Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
File:                     34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa (raw, json)
Hash identifier:          pr3LFMeigDMgKUggamB1fXR0U4F/PG3SkVDZAZ09TRw=
Subject key identifier:   E0:7B:5C:40:70:8A:73:79:6C:9D:E8:84:8A:7E:B3:0F:60:1F:7C:36
Certificate issuer:       /CN=E8F604C1235EEB68AB470B1DE625543638D88002
Certificate serial:       57711BF88B4C30A59A8718467EEC94DB25F5208C
Authority key identifier: E8:F6:04:C1:23:5E:EB:68:AB:47:0B:1D:E6:25:54:36:38:D8:80:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8F604C1235EEB68AB470B1DE625543638D88002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa
Signing time:             Wed 03 Apr 2024 21:17:45 +0000
ROA not before:           Wed 03 Apr 2024 21:12:45 +0000
ROA not after:            Wed 02 Apr 2025 21:17:45 +0000
asID:                     267320
IP address blocks:        45.233.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:71:1b:f8:8b:4c:30:a5:9a:87:18:46:7e:ec:94:db:25:f5:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8F604C1235EEB68AB470B1DE625543638D88002
        Validity
            Not Before: Apr  3 21:12:45 2024 GMT
            Not After : Apr  2 21:17:45 2025 GMT
        Subject: CN=E07B5C40708A73796C9DE8848A7EB30F601F7C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:23:e8:56:a2:69:44:a7:ef:ac:89:59:cc:
                    86:c8:31:0c:56:6c:ba:42:eb:bb:95:ee:7f:8d:69:
                    b6:9b:fe:ea:e9:b0:c0:ad:e0:0a:ca:ba:a3:60:69:
                    e4:22:23:e6:e6:eb:7a:38:e1:3c:28:10:c7:d8:60:
                    c2:a8:c7:0a:7c:9d:58:ba:16:81:a3:91:c4:1c:c5:
                    11:b9:f0:1b:7b:41:31:ab:c5:04:39:34:10:6f:5a:
                    db:58:4e:eb:83:52:a1:02:6e:b3:5e:7e:b9:3e:6d:
                    14:ed:bc:48:54:2e:85:de:21:16:81:ae:4c:ce:8f:
                    0b:45:b9:84:7d:f6:e9:48:55:a8:2e:77:d3:bd:04:
                    1d:00:6c:4d:78:b9:70:dd:6f:a9:12:86:1e:95:c7:
                    c7:e0:7c:44:1a:da:dd:b1:fb:57:90:62:71:64:3f:
                    22:4c:d6:a6:92:88:1d:ec:69:1b:73:33:24:3c:32:
                    93:5c:db:3f:63:88:e1:9c:72:1b:be:f4:7c:3c:98:
                    a2:6c:f7:87:3b:88:22:2b:27:85:a3:fa:28:23:1d:
                    be:db:65:e0:17:ce:8e:f8:b4:7d:9e:9b:37:c1:0e:
                    d6:c8:9a:a8:3c:44:c7:4a:92:6f:c0:29:ee:db:49:
                    11:56:ef:ec:15:89:35:4d:8b:9e:6d:ab:d7:18:4f:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:7B:5C:40:70:8A:73:79:6C:9D:E8:84:8A:7E:B3:0F:60:1F:7C:36
            X509v3 Authority Key Identifier:
                keyid:E8:F6:04:C1:23:5E:EB:68:AB:47:0B:1D:E6:25:54:36:38:D8:80:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/E8F604C1235EEB68AB470B1DE625543638D88002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8F604C1235EEB68AB470B1DE625543638D88002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/1/34352e3233332e3136342e302f32322d3234203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:61:78:1d:7c:3c:e0:34:d4:7d:af:68:fd:b5:8c:f5:a1:1e:
         ee:bb:31:61:ae:89:df:b2:3c:94:0f:2d:11:c3:85:58:88:8a:
         a3:87:9b:37:5c:db:43:5a:5b:cc:d4:02:d6:41:14:6d:1b:4a:
         d8:84:af:8c:6b:40:63:72:65:9f:a4:59:7f:5d:cb:a6:5f:4e:
         1e:cd:88:d3:b3:0a:ac:c2:d8:53:2b:24:37:9e:3f:49:3e:df:
         57:85:a3:f1:a4:4d:d1:15:92:c4:2e:b7:51:7f:17:53:3a:73:
         32:ae:aa:20:6f:c2:38:27:76:66:ec:fc:4d:ba:72:54:59:f7:
         ee:b9:57:7d:aa:23:b0:fe:b5:90:e9:97:f7:c1:c5:ec:e6:72:
         b6:36:5f:92:8e:06:3e:c6:10:4e:fa:33:8a:0b:1a:d1:71:a7:
         31:3b:a3:69:df:b5:ca:c3:d9:09:c5:4b:c0:51:58:c2:e8:96:
         5d:59:1d:ee:92:7e:60:8c:aa:94:48:73:37:7c:65:b8:e9:ee:
         3b:e7:06:11:75:c9:a5:18:94:d1:3e:87:28:f5:f0:e3:fb:27:
         f0:a0:5e:41:bc:b2:6b:4f:63:82:5c:6c:ec:bd:67:9d:9b:52:
         a3:27:c4:7d:db:ce:e3:8d:cf:3c:3c:5c:22:e2:58:4e:56:69:
         20:af:57:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 15:33:21 2024 by rpki-client on console-fra.rpki-client.org