Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32332d3233203d3e20323639323630.roa
File:                     34352e3138322e3233322e302f32332d3233203d3e20323639323630.roa (raw, json)
Hash identifier:          4yf07TAsLqZ3oDXNKcj1j5xVHHfPWqgEKBWtEtrJuv8=
Subject key identifier:   E8:44:69:A4:BD:E1:7E:A4:93:80:24:A2:D6:82:B3:EE:0D:8F:6D:2D
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       050C6C553BE279EBDF6B9A86AB958A2332B35EF3
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32332d3233203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 15:00:26 +0000
ROA not before:           Sun 02 Jun 2024 14:55:26 +0000
ROA not after:            Sun 01 Jun 2025 15:00:26 +0000
asID:                     269260
IP address blocks:        45.182.232.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0c:6c:55:3b:e2:79:eb:df:6b:9a:86:ab:95:8a:23:32:b3:5e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:55:26 2024 GMT
            Not After : Jun  1 15:00:26 2025 GMT
        Subject: CN=E84469A4BDE17EA4938024A2D682B3EE0D8F6D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:52:58:ab:48:2d:2a:3b:5d:5d:a5:76:f2:
                    ad:6b:0b:cd:c2:fd:28:2b:2e:41:cc:33:ed:4c:49:
                    5a:22:55:b7:f1:59:27:30:68:1c:b3:86:98:b6:10:
                    c4:7c:5a:76:65:d7:23:13:f7:92:d1:bc:a7:f8:8f:
                    ea:3c:ec:86:8e:b1:2f:6d:27:0c:31:c3:cb:1c:40:
                    7e:36:ec:86:66:3c:f6:69:03:67:c6:5e:92:95:97:
                    92:01:03:8a:c3:77:e1:a8:6f:1b:36:7e:fa:1f:43:
                    bd:93:63:c0:1c:6e:f3:d9:4e:36:2a:e9:e4:72:fe:
                    c0:b9:7a:73:7a:94:af:de:fa:f9:be:4a:54:28:5c:
                    2b:bd:49:59:1d:d2:ca:a8:12:85:f4:10:ff:74:fc:
                    c2:8c:5d:2c:d4:ee:1b:2b:69:63:ef:ca:ad:06:7b:
                    54:68:a7:12:35:bb:47:9d:61:4a:47:5e:3f:f2:09:
                    9a:e4:8f:ef:49:2f:95:d7:09:99:45:87:51:6a:71:
                    84:27:2f:bb:64:97:44:d3:8b:3c:23:1b:76:5b:62:
                    6f:7f:52:0a:39:e6:78:fc:3d:7e:87:c0:b5:01:c5:
                    88:49:58:d5:a7:97:3a:4d:61:a8:0c:cb:05:07:58:
                    ee:51:e2:32:1a:9a:60:06:cd:3f:28:07:23:3b:6e:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:44:69:A4:BD:E1:7E:A4:93:80:24:A2:D6:82:B3:EE:0D:8F:6D:2D
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32332d3233203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:00:ae:ca:a3:56:ed:e5:16:51:28:0f:15:5e:9b:be:70:ad:
         d1:3f:58:41:a7:8e:4b:b4:32:91:0c:d0:3c:e9:11:18:13:ab:
         4c:f2:a9:7e:69:5c:08:67:1e:7e:6f:5d:4c:18:92:7f:c3:70:
         4e:a7:2b:a7:a8:52:30:d9:d9:eb:4e:a5:6e:aa:27:a4:c9:db:
         8e:e5:43:7a:76:5c:90:7f:9f:bf:89:66:80:af:d0:a6:b5:aa:
         61:bf:d9:52:01:e3:7b:63:fd:2f:15:0e:9b:80:13:63:d0:2d:
         5f:c8:ee:d5:fc:67:c4:87:c0:28:be:be:73:a5:54:18:34:64:
         4e:57:38:79:2a:d0:f2:b0:41:5b:07:cf:79:ca:7c:e5:6b:73:
         f9:78:83:77:6b:1f:18:88:8c:5e:bf:ff:bf:f9:25:ab:28:29:
         39:2f:7e:f4:fa:d8:45:98:ce:bb:ac:9a:c4:de:f8:f4:f1:36:
         79:7b:78:05:b2:97:91:d4:b6:10:8b:2d:a8:cb:b5:ed:a4:af:
         2d:83:20:f4:0c:26:0c:1c:c0:74:d6:c7:9a:14:a7:31:ae:e1:
         f3:da:9c:72:b7:b0:77:f6:a7:d2:f0:4e:05:5e:1f:a6:78:85:
         c8:8d:38:00:57:fa:d6:f9:de:40:f1:16:bf:69:ff:d4:4f:8c:
         fa:5d:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org