Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3234203d3e20323637333838.roa
File:                     34352e342e3135362e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          02T8WpX0kh9ZrwS6drA7CI1ZMJku6p5q9Y8ckB1kVro=
Subject key identifier:   48:13:BB:EC:D9:4D:C8:A8:72:5C:85:46:1F:36:B8:D2:0A:55:F4:A5
Certificate issuer:       /CN=8A9A31995D56C92279C59971190F9CDC7E94D924
Certificate serial:       3101FF1C943A1205D2F3711397C55FDBA398E722
Authority key identifier: 8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3234203d3e20323637333838.roa
Signing time:             Thu 05 Sep 2024 23:06:58 +0000
ROA not before:           Thu 05 Sep 2024 23:01:58 +0000
ROA not after:            Thu 04 Sep 2025 23:06:58 +0000
asID:                     267388
IP address blocks:        45.4.156.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:ff:1c:94:3a:12:05:d2:f3:71:13:97:c5:5f:db:a3:98:e7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A9A31995D56C92279C59971190F9CDC7E94D924
        Validity
            Not Before: Sep  5 23:01:58 2024 GMT
            Not After : Sep  4 23:06:58 2025 GMT
        Subject: CN=4813BBECD94DC8A8725C85461F36B8D20A55F4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:97:73:15:ba:e1:09:a7:38:fa:a6:dd:69:
                    8a:eb:b5:ab:8a:53:83:43:64:76:90:c3:ea:07:36:
                    bb:d2:3a:f3:f2:dd:de:54:ab:2e:44:d1:b7:e7:84:
                    f7:58:9f:4d:10:2b:88:13:3c:88:94:e0:19:96:9e:
                    a6:dd:a6:c0:2f:d3:4a:5b:37:d8:7b:c5:66:d3:52:
                    38:10:2f:c9:0e:66:8b:bd:52:b4:5d:aa:96:06:51:
                    53:39:be:ab:a0:11:6c:2c:f2:d2:57:12:f2:1b:1f:
                    0e:b0:49:de:a0:4f:28:f6:cd:e0:db:1f:de:5e:13:
                    e7:6b:3c:c0:dc:fe:20:32:e3:b9:5e:76:e8:55:34:
                    8e:50:37:61:71:89:22:eb:f4:f0:ab:14:4a:d6:07:
                    3b:b5:23:60:bb:29:ce:91:d5:b6:0c:79:a8:04:b9:
                    aa:0a:65:88:d9:6d:e6:e8:50:4e:0e:42:83:c7:29:
                    d7:6d:1a:5b:64:df:48:b7:6e:63:e0:1e:2d:57:11:
                    7c:0b:44:e4:53:51:1e:83:96:16:bc:c5:50:b7:b8:
                    6f:fa:38:32:28:5a:58:e6:16:ae:1d:b6:1d:58:ff:
                    83:18:0c:f6:86:b2:1a:28:a8:3f:78:3e:e1:34:f0:
                    fa:79:7a:ad:7d:4b:c2:5b:42:85:c6:7c:25:d7:90:
                    3a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:BB:EC:D9:4D:C8:A8:72:5C:85:46:1F:36:B8:D2:0A:55:F4:A5
            X509v3 Authority Key Identifier:
                keyid:8A:9A:31:99:5D:56:C9:22:79:C5:99:71:19:0F:9C:DC:7E:94:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/8A9A31995D56C92279C59971190F9CDC7E94D924.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A9A31995D56C92279C59971190F9CDC7E94D924.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/1/34352e342e3135362e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:17:4b:84:94:d6:69:9a:c3:59:f7:88:0a:5a:6b:1f:84:90:
         a3:a6:a8:84:00:30:0e:2d:a9:95:3c:00:68:2c:e7:f7:0e:4c:
         5a:b4:bf:48:e7:ae:20:6e:ef:57:69:e1:43:d9:58:5d:f2:c0:
         ec:f6:e3:d0:46:4e:b5:79:c7:f6:29:55:0a:38:01:d7:64:1a:
         01:6a:cc:97:a1:c3:b8:4e:53:3d:5d:72:e4:c3:ee:17:f8:b2:
         69:62:f1:de:42:a7:32:1c:75:bd:1a:1f:53:ca:c5:44:4d:33:
         6c:2a:6d:5e:8b:03:58:3a:12:59:bf:69:24:09:00:3a:ad:d6:
         4d:6f:96:d5:e4:cb:90:6e:62:59:11:92:b8:58:40:68:05:18:
         62:c6:53:a4:ea:ea:11:7b:5f:82:bb:a7:d0:2b:ba:28:e2:ea:
         41:9a:89:e6:9a:53:51:75:ce:3b:02:50:c6:1f:17:f9:2f:9d:
         ce:53:16:22:72:bf:23:ea:7a:78:3e:a7:5f:87:a1:a7:f7:54:
         90:e1:8d:e1:17:73:f9:e7:1a:24:1d:74:7a:d8:a5:00:f7:d4:
         93:ed:ad:65:60:c9:66:be:4e:5a:3e:e5:ee:fa:14:5d:4c:39:
         ce:a9:8d:5e:cd:cb:0a:6f:a6:ba:72:fe:94:4e:1c:80:1f:8f:
         2b:52:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org