5:6a:71:37:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:52 2024 GMT
            Not After : Apr  3 11:09:52 2025 GMT
        Subject: CN=276086E8EF36666220D55C8347E01A2D8B3D1B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:8b:7f:ad:8e:1c:55:1a:38:9b:5c:44:54:
                    a8:75:47:d1:e0:2d:b8:62:18:e6:3e:fd:d7:af:71:
                    80:f4:86:b3:17:19:2d:af:22:02:a0:62:7a:2f:ee:
                    28:93:65:91:40:b8:39:8c:8f:2f:94:a6:75:b1:5e:
                    c8:d4:32:6c:4e:1f:55:d6:66:9a:d2:a0:31:19:4f:
                    67:c6:96:a6:2e:8c:7c:7f:99:4e:a3:13:14:c7:dd:
                    2b:7d:b2:b2:f6:b7:44:ed:03:92:bd:81:b2:26:e7:
                    7d:76:40:b4:82:50:b1:10:5a:60:77:6a:6b:54:a9:
                    6a:18:25:75:91:c9:ae:c6:12:07:b2:f7:58:40:4b:
                    1c:47:6b:86:9e:92:15:06:dd:11:7a:8b:1e:ea:f2:
                    68:99:9b:50:4c:a4:78:bf:e9:15:b7:94:ca:d6:ba:
                    95:e7:17:8a:c5:a3:72:2b:ab:93:f1:26:12:b9:d2:
                    e3:af:28:4a:4f:da:f0:d1:eb:32:f6:da:57:ab:5d:
                    43:27:0b:9c:5b:ac:77:55:68:f4:05:81:b8:f1:88:
                    65:8f:4f:e0:ad:ed:e3:3c:df:e6:d9:3b:3f:c6:43:
                    5e:bc:df:7f:b7:e1:8d:fc:6b:73:da:97:db:c9:41:
                    0c:20:ae:b5:06:18:1f:a8:0a:04:83:47:fb:23:81:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:86:E8:EF:36:66:62:20:D5:5C:83:47:E0:1A:2D:8B:3D:1B:3C
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34342e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:a4:08:fd:29:08:25:24:db:45:06:9d:d7:89:73:92:e5:2c:
         ae:01:00:a2:94:09:4b:a3:d5:d8:ea:af:9f:ee:f8:66:66:52:
         b7:4e:05:66:cc:d6:7f:b8:0e:6c:e5:21:71:e3:14:d7:23:b8:
         7b:48:23:b2:61:97:1c:81:2f:ec:cf:1d:29:5b:84:d2:22:94:
         f8:ec:ad:57:db:c2:72:f5:6a:f6:0e:de:3d:ff:de:a1:1f:1a:
         d4:2b:88:ac:9c:e8:34:04:af:5a:d9:fb:ed:e5:88:67:b9:73:
         dc:0d:40:ce:8a:15:3b:c1:ee:0e:57:ce:40:4b:c6:9c:3e:e5:
         a9:d0:8d:90:7d:32:40:c8:79:42:3d:17:24:6d:f5:01:28:41:
         d1:e2:8c:69:fc:01:63:f7:f1:2d:8a:35:3a:1f:f5:bc:9f:c6:
         26:c0:1b:69:31:38:48:1d:8f:e6:f4:18:33:86:71:b8:29:b2:
         36:45:83:f4:0f:93:fd:14:2b:aa:6e:52:8e:af:b0:fd:61:ad:
         96:69:be:a4:53:9c:f8:34:8c:4a:6f:09:0f:58:1c:d8:66:2a:
         ee:e7:4e:0d:bd:c9:93:d0:1d:f9:7f:cb:a9:9b:0e:fd:b2:1e:
         38:ed:ba:c1:07:2e:f7:c2:68:4b:10:26:47:de:02:1c:62:35:
         6c:72:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org