Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34372e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          eL4no8l+tam7nmD17Jkl22yvsKcLpy1jcFRSZpTI/V4=
Subject key identifier:   22:F7:71:82:05:9B:35:3F:0A:2A:05:BC:11:35:A1:31:86:EC:28:93
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       3B99FBF5FC74FF70315475520814F8DDBC36EBB2
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:52 +0000
ROA not before:           Thu 04 Apr 2024 11:04:52 +0000
ROA not after:            Thu 03 Apr 2025 11:09:52 +0000
asID:                     267079
IP address blocks:        45.227.47.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:99:fb:f5:fc:74:ff:70:31:54:75:52:08:14:f8:dd:bc:36:eb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:52 2024 GMT
            Not After : Apr  3 11:09:52 2025 GMT
        Subject: CN=22F77182059B353F0A2A05BC1135A13186EC2893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:f9:fb:cc:6c:f2:77:39:46:58:31:b2:48:
                    42:e1:7c:b1:66:2b:77:12:e4:9a:8a:4c:8f:5d:71:
                    fb:ea:e0:0a:d6:99:14:eb:22:d1:16:c2:c2:f3:53:
                    11:5a:d2:b3:a1:74:0d:79:e2:84:68:aa:85:5a:6b:
                    4f:6b:e2:1c:7e:49:e4:9d:40:08:3a:83:41:bb:ea:
                    b0:c2:93:b1:a1:ce:d2:fd:8b:f3:ef:bb:88:43:bf:
                    36:60:db:fa:cd:f0:81:e8:00:13:4b:ab:e5:4c:28:
                    11:dd:6a:c3:c2:57:f7:b7:f5:cd:7c:88:97:be:02:
                    06:fc:f6:e4:bc:dc:d9:f2:8c:13:e5:03:d5:f5:0e:
                    09:49:d9:dc:ad:cd:04:47:21:56:f2:5c:41:49:c8:
                    0f:ba:27:ec:c4:09:8b:15:5f:ed:25:b2:e2:59:fa:
                    ca:54:c9:56:02:64:ab:72:c4:e5:40:de:e2:df:51:
                    a0:ce:c0:42:90:cb:a1:79:de:fd:89:1d:64:1b:f5:
                    f4:eb:62:ac:90:6f:3a:b4:f2:bb:83:aa:42:2c:7b:
                    e4:5a:84:65:54:8a:8d:f1:6d:74:ae:94:3a:d8:7b:
                    2f:78:f0:e5:b1:29:1a:8c:94:43:44:03:81:cf:30:
                    3a:c9:2b:52:5f:f3:58:00:6f:7a:64:57:7a:d5:80:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:71:82:05:9B:35:3F:0A:2A:05:BC:11:35:A1:31:86:EC:28:93
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34372e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e2:a4:3f:bb:ad:cd:36:66:47:0b:a3:85:ef:12:b5:a7:b1:
         96:11:69:cc:aa:7a:78:7d:23:7f:b6:c2:20:e1:62:e4:5c:9e:
         99:36:c1:82:78:18:75:c4:6e:34:30:92:38:05:72:f3:f9:f8:
         3b:a4:6c:9c:66:59:96:65:48:8c:b1:76:a9:3d:f9:48:fc:8e:
         9e:57:09:a1:af:a8:b8:3e:4b:78:66:e9:e3:f8:f4:0c:b2:2e:
         a8:59:10:54:d0:0c:68:11:ff:72:68:f9:31:d4:2b:99:fc:02:
         d0:2b:53:eb:ac:01:9a:c5:13:4c:b9:a8:57:2f:86:fb:0d:32:
         ba:cf:92:7f:e8:d6:2b:75:ea:1f:18:fb:d5:0e:5f:f1:57:ca:
         e4:10:44:f1:5e:65:35:39:10:10:fb:06:c7:10:c3:76:e1:17:
         ef:0f:7d:73:af:1b:f6:26:ef:e7:98:c9:72:02:7e:52:dc:b1:
         54:38:c4:9b:f3:26:8e:26:3c:31:fa:3b:24:2f:5a:56:24:69:
         b5:d0:b3:61:52:2d:8d:0d:3b:3b:ce:70:e3:91:2b:9d:64:b3:
         69:95:6d:8a:7b:5d:79:60:7d:68:c8:c5:16:be:e5:26:44:b8:
         57:06:32:57:97:15:71:29:67:50:ce:c3:ca:85:42:3d:bb:2a:
         6c:0a:b7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 17:43:49 2024 by rpki-client on console-ams.rpki-client.org