Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32322d3232203d3e20323639303032.roa
File:                     34352e3137362e3136302e302f32322d3232203d3e20323639303032.roa (raw, json)
Hash identifier:          Y6Fax7NkRSVxW9GLx0f3ZXfz67XYZkX53uKA6izgpA0=
Subject key identifier:   F0:D0:A5:8C:BD:60:62:CC:01:80:5A:41:9C:96:21:C0:09:5C:18:CF
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       3A2F049DD8CB53843A6337B08857646E72AA33DD
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32322d3232203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:39 +0000
ROA not before:           Thu 04 Apr 2024 02:56:39 +0000
ROA not after:            Thu 03 Apr 2025 03:01:39 +0000
asID:                     269002
IP address blocks:        45.176.160.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2f:04:9d:d8:cb:53:84:3a:63:37:b0:88:57:64:6e:72:aa:33:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:39 2024 GMT
            Not After : Apr  3 03:01:39 2025 GMT
        Subject: CN=F0D0A58CBD6062CC01805A419C9621C0095C18CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:83:a8:f7:e8:8d:32:d6:ab:44:f8:f4:0f:65:
                    5b:e6:47:dc:b8:fb:0b:01:5b:89:6b:95:44:07:b5:
                    3b:e5:f9:a0:54:b8:4c:f9:15:4a:d2:49:2d:bf:32:
                    20:32:ce:79:72:05:3c:15:f5:1d:93:1e:9b:b6:41:
                    f4:7c:4c:c1:9e:f4:f2:4b:c4:a0:a4:60:6b:6a:26:
                    b9:52:60:10:df:b6:e1:42:b4:b4:6e:35:39:ec:c6:
                    ab:a2:85:ab:33:54:f1:8a:e0:ad:cf:93:68:81:b7:
                    ef:15:dd:31:9f:bd:e3:71:39:dd:e9:70:b7:4f:77:
                    5d:b3:4c:4d:81:f8:34:c5:a4:46:6c:14:c8:c2:9d:
                    18:e7:d3:eb:71:57:ba:0c:d1:49:e6:cc:95:29:d0:
                    13:c2:8d:b3:d5:1c:1e:a3:f6:36:07:06:72:33:70:
                    2f:f1:6d:e3:28:a0:08:1f:63:7e:ee:f3:59:5a:e7:
                    a8:89:5a:54:f0:78:a3:24:23:9f:9a:8e:36:44:f7:
                    89:7d:ce:21:9e:b1:0d:6b:d1:37:2b:0b:ee:9c:f4:
                    33:f7:ca:19:55:9d:dc:a5:0c:19:6e:4a:b9:d5:e8:
                    10:4a:86:b7:ef:5c:f1:92:dd:10:0b:9f:55:a8:1a:
                    5c:79:42:18:9b:f3:7b:8d:8a:08:66:66:1f:00:77:
                    05:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:A5:8C:BD:60:62:CC:01:80:5A:41:9C:96:21:C0:09:5C:18:CF
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32322d3232203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:c4:35:e4:51:e5:26:30:1b:e2:0c:83:91:00:aa:ba:9f:
         3f:de:21:00:90:7d:02:29:9e:ad:95:10:6f:b6:d7:23:d8:bb:
         c1:52:ed:08:7f:0d:2d:09:23:fb:69:c5:ea:f5:28:a8:ff:8d:
         c0:ed:1a:a8:97:ad:46:77:00:05:b2:fd:00:90:8c:00:45:88:
         bd:7b:43:ff:ca:b8:aa:59:1d:b7:9a:62:f7:db:33:d0:a8:3c:
         ff:5d:b4:5e:70:4a:3f:78:a0:de:8e:b4:92:24:1d:d9:a1:94:
         50:3c:6b:a0:7c:79:e2:bf:e5:8e:19:72:35:ae:0f:5c:8c:e2:
         d5:b2:90:56:c6:5f:9b:e8:e0:11:87:46:b6:8b:3c:fc:61:b9:
         00:dc:39:65:dc:c7:5f:f4:26:0f:db:b9:ee:f5:36:84:ee:af:
         98:f4:cf:3f:f7:1b:92:44:35:81:bf:62:90:4e:8a:87:6a:fa:
         a2:88:87:c0:11:36:68:53:7c:9d:7c:46:80:4d:30:45:33:cb:
         3b:07:e1:42:c5:ac:b0:14:e2:5a:55:8a:d8:8f:a6:2c:3b:ec:
         5a:97:13:40:39:bb:b3:e1:43:79:5b:a1:11:31:c7:fc:b6:c1:
         21:6e:b8:a5:41:a8:c3:a0:04:93:ce:84:ba:ea:d7:0d:c8:c9:
         35:8c:bf:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org