Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          qiouOD4adGhura3ASt44l2pbGLOcs9jMX6mnPtNA8m8=
Subject key identifier:   42:05:AC:BD:2D:75:B8:15:9F:7B:FF:2B:81:42:93:36:18:3E:F4:E0
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       1AAEEFBA0C6988FE2CD56A9B59CB59CDAC3B38ED
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        45.181.229.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ae:ef:ba:0c:69:88:fe:2c:d5:6a:9b:59:cb:59:cd:ac:3b:38:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=4205ACBD2D75B8159F7BFF2B81429336183EF4E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:45:02:21:7a:ef:83:ff:21:92:cd:16:09:
                    02:9a:cc:25:1e:84:ea:04:24:e9:59:74:bd:d5:a4:
                    e1:db:7a:bc:7d:bf:1e:75:79:45:75:06:3d:45:0b:
                    d3:cf:c4:26:1f:36:7b:3e:1b:51:3c:81:3a:5d:02:
                    b7:06:7c:03:ec:87:f6:c3:fd:d5:ff:d3:7a:8b:6e:
                    ec:54:41:9d:fd:0a:2d:ff:c4:e2:bb:96:d7:1d:83:
                    60:e6:64:93:b1:42:17:a8:72:25:2f:e4:53:3f:cb:
                    94:ac:06:f1:c0:bd:61:4f:96:a6:e7:ef:b0:b2:03:
                    47:6f:b4:c0:90:7a:c4:ff:3c:ed:da:85:0f:d8:8b:
                    f2:d7:7c:fd:31:ae:c9:02:db:b7:90:97:b8:e0:15:
                    e8:aa:97:1a:31:05:8f:44:15:9e:a4:37:89:83:b1:
                    71:1a:18:5b:48:b5:1b:19:b0:d7:95:e1:0f:97:52:
                    23:22:14:c7:0f:94:4d:aa:52:0d:ce:11:ce:c0:ae:
                    75:c4:3d:99:31:49:33:62:80:dc:35:ea:fe:c1:93:
                    f3:7c:2d:2e:82:5f:eb:c0:70:29:8f:8c:53:23:e0:
                    cb:41:f2:70:b4:be:4f:37:05:63:cb:4b:76:32:d9:
                    52:9c:b6:2b:34:03:35:c3:cb:24:6a:bd:e4:f9:71:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:05:AC:BD:2D:75:B8:15:9F:7B:FF:2B:81:42:93:36:18:3E:F4:E0
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232392e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:84:ec:c9:e9:35:54:59:c9:99:16:e3:4c:68:fe:fe:92:a3:
         40:61:e8:dd:f8:39:6e:96:62:00:aa:f2:17:4f:91:db:4c:d1:
         af:8a:fa:d4:e5:ae:a5:65:55:9f:96:e1:15:e4:3f:f2:50:fd:
         88:bf:43:a6:76:e4:0d:d5:85:08:79:e6:ab:5b:c8:5f:e0:c9:
         a1:4d:d2:fa:bb:5e:c0:5b:4d:44:8d:60:a1:1d:24:8b:cc:49:
         f1:9a:2f:ba:f1:ad:46:00:93:c0:f0:f9:4f:2b:5e:19:e7:95:
         67:40:47:21:fb:e0:11:1e:e7:16:f9:a4:ea:db:77:1f:7b:ba:
         f3:89:56:c5:08:e7:f9:fc:51:ca:99:75:cf:b8:b0:7b:c4:7d:
         21:06:98:d7:67:00:a6:e1:56:2d:43:ad:59:5b:c0:57:df:58:
         14:b4:44:93:f6:4d:3b:1e:57:bd:e7:75:43:72:5c:b9:b4:b8:
         c9:9a:cf:ec:d1:05:4d:c0:e3:f2:6d:79:71:f0:0e:71:8e:95:
         a4:32:47:9d:0f:8c:8b:c3:b6:1f:18:29:d4:d9:09:a5:d2:32:
         ee:17:b1:51:69:aa:27:bc:ee:0f:7d:9c:fd:90:83:53:f0:e8:
         3e:ce:7b:e2:8c:fa:1a:7d:1a:c3:a0:68:08:07:d8:d7:49:65:
         7f:c7:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org