Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa
File:                     34352e3139302e32322e302f32332d3233203d3e20323639363038.roa (raw, json)
Hash identifier:          d89NMQkAu4a8rvkpnJDGsfbNw5KtdE8/yvNTzQwuUJs=
Subject key identifier:   37:F8:5D:12:0B:16:D5:CC:17:80:1E:ED:82:50:87:FA:DE:66:08:E0
Certificate issuer:       /CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
Certificate serial:       1EA92DDF471C0A82DA8D99A4735734784FEBA25D
Authority key identifier: 0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa
Signing time:             Wed 03 Apr 2024 22:20:07 +0000
ROA not before:           Wed 03 Apr 2024 22:15:07 +0000
ROA not after:            Wed 02 Apr 2025 22:20:07 +0000
asID:                     269608
IP address blocks:        45.190.22.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a9:2d:df:47:1c:0a:82:da:8d:99:a4:73:57:34:78:4f:eb:a2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E455BD601128E5D432F9B2640842BE59B81B6FB
        Validity
            Not Before: Apr  3 22:15:07 2024 GMT
            Not After : Apr  2 22:20:07 2025 GMT
        Subject: CN=37F85D120B16D5CC17801EED825087FADE6608E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:48:3d:73:c0:2b:90:bb:8d:8b:7b:8d:e2:
                    47:ff:bc:1a:b6:aa:57:49:07:5b:20:23:7c:38:cf:
                    db:7f:b7:00:d4:6a:1d:88:bd:80:93:12:9b:e9:b2:
                    52:c1:88:ee:66:13:10:ad:51:46:9f:4a:72:16:da:
                    15:bd:71:3a:91:63:94:df:81:41:ee:e5:b2:76:23:
                    20:f3:ca:59:d8:e2:85:e1:15:1e:c8:d4:11:5c:2d:
                    8b:eb:07:da:f7:d5:8c:0d:3b:64:35:b1:f0:24:9a:
                    da:03:56:9d:79:bb:61:ee:68:91:c9:92:c8:91:b3:
                    05:32:b2:a9:9d:a0:32:6d:ce:b4:ad:0d:df:2a:90:
                    ed:cf:4f:25:ee:ea:3d:a1:76:c8:a4:c2:0d:88:42:
                    d8:47:7a:28:8d:55:e8:4e:58:d2:bb:e0:96:02:1a:
                    cf:72:47:ce:ef:21:05:9f:70:0f:30:77:16:d0:e5:
                    e7:39:be:b5:ea:64:14:73:15:7e:ff:8d:4d:66:2a:
                    36:06:b6:86:e6:7e:56:27:61:58:7a:2e:ac:c2:6f:
                    87:82:4f:33:47:00:d0:a6:cc:43:87:75:f9:82:67:
                    c0:ee:0a:0b:a7:a7:c1:85:f5:c1:92:a8:9f:fa:95:
                    89:c2:0f:9d:47:44:52:5c:b7:10:d4:fe:a7:f4:8d:
                    6f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F8:5D:12:0B:16:D5:CC:17:80:1E:ED:82:50:87:FA:DE:66:08:E0
            X509v3 Authority Key Identifier:
                keyid:0E:45:5B:D6:01:12:8E:5D:43:2F:9B:26:40:84:2B:E5:9B:81:B6:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E455BD601128E5D432F9B2640842BE59B81B6FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/1/34352e3139302e32322e302f32332d3233203d3e20323639363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:b5:ee:0c:4b:13:0b:cf:95:cf:7e:30:f2:59:95:f9:73:88:
         b1:ed:27:b9:f8:89:3e:ac:d5:73:86:8c:79:3b:ae:e2:2e:70:
         d3:64:9d:28:7e:8e:96:3a:03:3a:ff:c6:21:34:c7:9b:2e:0a:
         2f:64:21:57:e5:9e:fb:11:24:0a:f3:a3:7b:17:40:24:e3:18:
         7d:a2:67:31:aa:48:01:4b:e9:df:63:2e:63:74:c7:a9:7b:81:
         b5:df:95:29:5f:49:29:3c:05:4e:6e:fb:d6:3c:9f:ca:3a:36:
         4f:c3:12:1c:9b:84:13:0b:45:87:b6:82:e1:60:e5:47:ec:c1:
         d6:65:7b:d8:b9:c8:1b:5b:3b:db:fa:67:45:9d:d0:b4:7f:45:
         27:f1:c3:9f:29:7f:af:9b:19:db:d9:5a:4e:be:9b:01:68:75:
         b4:62:85:46:cb:00:e6:0e:2d:c3:de:60:5d:14:e1:9c:d9:86:
         1a:b3:fc:a8:7d:d1:9f:79:b2:c0:eb:d8:fe:a8:19:a9:6a:11:
         69:7f:36:79:e0:40:55:03:d1:59:b7:75:30:d3:42:df:cf:12:
         d0:a3:cf:4c:3c:2c:a6:ee:5b:5e:c7:1d:e7:e9:c8:bf:3e:be:
         c0:27:dc:70:51:6d:51:79:bf:3d:6a:88:b2:4e:b2:ce:4d:0b:
         19:ab:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org