Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32322d3232203d3e20323639323337.roa
File:                     34352e3138322e3230342e302f32322d3232203d3e20323639323337.roa (raw, json)
Hash identifier:          4euV0Yea91FBMYnwGeBXGb8tP3ZTPgFoFU2J4d2BybA=
Subject key identifier:   64:88:DC:2E:5D:66:03:B2:36:CB:16:4D:B5:78:6B:FE:27:0E:48:7A
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       63A315E7DC3C1A4D0A1C735B9D99C822DA1CE7FF
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32322d3232203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        45.182.204.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:15:e7:dc:3c:1a:4d:0a:1c:73:5b:9d:99:c8:22:da:1c:e7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=6488DC2E5D6603B236CB164DB5786BFE270E487A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:66:83:8a:26:90:42:84:76:e1:3e:c2:9e:ac:
                    78:05:48:2b:2e:7c:c3:77:ef:a8:68:bc:5f:66:0b:
                    62:b5:4a:cf:04:2a:d5:16:f8:e6:f5:88:4b:c2:82:
                    08:26:6f:55:4b:7d:61:73:0a:e3:12:e1:0c:c8:a2:
                    2d:97:24:7f:92:81:9a:b5:ba:69:72:59:37:3c:99:
                    d1:42:58:4f:f0:6c:d7:e1:d9:d8:b0:1b:af:cc:d8:
                    77:1a:f6:b3:63:65:22:8f:d4:c3:03:4b:e5:32:ac:
                    bf:61:9e:44:21:48:8b:38:32:5e:d8:6c:be:cc:30:
                    68:ee:b2:4f:da:d0:f0:3b:6d:87:c4:8e:1b:53:b8:
                    8b:d5:e2:87:8b:68:6d:be:13:48:a5:85:45:60:14:
                    04:09:d4:e9:26:59:06:ff:ca:02:24:4d:72:dd:33:
                    e2:e2:bd:ef:26:9a:08:70:45:fd:1d:09:12:b1:ed:
                    a7:e1:23:a2:02:0d:4a:c3:d4:1b:5c:9b:6f:7a:1c:
                    1d:55:7f:72:2d:fe:51:74:ed:96:c0:a3:71:17:60:
                    48:aa:0e:1d:1d:06:9f:3a:61:f7:8d:8f:58:a7:90:
                    92:18:10:41:6a:e7:58:f6:1a:3b:2e:54:71:b1:98:
                    e4:a7:3d:b5:94:ca:5a:44:16:09:8f:4e:1d:4c:37:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:DC:2E:5D:66:03:B2:36:CB:16:4D:B5:78:6B:FE:27:0E:48:7A
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32322d3232203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:f4:b6:73:8c:da:24:c3:9c:be:9e:85:09:4b:22:cb:fc:24:
         a4:7e:2c:03:27:a9:bc:bd:d2:a0:7c:03:f9:98:0f:85:be:a5:
         35:3e:71:4f:47:5e:0f:cc:f9:f8:31:ce:34:53:54:91:c7:a0:
         76:47:14:c8:61:ab:b9:b9:44:eb:6c:aa:14:20:db:96:88:59:
         c9:b9:fa:8d:2c:aa:bd:a3:73:86:a3:eb:9f:a9:6d:f4:8b:c3:
         68:52:2f:5d:a8:34:fa:d9:48:62:47:9e:43:d4:e0:65:c1:1f:
         09:b8:0c:86:c3:bc:f4:7d:3a:14:70:64:3e:e6:6c:d7:47:ac:
         45:61:c2:c2:5a:97:ce:d2:fc:77:19:4d:49:85:81:d8:e0:7c:
         5f:e6:92:d5:6e:1f:22:da:f6:f1:69:2a:43:26:b4:56:dd:af:
         9f:93:46:0f:d4:cf:79:a3:af:a6:d1:99:96:52:58:80:a8:18:
         2b:f2:f4:84:eb:37:9e:a7:c4:03:c8:8f:17:ec:92:ac:bb:8d:
         d9:b4:b6:3d:37:f0:e7:1b:26:38:5a:0b:03:ab:d8:04:26:fb:
         3a:b1:3a:4c:f2:0e:aa:cb:36:5f:eb:15:4d:02:6e:dc:25:3b:
         71:ee:3c:3d:7e:e1:dc:fa:ff:5a:3a:a1:95:ba:4b:87:e3:ee:
         47:e4:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org