Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231302e302f32332d3233203d3e20323638363932.roa
File:                     34352e3136352e3231302e302f32332d3233203d3e20323638363932.roa (raw, json)
Hash identifier:          IzZkUaJnzxsWyiXkjU0lPWvafroq6u1Wc6ANxQUYuhs=
Subject key identifier:   55:C1:0A:88:23:F5:51:BC:0F:D1:85:7D:64:26:A8:9D:27:01:4A:1D
Certificate issuer:       /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial:       5B0C328AB326B41E65B9F3071E0D25E9A887482B
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231302e302f32332d3233203d3e20323638363932.roa
Signing time:             Fri 20 Sep 2024 18:57:37 +0000
ROA not before:           Fri 20 Sep 2024 18:52:37 +0000
ROA not after:            Fri 19 Sep 2025 18:57:37 +0000
asID:                     268692
IP address blocks:        45.165.210.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0c:32:8a:b3:26:b4:1e:65:b9:f3:07:1e:0d:25:e9:a8:87:48:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Validity
            Not Before: Sep 20 18:52:37 2024 GMT
            Not After : Sep 19 18:57:37 2025 GMT
        Subject: CN=55C10A8823F551BC0FD1857D6426A89D27014A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:30:4f:81:63:2b:00:7f:19:b4:5f:2a:4a:
                    9a:81:b9:8e:4f:9a:dd:86:4d:52:26:01:b8:05:84:
                    11:89:a0:e9:43:e7:47:ff:76:93:31:e3:04:95:b3:
                    b3:64:d7:83:cb:aa:8d:57:56:16:67:21:18:ac:97:
                    d9:3a:bf:44:0d:c3:94:b6:2a:15:65:2d:36:16:a4:
                    b9:df:cf:8b:c5:c4:6e:32:a5:37:eb:da:77:e7:b9:
                    4c:41:e4:65:13:ba:3c:b9:e7:1f:85:54:d3:8f:08:
                    af:14:54:6a:64:52:93:da:7b:ed:9e:6b:a2:fe:c1:
                    d5:1f:be:81:33:8b:14:b1:f7:bd:6b:c9:3a:a7:75:
                    06:1e:18:8a:d8:d8:a2:f4:c9:33:16:ff:34:f1:7d:
                    33:69:54:b9:8f:7a:78:e8:d5:9c:0a:c4:3b:b7:3f:
                    5a:69:29:1c:b9:30:7f:d3:6b:07:ed:96:b9:05:96:
                    b2:3c:5f:0c:be:2c:91:80:11:62:a9:ec:ce:2d:86:
                    2c:e6:15:df:93:47:0d:86:7b:e6:b5:f1:f7:18:6b:
                    03:3f:ab:27:37:f2:c6:bb:2f:13:05:ee:fe:fe:ca:
                    8e:b1:9b:a6:09:09:e7:93:6f:c7:7b:78:6e:f7:96:
                    03:a4:4b:59:14:23:dd:95:b0:7d:4e:65:c8:46:d9:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C1:0A:88:23:F5:51:BC:0F:D1:85:7D:64:26:A8:9D:27:01:4A:1D
            X509v3 Authority Key Identifier:
                keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231302e302f32332d3233203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:7b:1a:6a:fa:9c:34:82:bc:c8:8c:af:e4:a4:7f:b4:29:
         b0:1a:91:93:09:68:e2:09:9d:e5:01:31:86:74:0f:84:6a:03:
         8b:20:51:5e:9a:8b:56:90:fd:ac:39:4f:d1:31:a6:ac:eb:2f:
         96:24:8e:f3:cb:37:e7:c2:c0:bc:fa:ff:f7:db:35:21:91:ce:
         80:f9:33:1b:47:4d:a6:03:84:9d:60:06:a8:02:03:ee:32:c3:
         d2:d2:00:a1:4e:ce:5c:24:cf:f1:b9:a6:f4:1b:1a:a1:4a:37:
         3e:41:ad:b9:0f:6a:d4:be:ec:09:31:00:b2:b6:df:a3:43:e6:
         fb:41:00:0f:df:56:c5:5c:be:ec:c6:27:49:56:25:57:ee:1b:
         a5:a5:98:5b:73:f0:18:61:e4:95:c6:d7:bd:0a:36:c0:05:47:
         33:63:cb:69:8d:7a:69:88:58:b0:a2:af:ad:d8:b8:d6:25:d5:
         53:b7:14:32:78:13:8e:94:4e:c5:65:14:1c:39:80:03:1c:57:
         8a:ff:95:1d:6b:90:99:c0:79:97:ce:b0:c9:33:13:2e:e5:e1:
         aa:e7:36:d7:fa:c1:e7:98:75:63:13:be:ee:9d:49:d1:7b:ce:
         67:31:71:0a:7d:3e:72:f8:f7:b3:cb:2e:0a:ac:e0:05:9b:d8:
         fe:f1:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:38 2024 by rpki-client on console-fra.rpki-client.org