Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230352e302f32342d3234203d3e20323639323337.roa
File:                     34352e3138322e3230352e302f32342d3234203d3e20323639323337.roa (raw, json)
Hash identifier:          ACBK1bdAdZz4T3xJVZKxKCaS8q7j/VDuEfGNtysO3BQ=
Subject key identifier:   A3:68:9E:3A:62:38:6C:1D:80:E7:C6:F4:9E:C1:4B:A2:3A:14:E0:A9
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       6E7AEBC62DA399E6A483A990184AF878846D5DF8
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230352e302f32342d3234203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        45.182.205.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7a:eb:c6:2d:a3:99:e6:a4:83:a9:90:18:4a:f8:78:84:6d:5d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=A3689E3A62386C1D80E7C6F49EC14BA23A14E0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:90:c1:40:f4:22:f7:aa:e1:ba:06:0d:35:
                    9e:4e:db:73:be:7a:40:79:4e:a2:1c:21:bf:09:f2:
                    6d:e6:9c:b3:b6:a2:e1:e8:51:1b:fc:62:66:44:33:
                    93:14:81:ba:ba:ad:88:6d:ea:0f:77:f3:98:61:e0:
                    80:1d:6e:7d:d2:33:ef:47:5f:02:31:5a:96:a5:5b:
                    cb:8f:1f:d7:94:c6:16:26:71:b1:9a:11:f2:6a:4a:
                    d2:73:02:07:3a:c9:94:34:56:e8:8c:5f:6e:00:b9:
                    af:0b:9a:9e:49:29:d8:54:ce:47:bc:fd:9e:70:1a:
                    97:d9:d8:47:1e:18:56:c4:24:8e:db:06:89:5c:5a:
                    47:49:27:4c:17:5a:56:13:50:20:a9:4d:34:a5:b7:
                    1f:e7:3e:da:0e:b9:3b:59:b1:1c:13:b9:80:12:e6:
                    77:07:2a:76:d5:b3:31:92:d1:c6:68:18:05:77:f6:
                    34:8a:f2:12:9d:06:d4:4d:d9:eb:ca:40:2d:45:88:
                    38:51:c5:9d:07:19:d1:26:14:ff:22:fd:f6:b8:32:
                    91:1c:5e:c6:c7:0a:ad:14:e8:b7:ef:58:a9:4d:7e:
                    d0:2f:13:86:8a:9d:9e:b1:4d:03:f2:36:54:7a:51:
                    8c:d7:77:ef:ee:0f:6d:84:8e:0f:da:2e:5d:f6:e6:
                    44:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:68:9E:3A:62:38:6C:1D:80:E7:C6:F4:9E:C1:4B:A2:3A:14:E0:A9
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230352e302f32342d3234203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:5c:1a:63:39:61:49:3b:1c:00:4c:2c:02:98:87:4e:55:47:
         4b:f5:2e:91:1c:52:95:35:3b:e0:d2:08:6d:88:eb:53:55:4a:
         53:15:13:d4:dc:f4:64:6f:09:22:9a:a5:67:ac:fe:99:c8:5b:
         59:c4:e5:dc:37:aa:c9:90:0b:94:05:25:7f:b9:aa:fc:cb:61:
         f7:19:14:fd:df:40:37:7b:36:49:b2:1b:9e:33:50:01:4b:94:
         e5:72:f9:e6:2f:46:06:35:46:fb:ff:4d:2f:f1:17:23:5d:67:
         30:14:74:31:9a:c1:ac:b4:dd:98:69:0e:fa:1c:62:c7:72:26:
         4d:f6:77:79:12:12:ee:57:2a:ac:86:9f:d8:29:01:ed:6d:c4:
         14:4e:fe:78:30:00:ac:92:c8:96:f2:d0:cd:71:2a:d7:de:74:
         d5:b6:c8:c0:1d:34:70:f7:34:38:3f:ca:a5:4e:a7:75:81:5b:
         f8:9a:03:9c:2d:7f:0b:73:b6:df:79:6a:a9:fb:bc:9f:04:cc:
         10:16:8f:6f:3e:74:b8:0f:12:7e:e0:e5:7c:65:21:d4:7a:01:
         24:79:7b:0d:41:ff:1c:fd:29:f4:c6:68:7e:f2:75:21:b6:a0:
         f1:6c:ba:7d:20:43:ae:f1:92:54:43:1b:d9:26:64:57:ee:73:
         b8:ed:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org