Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa (raw, json)
Hash identifier:          gyCNWarg7x0UUytcwuGbHHefRjS7YWoYzGGR33D2OPI=
Subject key identifier:   B1:A8:AD:14:06:6D:60:AE:6E:07:6B:75:D4:6E:4F:42:64:EE:8F:EB
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       13F32CE4CD7B4700A51E6BEC650BF560DF355239
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:17 +0000
ROA not before:           Thu 04 Apr 2024 07:51:17 +0000
ROA not after:            Thu 03 Apr 2025 07:56:17 +0000
asID:                     268729
IP address blocks:        45.171.248.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f3:2c:e4:cd:7b:47:00:a5:1e:6b:ec:65:0b:f5:60:df:35:52:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:17 2024 GMT
            Not After : Apr  3 07:56:17 2025 GMT
        Subject: CN=B1A8AD14066D60AE6E076B75D46E4F4264EE8FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:a1:75:bf:85:59:50:99:94:fa:1a:92:0f:
                    38:fe:79:0a:75:be:33:5c:40:05:d0:8e:8b:a8:a8:
                    fa:9d:8f:dc:fb:16:cc:93:bb:39:ff:7d:65:88:a1:
                    0c:7a:d5:13:48:e2:8a:5c:ee:be:ae:00:88:27:e0:
                    a2:a6:26:46:3d:34:85:98:3d:4b:a7:d2:ac:5a:a8:
                    7f:2d:94:f2:54:97:27:05:c9:d3:cc:a0:a9:d2:02:
                    6f:88:b9:58:a3:27:69:0e:27:6e:a5:46:b8:64:53:
                    82:17:1a:2a:a6:f3:26:fa:d7:a9:1d:fb:a4:16:61:
                    69:6a:c3:3b:fa:6a:fb:31:0f:dc:51:23:95:38:5e:
                    e6:47:e2:e5:94:d2:e9:7d:4c:7d:71:5e:44:01:3b:
                    5f:ce:65:e9:2d:be:be:a7:46:6e:cd:1b:61:92:fa:
                    f5:4b:72:47:d3:d3:b6:df:d4:57:f1:cf:29:d4:a0:
                    5e:84:2b:00:7b:2f:02:26:32:bd:28:79:e8:a2:4b:
                    2a:ee:21:4e:9d:aa:4b:27:15:7b:1f:7d:80:8f:d8:
                    34:74:d2:76:86:65:a2:6e:c6:5d:04:d9:d9:0a:8f:
                    0a:6a:e3:a6:a4:f5:f2:bf:1e:3a:c6:57:bd:09:ba:
                    f8:54:16:b5:d8:00:ac:06:ff:70:3a:75:78:6b:97:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:AD:14:06:6D:60:AE:6E:07:6B:75:D4:6E:4F:42:64:EE:8F:EB
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32322d3232203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:2b:53:5e:4d:90:12:a4:7e:d5:ef:68:41:17:cd:07:bb:
         19:1e:fb:f5:de:5b:b0:95:7b:19:7b:8e:6c:13:e2:e8:b0:d8:
         5d:fd:a1:4e:46:cd:b2:df:3b:0d:c1:02:85:f8:28:70:2d:ad:
         fa:6f:34:d3:22:fb:42:51:ec:3b:dd:50:99:3d:5b:30:93:80:
         78:0a:1e:bf:f7:e1:f6:68:a8:1c:e8:26:78:24:0b:28:2d:ff:
         cb:3f:4c:ef:50:82:d3:51:59:af:c1:14:84:bc:29:61:fc:8f:
         71:fe:47:44:8a:4e:c6:25:3a:b9:66:d4:d9:ac:54:bc:1e:31:
         9e:ea:a3:96:c9:dc:93:83:75:d4:70:15:67:f8:3a:be:c2:e1:
         f8:e8:53:b1:f6:19:37:69:d4:76:22:4a:bb:0f:e9:6e:d2:57:
         c4:d1:2b:e3:a0:7d:37:77:a7:b1:09:22:d3:5f:4d:4f:ca:e5:
         1a:64:66:97:68:2f:8f:73:7c:b2:61:c8:3a:e8:ed:e3:ec:fb:
         4f:b7:20:a9:7c:4d:e0:b4:69:c6:0f:a2:7c:0f:c5:1d:f3:38:
         51:07:ff:7b:ca:e4:13:04:04:9b:16:66:71:7c:a0:5f:b5:33:
         d0:96:45:25:99:ba:c1:7b:a4:d1:12:9d:00:1a:92:f3:61:c5:
         0b:cf:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org