Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa
File:                     34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa (raw, json)
Hash identifier:          OaFqC5wdSlmgHlUIjVRFMICR+LoKtydVbA0ZU2MWskg=
Subject key identifier:   4D:49:BE:D6:54:CC:19:C2:24:FE:58:54:2B:95:20:9F:F6:15:F4:88
Certificate issuer:       /CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
Certificate serial:       3C2301D82547147ABBD9ACDB223BB077A3C80DF2
Authority key identifier: 6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa
Signing time:             Wed 10 Apr 2024 13:18:56 +0000
ROA not before:           Wed 10 Apr 2024 13:13:56 +0000
ROA not after:            Wed 09 Apr 2025 13:18:56 +0000
asID:                     268728
IP address blocks:        45.171.192.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:23:01:d8:25:47:14:7a:bb:d9:ac:db:22:3b:b0:77:a3:c8:0d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EDFC7E7F4622197B794DC180544F49FD3A1B8CB
        Validity
            Not Before: Apr 10 13:13:56 2024 GMT
            Not After : Apr  9 13:18:56 2025 GMT
        Subject: CN=4D49BED654CC19C224FE58542B95209FF615F488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:93:d7:8a:c5:b8:56:88:ea:48:de:7f:3d:
                    e1:21:fb:4b:32:18:2e:cf:11:fa:89:10:4d:9a:c3:
                    9e:f4:fa:e9:d9:59:81:a6:a6:a5:b1:99:4e:17:b8:
                    e5:81:36:63:ab:89:00:a2:78:d6:7b:d0:ac:ac:8c:
                    d4:dc:ad:e3:c8:f9:08:32:84:2e:a0:f3:fe:64:e5:
                    17:fd:a9:07:e3:41:79:c9:cc:ef:04:7d:c2:1e:3f:
                    1d:d1:53:fb:37:82:c8:db:c0:11:a9:f5:f6:af:d3:
                    a7:db:1f:22:89:0d:cf:8f:cd:f1:1b:85:d5:3d:db:
                    55:4e:e1:ec:c3:70:b9:ab:89:5f:9e:51:93:09:83:
                    79:1f:4e:55:41:af:aa:16:38:a0:7b:64:c3:e4:08:
                    fc:a2:97:fd:df:c5:ff:7f:02:a1:aa:fe:07:b2:9a:
                    5e:2c:5f:bf:20:b2:84:e9:a5:a3:5b:ee:78:85:63:
                    ec:b7:9b:a3:ee:95:03:9f:26:c7:37:b3:f5:ab:e6:
                    3c:3c:d7:27:10:22:9e:24:df:9a:51:47:21:e1:16:
                    fe:25:93:99:0e:50:e5:9f:4a:33:fc:f6:00:10:74:
                    3b:7d:d7:b4:f9:44:fb:bf:cf:12:d8:18:0f:67:24:
                    6a:50:07:1f:d9:7a:10:95:f8:9b:67:00:a9:f3:9e:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:BE:D6:54:CC:19:C2:24:FE:58:54:2B:95:20:9F:F6:15:F4:88
            X509v3 Authority Key Identifier:
                keyid:6E:DF:C7:E7:F4:62:21:97:B7:94:DC:18:05:44:F4:9F:D3:A1:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EDFC7E7F4622197B794DC180544F49FD3A1B8CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7yXrG3KiVsuLBwvJj2FHoZyX5WTFVhrSGShAknHtfC2B/1/34352e3137312e3139322e302f32322d3234203d3e20323638373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:02:02:f4:fe:eb:7d:44:f7:10:fd:8c:91:d9:15:cf:86:86:
         8b:50:5c:81:89:90:ad:55:cf:11:55:e4:33:aa:61:5d:f8:57:
         55:ad:5a:75:45:1a:a8:6d:58:c1:6f:6a:96:31:1f:22:a4:00:
         2c:9d:c2:36:8b:aa:b6:98:d6:46:79:88:7e:07:4d:b0:15:a3:
         c9:ac:57:a6:46:0b:1c:11:cf:16:74:a9:b1:60:5f:9e:7e:6c:
         3d:f9:b8:6b:a5:83:9d:53:16:77:fb:40:a8:a8:04:e4:71:53:
         02:8b:f6:dd:6b:74:9f:ac:5f:d6:42:a5:ae:4b:91:05:12:ee:
         da:d9:59:67:96:a2:a0:63:b3:78:dd:4e:76:8b:71:17:26:e9:
         4f:34:31:27:44:dc:3f:ad:73:b8:68:c5:f5:61:fd:eb:1e:d1:
         c7:f7:33:d3:17:ce:0b:81:b6:2d:aa:40:28:0d:a5:f7:f4:8e:
         07:0b:73:0a:04:0d:bf:77:d0:9c:24:1c:81:82:b6:d0:c0:7b:
         09:b6:b4:3a:39:2d:64:c4:4c:5d:19:ef:ed:23:49:30:42:ec:
         67:1e:d5:ca:ce:48:4f:71:ed:a2:e5:fb:67:8d:63:61:d2:d4:
         38:89:89:cf:79:5d:35:c7:6f:dd:51:22:de:f5:a9:d7:1e:92:
         36:f9:d0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 10:34:10 2024 by rpki-client on console-ams.rpki-client.org