Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/34352e3136362e34342e302f32322d3234203d3e20323637393335.roa
File:                     34352e3136362e34342e302f32322d3234203d3e20323637393335.roa (raw, json)
Hash identifier:          iSEvdjgjQrxCxnmc+ZOKqaZf2soicOBVpGvVXoBlRmU=
Subject key identifier:   A2:9C:EB:F1:2E:B0:61:5E:07:86:9C:B2:62:C6:48:3E:81:58:C5:BC
Certificate issuer:       /CN=1959051F4935A111953C994E631635C9603EF7DD
Certificate serial:       6FBF2A3B1C617BDB3052E510A10C5B5B70490E74
Authority key identifier: 19:59:05:1F:49:35:A1:11:95:3C:99:4E:63:16:35:C9:60:3E:F7:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1959051F4935A111953C994E631635C9603EF7DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/34352e3136362e34342e302f32322d3234203d3e20323637393335.roa
Signing time:             Mon 22 Jul 2024 14:56:10 +0000
ROA not before:           Mon 22 Jul 2024 14:51:10 +0000
ROA not after:            Mon 21 Jul 2025 14:56:10 +0000
asID:                     267935
IP address blocks:        45.166.44.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:2a:3b:1c:61:7b:db:30:52:e5:10:a1:0c:5b:5b:70:49:0e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1959051F4935A111953C994E631635C9603EF7DD
        Validity
            Not Before: Jul 22 14:51:10 2024 GMT
            Not After : Jul 21 14:56:10 2025 GMT
        Subject: CN=A29CEBF12EB0615E07869CB262C6483E8158C5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:24:be:44:91:06:50:3e:c5:6e:b0:cf:72:
                    1a:a8:33:77:6d:69:7d:04:6f:2e:a4:9a:91:5f:3f:
                    33:d8:9d:94:66:53:1a:b8:b8:ca:ea:1f:fc:78:74:
                    73:ae:a8:2e:ff:14:23:fe:6c:0c:e0:a0:ca:82:e9:
                    aa:26:9c:42:e4:20:1d:2d:d3:83:89:48:1c:dc:49:
                    30:b2:cb:57:63:18:99:6b:60:78:83:0e:54:5e:ca:
                    74:c2:b7:ce:85:88:03:f5:31:4a:26:b5:e7:6d:8e:
                    c7:22:76:0c:69:95:5c:0b:0a:86:28:e6:90:72:5f:
                    0e:44:0b:83:a8:69:f4:a2:99:ec:f2:77:10:c3:64:
                    b7:c4:61:d8:c4:bc:57:57:b5:fd:8d:64:6b:ee:c6:
                    2f:56:df:cc:e0:ee:42:19:d0:a1:12:01:b6:97:dd:
                    88:94:05:dc:56:e3:d9:ef:16:98:83:e2:1b:3d:99:
                    b3:8c:30:fe:40:ae:04:05:d1:4c:69:08:1c:d6:1f:
                    a0:75:79:10:f6:87:06:7a:b4:f5:b8:46:1f:1a:55:
                    70:2a:6c:9e:01:99:94:ae:82:01:54:79:e4:30:cb:
                    32:39:8f:24:b0:66:06:97:d8:61:07:20:a6:2b:d6:
                    74:68:2a:1d:61:68:39:ce:e8:5f:76:bd:dd:08:5d:
                    89:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9C:EB:F1:2E:B0:61:5E:07:86:9C:B2:62:C6:48:3E:81:58:C5:BC
            X509v3 Authority Key Identifier:
                keyid:19:59:05:1F:49:35:A1:11:95:3C:99:4E:63:16:35:C9:60:3E:F7:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/1959051F4935A111953C994E631635C9603EF7DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1959051F4935A111953C994E631635C9603EF7DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/34352e3136362e34342e302f32322d3234203d3e20323637393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:80:e0:4c:d5:53:20:3d:fd:3f:51:77:49:63:26:da:62:0b:
         a6:40:42:9b:08:2b:a4:62:9a:d0:41:bd:6e:9b:0a:74:83:ee:
         f1:f3:8e:1b:ab:24:ba:73:4f:79:13:37:84:01:af:fc:b1:25:
         6a:78:7e:ef:1b:d3:20:63:24:23:11:bb:e7:ff:9c:d7:f2:d2:
         97:19:89:c7:63:41:2e:53:dc:20:ba:e3:55:aa:4d:50:7f:07:
         45:22:49:9f:3f:27:3c:88:f5:67:9d:99:30:75:61:07:53:57:
         b8:8a:00:44:6b:ea:48:04:54:63:66:ba:e4:c2:41:98:42:c4:
         93:99:97:d4:e2:45:14:28:50:57:68:45:7d:ac:e8:e4:94:9c:
         f6:a7:43:ef:5c:fc:52:a6:c8:5e:a5:ed:9a:5c:8a:e5:60:24:
         1a:c6:f3:01:f8:ac:a9:67:bd:1a:5a:b1:80:68:61:3e:66:51:
         7b:cd:a9:5d:40:11:90:82:54:4c:a1:26:b2:26:a0:8a:e0:ad:
         f8:73:54:18:f4:14:5d:cd:67:a5:00:24:da:f0:e7:a6:68:79:
         e7:63:06:5e:78:9e:57:3a:51:fe:3f:3f:88:a0:ca:6b:2d:5b:
         e4:4b:85:56:5f:14:11:01:0f:d4:61:87:8f:c5:0b:04:3d:1b:
         80:b2:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 02:55:26 2024 by rpki-client on console-ams.rpki-client.org