Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32322d3232203d3e20323639323630.roa
File:                     34352e3138322e3233322e302f32322d3232203d3e20323639323630.roa (raw, json)
Hash identifier:          zqVP8sR7tDJlmgEmwgLNg/6feo0hFlrtV7EZwTObjPE=
Subject key identifier:   DB:8C:39:17:18:14:CE:88:09:FE:5C:FC:FB:ED:14:C6:56:AD:A6:56
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       3AF635321C82B62916A4CB993F3006261CBA6731
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32322d3232203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 14:58:39 +0000
ROA not before:           Sun 02 Jun 2024 14:53:39 +0000
ROA not after:            Sun 01 Jun 2025 14:58:39 +0000
asID:                     269260
IP address blocks:        45.182.232.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f6:35:32:1c:82:b6:29:16:a4:cb:99:3f:30:06:26:1c:ba:67:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:53:39 2024 GMT
            Not After : Jun  1 14:58:39 2025 GMT
        Subject: CN=DB8C39171814CE8809FE5CFCFBED14C656ADA656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:5d:84:4b:81:b7:21:bb:10:22:70:62:43:
                    bd:d7:73:b7:12:86:80:77:db:39:9e:dd:7b:c8:7a:
                    03:83:c3:c4:82:11:09:e1:d3:b7:1b:44:b2:7f:43:
                    7d:06:92:0a:d9:2e:73:29:7b:71:ca:6b:38:af:04:
                    aa:68:ad:11:92:31:75:35:66:f1:4d:ad:0c:e7:b0:
                    98:54:1c:53:6f:01:b7:19:3c:59:84:ee:3b:1a:f4:
                    fe:70:00:27:87:91:80:21:af:9d:f8:4e:8c:61:55:
                    83:c1:c3:2e:4a:e7:66:9b:e3:51:73:87:9e:ce:25:
                    4b:69:04:07:b6:ae:a0:3f:05:3d:9e:b4:ab:ec:f5:
                    fe:21:31:19:58:66:82:f8:c2:b2:1b:1f:cf:b7:2b:
                    18:2d:72:15:ab:1e:51:75:a5:17:ed:69:81:59:b9:
                    cd:69:b4:63:f6:0d:00:d0:b6:d6:97:79:a5:64:86:
                    9d:77:c4:9d:dd:cb:97:6c:d1:19:b9:49:4d:84:a3:
                    27:ad:ea:72:22:f5:15:bc:fb:ef:00:2d:99:cc:19:
                    f7:b0:39:4f:a3:35:14:a2:7d:03:39:57:d4:9e:a4:
                    13:46:db:83:9a:5a:44:aa:8b:13:44:02:5d:e9:f0:
                    e8:f4:0d:db:33:57:d4:c3:f5:9d:bb:5c:37:69:2b:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:39:17:18:14:CE:88:09:FE:5C:FC:FB:ED:14:C6:56:AD:A6:56
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32322d3232203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:fd:5b:99:cc:8b:33:4e:50:31:8c:48:17:d1:b1:1d:7b:
         41:3c:43:a3:99:9a:d8:b7:99:aa:b5:7a:30:5e:30:de:ab:6f:
         b6:72:0d:c5:f7:cf:e8:1b:c2:7c:be:c7:17:23:5b:62:0e:7a:
         b9:8e:12:af:d2:e2:96:16:64:2f:fc:28:13:ec:83:a9:d4:4c:
         4b:3b:ee:9c:64:fa:b3:ab:e6:5a:52:80:50:8e:1c:7c:7c:17:
         e4:16:50:ca:85:25:fc:df:c7:93:49:92:fb:61:24:49:32:02:
         00:a5:d3:b1:db:a9:33:75:92:a4:5d:29:bd:c7:a9:69:f3:76:
         01:d3:b3:14:a5:42:5d:24:e6:bd:2e:48:4a:ae:24:6c:42:b8:
         13:2a:c3:63:4d:b2:5d:6f:9e:3b:8c:ab:7d:8b:e5:eb:82:f4:
         24:56:ef:10:c7:c0:ef:27:3b:06:17:30:ca:da:cd:b1:c3:e9:
         98:48:f6:ff:36:d7:d0:74:3c:37:05:9b:c9:23:ee:0d:93:5c:
         ca:5f:d1:ff:c3:87:35:40:25:38:75:0e:67:85:b6:4c:88:81:
         ca:2c:c5:e7:da:7e:b8:59:03:22:f8:46:bd:99:4f:e7:20:f1:
         26:25:d1:f6:6b:42:9e:52:9e:91:c4:e1:82:d8:1e:63:55:63:
         0c:72:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org