Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa
File:                     34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa (raw, json)
Hash identifier:          BwBAKrNStDeK/ekbprjvGA6omKPP6p4AXfe7zzB+NXE=
Subject key identifier:   87:1D:E4:59:34:1F:69:1C:BE:B8:7C:B7:A9:05:98:F1:A3:5B:2E:97
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       54C866CC55A2E2BEA02B40989F07414F480C9953
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:44 +0000
ROA not before:           Thu 04 Apr 2024 02:56:44 +0000
ROA not after:            Thu 03 Apr 2025 03:01:44 +0000
asID:                     269002
IP address blocks:        45.176.160.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c8:66:cc:55:a2:e2:be:a0:2b:40:98:9f:07:41:4f:48:0c:99:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:44 2024 GMT
            Not After : Apr  3 03:01:44 2025 GMT
        Subject: CN=871DE459341F691CBEB87CB7A90598F1A35B2E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:45:1a:bc:56:1a:6f:35:aa:61:c4:5b:a3:
                    45:a1:76:21:7f:2a:45:32:6c:11:67:17:33:e1:6e:
                    5f:a7:4a:9f:d2:41:60:0f:32:b2:83:ee:0a:51:17:
                    45:04:3d:9e:62:07:fd:c0:0a:ff:fa:c1:f4:fd:8d:
                    49:54:70:f6:a1:11:50:70:a2:91:e3:49:f5:2f:54:
                    7f:3c:2c:bb:38:36:21:02:21:29:df:86:95:35:5c:
                    b7:05:1d:c1:ab:6b:d6:18:ee:96:65:5e:39:6d:03:
                    b1:98:32:51:00:b1:82:85:e9:d8:5b:51:03:b3:b5:
                    f0:3f:25:cf:61:08:49:fc:99:d1:d9:03:58:f9:ea:
                    8b:7f:2d:02:e9:96:62:73:d9:52:83:51:28:43:4a:
                    34:55:d5:61:39:f8:90:2c:d5:16:05:a2:f6:d1:7f:
                    c5:a1:79:ca:46:14:f2:af:8f:3e:0b:1f:c4:2f:67:
                    da:90:28:f0:b4:f0:20:79:b0:1f:1f:93:1c:4e:63:
                    24:85:60:35:73:96:6b:51:0d:27:48:cb:b4:f2:11:
                    07:b9:26:a7:e1:65:5d:00:aa:29:b7:4d:82:60:9d:
                    a2:7c:23:53:05:84:e5:2d:0e:da:0f:58:a7:6b:23:
                    dd:9e:13:26:b7:15:fc:57:a2:a3:b5:a9:ac:f1:a7:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1D:E4:59:34:1F:69:1C:BE:B8:7C:B7:A9:05:98:F1:A3:5B:2E:97
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32332d3233203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:49:c6:60:24:f0:4d:e4:44:7c:a5:c9:b0:dc:1d:55:5b:48:
         ae:3e:20:72:42:67:c0:eb:e8:36:82:11:a3:b9:c3:30:50:b5:
         9c:c6:a5:0a:42:b4:8f:dc:55:c4:c1:64:10:f3:2d:ee:ab:f6:
         13:df:e2:c8:8c:e5:92:9f:e5:c3:d1:9c:4e:62:91:f7:e2:47:
         bb:c2:1a:b9:a2:4b:d9:55:5d:1e:28:36:01:c2:f3:87:43:6b:
         0a:e8:d8:aa:01:b8:01:69:6a:cd:ff:f9:99:fb:d1:8e:61:48:
         10:0f:bb:7c:e0:90:73:74:2e:8d:1b:2c:57:2a:f8:5f:c2:b3:
         81:d3:7f:fb:c6:12:1b:2d:9e:9e:89:94:5c:40:b4:75:7a:49:
         73:bf:25:34:01:1a:1c:84:f3:3e:3f:9b:5e:cf:85:4a:b3:34:
         75:ce:c3:b7:30:d8:73:7f:0b:39:2b:fe:a5:77:57:7c:53:e0:
         e9:ca:80:c7:19:7f:a8:e8:c8:72:c9:66:e8:39:43:a8:a0:fa:
         01:12:13:47:cc:d9:ff:00:6d:c5:ed:bc:8e:4e:9a:74:63:95:
         74:e9:4e:63:1b:79:cd:eb:65:41:ad:b8:59:df:15:d3:9e:09:
         73:d3:e1:f6:d0:55:4b:6f:c9:3f:3d:3b:11:e3:2f:98:68:ba:
         f1:34:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org