Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32342d3234203d3e20323639323630.roa
File:                     34352e3138322e3233322e302f32342d3234203d3e20323639323630.roa (raw, json)
Hash identifier:          QN1aHjLCRa+fVXwnpbXi5wFdN7+O55pFGcpQ27SA+TU=
Subject key identifier:   A3:E8:89:A3:D0:9A:E3:6E:DB:4E:26:C9:34:16:40:14:5E:89:54:E8
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       3D2A552468676869205D69E693EA431FEFF2640E
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32342d3234203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 14:59:10 +0000
ROA not before:           Sun 02 Jun 2024 14:54:10 +0000
ROA not after:            Sun 01 Jun 2025 14:59:10 +0000
asID:                     269260
IP address blocks:        45.182.232.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2a:55:24:68:67:68:69:20:5d:69:e6:93:ea:43:1f:ef:f2:64:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:54:10 2024 GMT
            Not After : Jun  1 14:59:10 2025 GMT
        Subject: CN=A3E889A3D09AE36EDB4E26C9341640145E8954E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:58:15:59:7e:1d:e7:48:35:fd:63:93:b0:
                    e1:bf:7b:d3:63:88:d6:c6:a3:51:56:3c:96:85:6b:
                    40:b4:61:f1:48:bb:ea:65:ef:1d:5e:88:09:c7:bb:
                    60:a2:ab:06:8a:7d:f3:dc:60:2c:44:db:d2:f9:32:
                    3a:ab:ee:03:66:46:87:47:e9:f9:c1:b9:50:79:09:
                    6e:1d:57:93:92:08:65:d7:ce:96:f6:31:e6:f1:7a:
                    0d:9e:60:41:14:ef:b6:89:67:fe:6d:8e:59:4f:48:
                    c9:7e:15:47:64:e4:69:c0:d8:39:be:95:be:09:4d:
                    e9:75:bd:4d:2f:b6:e9:02:0b:6e:1e:bd:7b:be:25:
                    03:c3:0b:dd:1b:60:0c:81:6e:da:8b:de:fc:49:1b:
                    ca:d3:cc:52:4f:d4:30:69:47:b3:e2:80:41:7f:9d:
                    1c:cd:1c:00:a2:19:2e:67:d1:f1:d0:96:76:f4:1b:
                    89:8a:a9:df:9e:d0:df:65:03:a2:ce:36:52:0e:4f:
                    5c:2c:26:62:74:72:ff:56:d8:ac:b0:e2:75:c9:9e:
                    d9:db:d0:ae:8b:a6:60:15:1c:b3:19:49:31:75:b4:
                    ef:80:16:6a:a3:4f:f7:7a:9f:dc:60:25:88:2c:f0:
                    c2:5d:93:b1:06:a1:ac:32:eb:75:9a:05:44:3f:6a:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E8:89:A3:D0:9A:E3:6E:DB:4E:26:C9:34:16:40:14:5E:89:54:E8
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233322e302f32342d3234203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:6a:29:89:eb:5a:c2:b7:e5:37:21:ac:5e:e7:d8:2a:80:8b:
         de:65:2e:b4:75:e1:91:0c:b3:8e:29:08:af:07:4e:74:e2:d5:
         f0:6c:6f:0b:be:eb:7b:0c:39:2d:5d:ee:8b:64:3b:3d:c5:c1:
         7c:08:4c:ce:da:05:5f:f8:59:b5:46:e3:dc:47:e2:0c:d7:f9:
         10:54:e6:cc:4d:00:8c:0f:78:d0:08:83:cd:ca:29:45:31:82:
         22:d9:d5:9c:2c:11:08:c8:4f:38:70:5d:b5:41:96:13:ca:07:
         2e:8a:94:91:52:6b:a1:7f:bc:3d:b4:1a:65:13:36:55:27:85:
         a7:85:2b:1c:db:24:82:6e:ed:c6:57:f4:39:11:21:24:b6:ef:
         cc:eb:0c:a6:3d:a2:50:b0:ff:cf:3b:0a:fa:21:1b:c2:27:ee:
         bf:e5:36:49:65:e1:f7:76:0d:fb:e5:d3:d1:78:ec:6c:be:94:
         86:1a:c5:f0:ee:06:db:6b:a0:60:5c:bd:42:9f:70:4c:91:0a:
         7e:13:30:5e:21:3a:17:25:a5:cd:cd:a4:df:5f:7a:9b:8c:52:
         05:b4:56:4c:b6:0b:37:b0:11:56:7d:4d:f5:af:d0:37:c9:f1:
         6a:97:8c:b9:88:8c:b6:2a:b3:20:da:1e:dd:59:a3:8c:14:f6:
         7a:b9:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org