Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233312e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3233312e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          KovRcHey7MB7yQf+pvUeMmv0OxE/OBIYjqhnzefKDSE=
Subject key identifier:   95:81:2A:42:38:BF:18:56:17:4B:7E:D9:78:66:7D:AF:55:2B:E2:D4
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       0B80D204DF47000C2C82C3BA4D750814ACEC3BDE
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233312e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        45.181.231.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:80:d2:04:df:47:00:0c:2c:82:c3:ba:4d:75:08:14:ac:ec:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=95812A4238BF1856174B7ED978667DAF552BE2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:7b:9a:82:7f:48:7a:79:6f:bb:2b:84:33:
                    24:83:3b:b6:86:b2:03:60:b0:95:e9:23:16:aa:2b:
                    2f:87:c5:73:fb:f0:1b:fd:26:91:9b:00:97:43:54:
                    62:33:e9:05:ad:8f:b5:be:f0:d3:d8:5d:07:d4:6c:
                    27:c1:5b:58:e2:75:f1:a6:4c:bb:08:86:c6:e8:61:
                    14:77:e6:07:d6:85:ae:a2:7a:4a:78:80:fc:50:83:
                    89:31:ea:d1:25:f8:8d:18:35:0e:5c:a6:ef:14:85:
                    4a:aa:44:90:35:3e:f1:45:04:88:3d:7c:90:9e:da:
                    79:63:9a:be:f2:1f:71:99:0d:99:3c:03:03:af:e6:
                    e5:ab:a0:d4:e4:eb:0b:e5:27:e5:84:e8:41:4b:db:
                    84:d7:73:15:da:6b:71:e0:52:e9:cb:cd:67:10:67:
                    9e:c3:67:0a:aa:8b:86:b8:fd:8d:0f:a0:57:ac:fd:
                    2d:19:22:a7:b0:bd:e7:75:a2:d8:99:8b:64:30:38:
                    66:0b:09:af:7a:26:f2:af:cc:cc:4d:83:61:26:9a:
                    6c:d3:de:83:61:62:57:34:84:c0:82:94:d0:00:6a:
                    45:10:c1:9b:58:0e:09:f2:33:76:ae:0d:df:2e:c2:
                    47:e8:08:80:4a:20:0d:97:ee:57:3e:d7:00:d6:2a:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:81:2A:42:38:BF:18:56:17:4B:7E:D9:78:66:7D:AF:55:2B:E2:D4
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233312e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:58:0c:4e:73:41:23:bc:00:a2:91:6b:10:94:1f:1b:22:
         41:56:46:f4:a0:0c:f9:b1:6a:81:f3:49:e6:fb:f6:80:ae:37:
         c8:01:56:74:e6:d6:d9:aa:43:13:93:5b:ad:32:d8:5e:34:f5:
         8f:d9:49:a6:37:ee:8f:08:8e:21:68:eb:67:32:99:d1:f8:5d:
         d0:69:74:60:cf:ae:34:a0:6a:16:be:af:a5:5e:b9:22:a5:ce:
         5c:2a:f3:22:08:b9:b3:6f:58:e6:dd:b1:50:ed:87:68:8f:2f:
         a9:a6:23:04:18:b2:82:d7:8f:13:07:ec:d8:e9:6e:cc:ae:60:
         dc:5a:22:67:d9:72:a3:a0:11:f4:2c:91:df:00:db:40:7b:e3:
         62:31:9b:c4:94:61:ac:40:8c:9a:9c:9e:76:08:3a:ee:cf:db:
         81:85:33:20:c3:09:49:eb:df:b8:ab:09:d0:92:35:64:3c:41:
         5e:7b:61:e2:0a:0f:72:b1:25:e0:e3:bc:7b:b6:7c:af:f3:38:
         74:ce:45:a4:39:b5:a1:65:31:c6:fe:4b:9c:af:30:1b:91:62:
         56:3f:e6:97:21:ce:f1:51:64:6b:e8:1d:f9:6d:4a:86:f0:28:
         f1:98:9e:7e:4f:e7:3c:8b:15:14:93:0c:57:79:4b:66:8f:cc:
         a1:db:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org