Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa
File:                     34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa (raw, json)
Hash identifier:          Y5aDb5LqjG8GjkeEZAt4wOHAI62OiS/S5zWLQ4vbbdI=
Subject key identifier:   99:B4:22:71:27:BE:B5:2F:A8:EB:B8:25:E3:22:E3:1A:49:F3:06:27
Certificate issuer:       /CN=82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663
Certificate serial:       37C05C4460B1500AACA2B5CF131AB113202481EF
Authority key identifier: 82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa
Signing time:             Thu 04 Apr 2024 19:48:59 +0000
ROA not before:           Thu 04 Apr 2024 19:43:59 +0000
ROA not after:            Thu 03 Apr 2025 19:48:59 +0000
asID:                     269238
IP address blocks:        45.182.208.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c0:5c:44:60:b1:50:0a:ac:a2:b5:cf:13:1a:b1:13:20:24:81:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663
        Validity
            Not Before: Apr  4 19:43:59 2024 GMT
            Not After : Apr  3 19:48:59 2025 GMT
        Subject: CN=99B4227127BEB52FA8EBB825E322E31A49F30627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:72:6f:8a:b8:2c:75:06:b4:5a:86:b2:c4:
                    37:54:7a:18:56:60:e9:eb:c9:10:cb:a2:8a:42:fb:
                    57:36:cc:6c:91:3d:df:2e:9e:d6:ce:01:93:f1:7d:
                    46:4d:88:87:09:d9:99:30:67:f5:eb:11:20:95:02:
                    28:d0:b6:bf:fd:2e:1c:43:90:c8:97:98:1f:5d:08:
                    c1:67:dc:29:99:37:5c:07:e8:18:f5:1d:74:15:a7:
                    25:6e:c2:37:22:cd:c5:d0:3a:98:41:9e:37:59:de:
                    fb:45:5d:17:ff:ea:e5:52:dd:f4:5d:36:26:43:6c:
                    6d:ab:c1:b5:70:f3:f6:03:0f:02:2f:e3:d8:e7:84:
                    d8:5e:2c:87:36:90:02:8e:16:6a:41:b1:5c:b8:e5:
                    4b:cf:00:ea:97:7d:2d:03:fa:84:7a:83:4b:da:0b:
                    2f:28:21:33:0e:26:05:60:21:3f:8a:5e:fb:de:c1:
                    ea:8b:c1:2f:a1:d2:cd:60:76:1d:52:6c:8c:99:ae:
                    be:3c:27:18:26:04:54:b2:0b:29:99:4c:dd:8d:2c:
                    35:32:75:cb:ea:54:3b:69:50:52:7e:4d:40:8b:8f:
                    08:4b:33:90:49:35:bc:60:3a:78:64:46:06:cc:7c:
                    6b:47:c7:64:7f:46:62:80:60:70:50:4e:0b:88:e7:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:22:71:27:BE:B5:2F:A8:EB:B8:25:E3:22:E3:1A:49:F3:06:27
            X509v3 Authority Key Identifier:
                keyid:82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/34352e3138322e3230382e302f32322d3234203d3e20323639323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e1:79:e5:b7:a6:9a:ef:82:d6:90:b2:9e:91:75:5c:c0:71:
         18:c4:c2:f6:79:e2:c5:e1:03:45:a5:56:5f:49:44:16:43:c4:
         ce:2d:f9:e4:cd:36:d2:e1:38:63:00:9c:1e:dc:35:6e:08:0b:
         d5:d9:ed:b1:fd:03:1a:d4:2f:8f:26:a2:41:8f:12:39:48:46:
         1e:85:24:bf:15:0f:ce:93:f2:1f:2f:8c:8d:d8:a8:93:65:29:
         4c:97:84:1b:6c:b4:c1:4b:8e:64:18:3e:86:cc:f3:77:77:bb:
         74:a8:c5:ef:68:bd:c1:ba:cb:57:12:e9:b0:17:47:ab:0a:07:
         fd:92:9d:c6:b0:5d:1b:c2:cb:24:d1:31:7e:2e:cc:87:b2:0a:
         2d:f5:97:18:71:09:e0:65:17:7e:31:c5:54:82:1f:69:c7:68:
         1e:15:fb:0d:af:ea:ad:5e:3b:80:6e:0b:bd:0b:4f:f1:55:6d:
         7c:ca:95:5c:76:ad:ac:eb:d7:8b:a8:a4:41:74:2e:42:a4:a1:
         3a:11:e2:1b:2a:4f:2b:e4:ec:54:95:52:01:6b:66:08:2e:0b:
         42:5d:16:72:5d:48:9f:f6:e2:08:16:d2:f9:91:13:29:d8:d3:
         2b:1b:83:8f:02:94:4c:5e:78:54:b0:37:34:de:20:de:f0:44:
         23:ce:d0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:36:00 2024 by rpki-client on console-ams.rpki-client.org