Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136332e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136332e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          vFivSVvIuMJH2Tka9pJOZQkyMInf78Zn9jLVtlHScf0=
Subject key identifier:   59:91:83:40:CC:66:F7:A0:58:A4:77:A1:AE:87:46:65:6A:94:FD:92
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       5AC6C76264AE6F06A4F3F92653DF0CF1193C055C
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136332e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:38 +0000
ROA not before:           Thu 04 Apr 2024 02:56:38 +0000
ROA not after:            Thu 03 Apr 2025 03:01:38 +0000
asID:                     269002
IP address blocks:        45.176.163.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:c7:62:64:ae:6f:06:a4:f3:f9:26:53:df:0c:f1:19:3c:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:38 2024 GMT
            Not After : Apr  3 03:01:38 2025 GMT
        Subject: CN=59918340CC66F7A058A477A1AE8746656A94FD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:76:51:51:a7:32:39:7e:ae:ff:86:6e:e6:bc:
                    ef:a9:e6:41:c0:1e:24:67:32:47:e9:9e:f4:fa:1f:
                    6d:51:c6:42:f6:ec:cc:a4:02:93:cd:f8:53:f4:4f:
                    45:c8:a5:40:f1:88:d3:1e:4d:80:e2:5b:dc:b5:3a:
                    26:43:4e:4c:96:df:54:c0:23:86:0d:58:4b:d5:05:
                    d5:9c:fc:46:0d:d4:2f:8c:aa:1a:ea:84:c7:73:34:
                    17:db:88:2b:d8:f9:b6:3b:98:86:47:44:26:3d:f8:
                    30:06:25:07:df:60:2c:f9:48:4d:e0:a1:d0:be:54:
                    6d:8e:bb:9c:41:1d:de:50:9b:01:95:d0:42:bf:cf:
                    91:0c:16:0e:31:6c:e7:9a:84:a1:d4:d4:11:06:ba:
                    03:c7:1a:bf:8f:f4:d9:9e:09:5c:68:15:a1:6d:8d:
                    1c:5a:5c:90:a1:0d:66:7e:68:aa:6f:7c:3d:5a:71:
                    0d:b1:44:f9:55:8a:4b:c0:62:64:38:26:ed:54:67:
                    15:8d:77:e4:3c:5d:b6:76:1f:0b:4e:b7:2a:dd:e7:
                    3a:5f:0f:6e:98:86:12:c1:fa:3a:bf:94:7c:89:8e:
                    e9:c2:cd:1f:f8:6c:f7:cc:fe:3f:67:57:a3:23:53:
                    b2:01:4d:39:74:1f:b6:59:dd:e2:bb:70:19:fa:e5:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:91:83:40:CC:66:F7:A0:58:A4:77:A1:AE:87:46:65:6A:94:FD:92
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136332e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:43:9d:cb:9b:83:08:20:c6:f0:04:21:33:60:f0:14:1c:15:
         7a:c5:0f:57:be:82:6a:69:54:3b:4f:2a:64:df:bc:8d:b8:d0:
         94:13:d1:c4:8e:e0:83:12:51:ef:80:a7:8d:d5:7f:ca:92:af:
         14:7d:53:ac:2b:68:b8:d6:ba:47:21:59:db:b7:a0:5d:96:38:
         cc:89:2d:6f:e1:7a:8a:cb:4e:bb:38:c3:89:ee:a8:3a:b9:aa:
         c8:89:5b:48:95:b4:a0:c4:69:60:4e:dd:1a:a6:07:9c:3a:47:
         08:2b:a1:45:07:91:6e:35:e5:f4:0b:5c:f5:3c:f2:88:45:36:
         26:51:d4:4c:4e:fc:4d:4f:1d:58:3a:3e:aa:bf:48:07:4c:7d:
         cd:f8:3f:ab:55:92:78:5d:bc:a1:a6:f2:51:30:3c:40:7c:30:
         03:00:31:0d:6e:1d:1e:b9:72:a0:a0:ae:fc:84:03:df:cc:d7:
         44:b2:bf:7b:2a:6a:13:7e:81:0a:57:7f:80:e2:93:07:b2:eb:
         80:fc:5a:e2:1e:79:44:4d:35:fb:c7:b0:df:40:5f:a4:bf:88:
         24:39:2d:e5:cd:a1:ba:d6:56:07:95:a4:c7:cb:3e:a4:a4:dd:
         f5:71:f1:f1:53:43:84:42:3a:8a:a7:54:7b:5a:6c:44:31:6a:
         4c:c3:dc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org