Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233342e302f32342d3234203d3e20323639323630.roa
File:                     34352e3138322e3233342e302f32342d3234203d3e20323639323630.roa (raw, json)
Hash identifier:          1plok1VekZy6umFoHqAdLdOxucesddbbnDDPqltydZw=
Subject key identifier:   35:33:F3:12:2F:95:B7:FB:8B:E2:F5:36:05:AC:4E:32:37:47:8B:19
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       5FC34FD2D52483F93F740094FB0322C1A12068D5
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233342e302f32342d3234203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 14:59:55 +0000
ROA not before:           Sun 02 Jun 2024 14:54:55 +0000
ROA not after:            Sun 01 Jun 2025 14:59:55 +0000
asID:                     269260
IP address blocks:        45.182.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c3:4f:d2:d5:24:83:f9:3f:74:00:94:fb:03:22:c1:a1:20:68:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:54:55 2024 GMT
            Not After : Jun  1 14:59:55 2025 GMT
        Subject: CN=3533F3122F95B7FB8BE2F53605AC4E3237478B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:f6:f8:ce:7d:6c:03:6f:4c:2f:a1:d7:71:
                    fb:f1:70:81:c8:35:17:c4:8b:dd:4a:e2:4f:4a:ef:
                    46:2e:d3:76:50:0e:55:c4:02:bb:3c:50:39:26:26:
                    29:95:6b:bb:43:6e:42:6c:04:bd:79:3f:3d:52:cf:
                    38:8b:8f:88:47:e0:13:2c:45:d3:73:46:cb:67:d8:
                    ab:6f:57:ef:34:80:15:bd:f9:50:2f:e0:97:3f:62:
                    ea:8a:9c:ca:65:ad:6c:6c:97:8f:7e:33:a5:52:ef:
                    d2:64:73:0f:d9:92:ff:13:f1:57:50:af:d3:c7:f3:
                    6a:32:ce:1b:a6:2f:9a:24:65:d4:a0:2d:e4:75:c2:
                    a8:68:c6:13:55:a9:3b:5f:bf:5b:44:21:1f:dc:f4:
                    93:d9:6d:2e:66:da:7a:a5:07:37:d5:17:6e:27:71:
                    db:70:a2:2a:a0:9d:a7:62:08:d9:f6:3a:f1:1d:ea:
                    8c:5b:8c:4b:c2:65:ef:e0:cb:2f:b5:c6:0b:df:7a:
                    63:ce:c3:c8:5e:bd:50:7e:e4:28:78:46:fd:30:d5:
                    d6:d9:7e:06:7d:a4:7f:cd:f6:47:e6:55:c8:d8:38:
                    ce:e0:72:04:61:0b:a7:b1:cc:8e:1c:27:01:ec:b6:
                    4c:d7:65:2c:a5:37:0a:bf:e1:94:5f:d6:c5:a3:21:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:F3:12:2F:95:B7:FB:8B:E2:F5:36:05:AC:4E:32:37:47:8B:19
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233342e302f32342d3234203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:e9:6c:34:88:67:aa:e2:a6:38:09:49:b4:93:11:3b:54:78:
         e3:96:4f:84:81:07:9a:28:37:4b:1a:55:4d:b8:e0:ca:7b:ab:
         b4:c9:fe:e6:31:2a:ed:38:cf:bd:1e:01:19:97:28:27:37:d4:
         f0:c4:85:7d:c0:e6:68:82:b6:36:9f:ba:3f:ab:cf:80:cf:ff:
         27:67:0b:c6:86:54:c2:7e:d6:85:71:04:6f:c6:4f:de:e4:45:
         e8:73:f7:22:69:c6:f9:fb:40:b3:b3:b7:86:7b:ed:1b:47:6f:
         77:bb:f1:26:92:58:ae:71:04:ad:1c:cf:d0:4e:4c:69:08:35:
         17:ea:58:e9:e7:09:a7:43:0b:c1:f9:c1:bb:5d:62:c1:d2:d4:
         71:91:1e:c8:52:30:f2:d9:7e:b7:79:ed:bf:8d:79:48:c0:0c:
         65:3d:07:e6:ec:ac:06:3b:ee:46:10:a1:ce:54:21:0a:86:b9:
         32:b1:5c:19:a6:79:d3:8f:97:e2:8e:57:e1:c5:c5:80:81:55:
         7e:b5:68:9c:96:0c:ee:28:f9:bb:1c:c1:d9:72:49:b4:8a:0d:
         da:47:c3:d2:54:ed:72:3f:4e:ad:c5:a4:7a:f2:fc:7b:4b:af:
         23:39:e1:9a:8e:1f:0f:20:b7:ff:38:0e:70:24:b9:72:fc:ee:
         21:29:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org