Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
File:                     34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier:          1iKmmWR/8Qh5azQ0BFWaw13FgUXebcY5WHcXusV+ZJ4=
Subject key identifier:   7B:73:75:82:3C:55:C3:16:58:8F:06:4F:B6:CE:82:3B:31:44:A9:AA
Certificate issuer:       /CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
Certificate serial:       4B5DE1CABA14419C7C153F5905B49169F554E9
Authority key identifier: 5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
Signing time:             Thu 04 Apr 2024 05:08:25 +0000
ROA not before:           Thu 04 Apr 2024 05:03:25 +0000
ROA not after:            Thu 03 Apr 2025 05:08:25 +0000
asID:                     267091
IP address blocks:        45.229.20.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5d:e1:ca:ba:14:41:9c:7c:15:3f:59:05:b4:91:69:f5:54:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC19A1DF15788880B70A67FED822D4E3BA5AD71
        Validity
            Not Before: Apr  4 05:03:25 2024 GMT
            Not After : Apr  3 05:08:25 2025 GMT
        Subject: CN=7B7375823C55C316588F064FB6CE823B3144A9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:cd:24:cc:00:99:51:c7:ed:55:96:5e:8f:
                    d6:68:bf:0e:16:6d:9d:d6:31:a1:87:b9:7b:8c:e5:
                    ec:f9:b8:e8:a4:65:68:f8:34:c9:b3:18:84:db:72:
                    be:8b:64:7b:ab:c9:e7:6d:e4:92:7d:ca:9d:2a:f9:
                    91:79:90:8a:ba:66:62:d4:e2:68:52:8f:d5:a5:a7:
                    58:ca:f8:38:b5:e8:c3:19:8a:30:28:65:10:33:8f:
                    97:c8:cb:a9:b0:c2:65:a5:0f:29:12:2c:3d:56:8a:
                    0d:74:c2:4e:98:c5:8d:f7:8b:c1:cb:47:dd:ed:5f:
                    6c:ec:cc:eb:41:76:12:68:9b:0c:7c:60:66:04:3d:
                    08:a0:9d:15:b9:2b:fc:2e:fe:39:34:1c:60:93:d8:
                    aa:a8:86:1b:7b:5b:46:be:ab:8e:f7:b9:07:b2:7d:
                    b0:6f:9f:f2:1f:fd:d6:06:3c:e4:e6:aa:32:15:22:
                    8f:1e:58:44:74:60:23:ac:f6:4c:1e:33:0c:ef:c7:
                    c3:67:b8:f6:e8:b8:89:71:4a:37:fd:47:db:fd:cb:
                    5e:f5:74:a2:14:7c:f7:b9:4c:94:be:a8:60:70:e4:
                    53:80:56:d8:79:49:4d:42:d8:a8:ec:bc:b9:28:c4:
                    03:d5:be:92:76:59:2a:12:ab:f3:2b:69:66:93:b6:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:75:82:3C:55:C3:16:58:8F:06:4F:B6:CE:82:3B:31:44:A9:AA
            X509v3 Authority Key Identifier:
                keyid:5F:C1:9A:1D:F1:57:88:88:0B:70:A6:7F:ED:82:2D:4E:3B:A5:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC19A1DF15788880B70A67FED822D4E3BA5AD71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/2/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:a4:1d:bd:fd:df:9e:01:29:d8:b8:ca:0c:0f:59:98:cc:
         ab:33:86:9d:20:09:9b:07:42:da:75:ed:11:8d:11:94:00:64:
         ff:e3:f2:bf:32:41:1b:24:bb:5a:2c:25:d7:62:d7:89:9a:ab:
         6e:26:a0:34:53:70:f1:11:66:6d:31:69:63:af:1d:32:48:1b:
         82:60:2b:06:d8:fc:9f:2a:2d:01:ac:6f:42:44:4e:e9:06:9b:
         73:64:95:fd:ca:8f:51:5c:74:7b:43:5c:88:bd:5b:28:98:d8:
         18:b9:2c:df:6b:0f:1c:ef:ca:0e:8b:ee:22:c3:e3:cf:3d:bc:
         43:5b:7e:ea:98:37:29:35:f1:72:8b:9b:55:bb:70:43:d4:35:
         70:5c:ea:85:60:ab:01:17:46:b6:50:15:0c:e1:fd:99:21:75:
         c4:24:ba:ac:aa:8f:9b:b8:12:68:97:6a:58:7e:b5:e9:94:b0:
         83:d1:b5:82:51:78:2f:7a:43:ca:79:79:ab:39:1c:c0:f0:89:
         b2:32:4b:28:30:33:ad:30:7b:55:85:ff:ed:0c:d1:ea:a2:c1:
         2a:72:9b:6d:fb:98:ce:62:68:18:5a:ff:3e:8b:26:99:72:0c:
         ce:9a:b6:3b:a3:9e:f9:de:79:f1:0b:ee:00:77:9c:00:5d:e8:
         4e:5e:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 20:16:29 2024 by rpki-client on console-fra.rpki-client.org