Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
File:                     34352e37302e3230362e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier:          Vdb4t1xuI41i6n4ezObXkInajGa3kxNbBKGgKK/UA1s=
Subject key identifier:   EE:EC:17:19:E8:50:45:AB:58:FB:32:0A:A1:61:4E:7F:1D:D1:F1:D1
Certificate issuer:       /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial:       249C24E73D9DBDB912381D29B3AA81D8DDCCD39B
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa
Signing time:             Mon 23 Sep 2024 15:33:44 +0000
ROA not before:           Mon 23 Sep 2024 15:28:44 +0000
ROA not after:            Mon 22 Sep 2025 15:33:44 +0000
asID:                     267586
IP address blocks:        45.70.206.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:9c:24:e7:3d:9d:bd:b9:12:38:1d:29:b3:aa:81:d8:dd:cc:d3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
        Validity
            Not Before: Sep 23 15:28:44 2024 GMT
            Not After : Sep 22 15:33:44 2025 GMT
        Subject: CN=EEEC1719E85045AB58FB320AA1614E7F1DD1F1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:14:c9:1a:19:24:fd:92:a9:30:6e:47:fd:
                    3e:7a:8b:c4:a0:e5:af:5d:53:90:d3:b3:41:d4:a3:
                    4b:b3:a8:10:c5:fb:08:a6:d3:04:e2:67:e0:c8:f5:
                    21:39:53:cd:aa:27:07:60:38:99:a8:97:a2:f7:e9:
                    4f:d4:85:38:d7:4d:60:d4:48:22:d9:b5:9a:d6:6c:
                    9e:03:18:9c:49:f0:2c:08:1f:4d:ed:76:63:39:21:
                    64:c7:07:c2:ef:b0:35:82:6e:23:20:4e:e0:ca:a2:
                    07:3d:e4:12:bf:7a:1a:6c:62:9a:63:b4:1a:5a:80:
                    67:fd:71:e2:a2:af:4b:65:b6:b6:bb:2f:cb:dd:e3:
                    58:a4:1c:9d:67:51:a6:7c:4b:ed:75:ca:85:55:02:
                    5d:e4:28:b6:c1:25:08:d7:18:1a:e1:02:0f:fc:97:
                    b6:7a:ab:20:2d:37:3c:00:8f:38:97:24:54:c3:3d:
                    62:f2:12:4c:e3:98:eb:30:25:f3:c3:d5:f9:90:e6:
                    2d:a9:8b:43:bd:bd:5e:df:71:e9:a6:53:dd:4a:59:
                    31:61:a5:10:c3:21:54:b1:df:96:51:8d:1e:b2:ff:
                    61:7a:a2:59:f9:1c:6a:89:96:b8:09:3f:ee:e2:02:
                    69:e1:95:a8:d0:4a:36:75:84:df:8d:a8:ff:a3:d6:
                    5e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EC:17:19:E8:50:45:AB:58:FB:32:0A:A1:61:4E:7F:1D:D1:F1:D1
            X509v3 Authority Key Identifier:
                keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32342d3234203d3e20323637353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:ee:00:0e:7b:b3:83:61:a1:e9:3c:cb:a1:ba:62:5f:09:
         18:f4:c3:e3:4e:98:89:47:c3:3e:d1:9c:5a:32:cc:2b:ce:c0:
         cf:5a:0e:d9:fd:ea:2a:91:bc:fb:37:f8:6f:7d:07:6e:7d:a0:
         7e:80:0d:c5:1b:6f:aa:54:19:2d:28:dd:d1:6f:20:59:10:df:
         e8:eb:a6:1c:1d:d7:18:15:bf:19:56:20:a9:a4:eb:e9:04:a8:
         b2:77:03:e4:16:93:e2:c0:5b:f5:61:56:33:75:57:4c:e2:df:
         77:57:4d:0a:8b:15:f7:45:88:fe:ce:36:89:57:ef:1a:44:5e:
         f3:a8:db:f3:cb:b3:dd:20:d9:d4:5a:04:79:0a:ae:d3:11:19:
         7d:e4:c0:ca:b3:58:4b:1a:a2:a3:a6:8e:5e:cf:6f:99:50:8c:
         94:65:db:2e:fe:f5:f4:ff:25:2e:c2:15:40:9d:56:32:28:44:
         f4:c8:cc:71:4c:01:15:e5:c1:77:dc:df:8a:89:a8:8d:c9:48:
         7b:04:88:9c:f2:4b:7b:bc:ad:c3:88:a7:1a:b5:bf:90:28:bd:
         10:f7:d8:82:90:c7:3e:7e:63:5e:a1:6f:1f:ee:4c:af:c8:02:
         e0:eb:78:59:e5:c9:32:de:f7:8b:bf:d3:0f:7d:9a:47:e4:95:
         b3:07:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org