Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32332d3233203d3e20323638373239.roa
File:                     34352e3137312e3235302e302f32332d3233203d3e20323638373239.roa (raw, json)
Hash identifier:          Pr77R38wyRM73CUaomMo+h2Xf0l8x5IfUgLJ086upAk=
Subject key identifier:   20:8E:4E:ED:02:E6:06:81:FA:21:0D:8B:81:17:2D:DB:41:57:BA:3C
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       2ADAD675E6025EA3FEE88C0CD61F637621B431AC
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32332d3233203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:18 +0000
ROA not before:           Thu 04 Apr 2024 07:51:18 +0000
ROA not after:            Thu 03 Apr 2025 07:56:18 +0000
asID:                     268729
IP address blocks:        45.171.250.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:da:d6:75:e6:02:5e:a3:fe:e8:8c:0c:d6:1f:63:76:21:b4:31:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:18 2024 GMT
            Not After : Apr  3 07:56:18 2025 GMT
        Subject: CN=208E4EED02E60681FA210D8B81172DDB4157BA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:16:b5:40:d7:bc:a7:c5:53:f3:e0:56:cf:7f:
                    af:5a:18:81:12:ff:07:d3:c3:51:93:3a:94:f2:67:
                    52:9f:db:98:d0:fc:0f:d9:eb:c2:d7:75:0b:a7:c3:
                    00:b9:20:12:b3:e9:a5:a1:80:99:76:6d:aa:9d:a0:
                    3d:72:b7:da:eb:af:cc:17:78:a2:2f:99:1f:2f:ea:
                    34:9b:50:44:e4:bd:3f:98:40:d1:e1:58:65:b2:69:
                    da:79:95:f6:26:8c:ed:17:40:9d:a1:c3:3c:ed:f2:
                    9d:d9:f7:58:e5:a5:63:fa:32:90:5b:00:19:f7:e9:
                    02:3e:1c:f9:9f:e5:e7:23:c8:61:3b:30:47:a9:33:
                    5f:d6:41:12:cc:ab:a4:51:bb:4b:d7:51:45:5a:fa:
                    50:3a:e5:60:2d:d9:c2:a7:5d:e1:de:17:c9:ae:81:
                    4d:f9:c4:1e:e9:a4:8a:42:d9:f8:e8:20:6a:83:37:
                    e5:6a:d0:3b:41:df:63:fa:49:27:87:66:c0:d3:d0:
                    9f:4d:b1:1c:54:16:13:0c:5c:5f:86:0e:9a:f7:2c:
                    a8:ca:d6:51:6b:9f:ab:1c:a0:42:5f:8a:49:b4:36:
                    ea:b7:b5:41:e6:27:22:7d:52:7c:93:82:bd:d9:ec:
                    7e:5e:93:aa:c7:a2:92:1c:7d:df:00:13:fb:f9:ee:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8E:4E:ED:02:E6:06:81:FA:21:0D:8B:81:17:2D:DB:41:57:BA:3C
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32332d3233203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:7d:eb:4a:bf:e9:cb:88:98:60:27:2a:18:07:8c:c4:e4:6d:
         56:90:7c:5a:1d:ba:c0:0e:17:22:54:49:45:63:20:a7:bb:ca:
         35:cf:c2:e1:39:c7:5e:55:33:f7:07:56:38:8f:46:9f:00:6f:
         3d:89:9f:be:87:95:51:32:11:7a:be:5b:a8:b8:34:6f:6c:aa:
         01:85:09:5c:d5:23:b1:c4:fc:0d:a2:14:74:6b:78:24:de:68:
         57:94:ed:b6:5b:21:23:88:45:4f:65:01:53:e8:f2:32:ad:af:
         44:d6:05:05:07:9d:2c:cb:bd:e2:43:7d:76:35:b1:59:15:e6:
         8e:6b:35:28:ac:ad:f8:f0:9e:a1:c2:5b:89:cb:85:98:bb:b1:
         9a:b1:ec:f0:99:ea:89:63:c9:db:2f:ce:82:95:ca:b0:25:19:
         a7:9d:9b:b1:f7:db:6f:c7:bb:93:b9:ed:22:0f:ff:6a:e2:cc:
         01:a5:a5:eb:9d:de:d6:e1:b4:0f:a2:32:dc:00:c3:c7:a4:12:
         7a:4d:18:63:59:a8:af:d2:6f:1f:54:8f:db:1e:37:2e:5e:6f:
         fc:e2:0f:b4:54:e3:39:0b:6a:62:a0:64:05:d1:60:4c:24:f7:
         f7:21:90:83:85:3e:08:5b:95:96:bc:de:c0:43:6e:ce:7f:af:
         10:9a:e0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org