Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32332d3233203d3e20323639323337.roa
File:                     34352e3138322e3230362e302f32332d3233203d3e20323639323337.roa (raw, json)
Hash identifier:          61O8Z4uh+Wt7CMCKEw+g3wKqBU7OqCb/Ssz+4y9G6Hg=
Subject key identifier:   B0:31:BE:4E:BC:CE:E5:C4:CD:A4:8D:2F:E4:5C:1D:BA:B7:5E:58:E8
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       5F65FBC57A5E11CD31C91158E36D8ADA30362B5A
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32332d3233203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:58 +0000
ROA not before:           Thu 04 Apr 2024 03:06:58 +0000
ROA not after:            Thu 03 Apr 2025 03:11:58 +0000
asID:                     269237
IP address blocks:        45.182.206.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:65:fb:c5:7a:5e:11:cd:31:c9:11:58:e3:6d:8a:da:30:36:2b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:58 2024 GMT
            Not After : Apr  3 03:11:58 2025 GMT
        Subject: CN=B031BE4EBCCEE5C4CDA48D2FE45C1DBAB75E58E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:ff:df:17:f7:59:4d:56:e4:93:f4:f1:05:
                    a5:09:68:e0:4c:76:8d:b3:6d:6c:34:91:33:4b:9b:
                    41:19:95:10:88:12:96:a8:8c:ae:e4:ad:2a:c2:ce:
                    40:84:96:86:ec:f4:2a:72:ab:71:cc:64:9e:22:48:
                    cb:58:78:22:1a:5e:41:8b:3b:e3:f2:d2:24:92:ce:
                    10:93:f7:bc:5b:03:f1:ea:36:64:11:e3:f7:0b:4c:
                    c5:9a:a6:cc:88:ad:1c:f2:cd:27:c9:77:24:d6:b7:
                    e1:c0:4e:b0:0e:c7:23:77:97:e9:69:13:47:e6:e8:
                    07:fc:c9:c7:ee:58:d8:8f:9d:c8:68:61:3b:62:40:
                    d3:75:6d:04:a2:df:8d:fe:2a:9c:d2:22:4a:b1:dc:
                    b6:9c:1b:f7:1b:2e:f4:65:87:b4:3a:a2:36:9f:f1:
                    54:dc:2c:5f:26:a9:fa:9b:c0:81:d1:ae:fe:b9:bf:
                    e3:64:0c:8a:b4:80:c5:2f:37:3d:95:d0:5e:03:d0:
                    ef:e8:16:31:b6:12:5a:d3:1d:9d:3a:0b:7d:c4:48:
                    cd:0e:98:61:04:8c:2e:6e:a4:fc:a8:6e:e4:4b:e2:
                    9e:0a:d7:94:33:df:0c:fb:db:19:74:ab:4f:88:cc:
                    8f:e6:8c:82:b8:5a:96:77:a3:87:a4:14:bf:b2:51:
                    7e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:31:BE:4E:BC:CE:E5:C4:CD:A4:8D:2F:E4:5C:1D:BA:B7:5E:58:E8
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230362e302f32332d3233203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:3a:03:5c:9b:e7:15:b7:13:49:36:cb:d9:69:22:af:70:
         ff:12:24:75:9a:58:2d:e6:ae:c4:01:9a:cc:28:5c:08:bc:1a:
         32:8f:a1:8b:c9:6b:52:2f:ff:5c:c4:ab:f2:80:b2:28:e9:9f:
         ec:9f:84:d3:48:a2:20:ea:67:ea:39:47:8c:cd:8e:31:37:27:
         67:e7:68:72:2a:1c:96:b6:7d:54:4b:85:9f:7c:6b:c2:3a:df:
         81:f6:c4:4f:e3:1f:3d:7a:07:01:73:74:f8:24:25:15:46:6b:
         5e:62:4f:dc:2c:2b:4e:92:0c:aa:00:6f:b2:42:62:13:ac:b7:
         23:c0:bd:2a:24:8c:51:d2:56:3f:5c:8d:e1:50:9b:e5:53:db:
         78:6a:00:85:79:69:dd:ea:8e:d5:90:c7:51:b5:d5:ba:6b:e4:
         74:b5:95:4f:07:a8:40:db:91:67:18:80:10:60:37:c4:2e:e7:
         3b:93:12:3a:3e:21:b5:7f:eb:ef:18:56:8a:7f:e7:a0:61:9b:
         f3:f0:7b:42:b7:5b:f8:b8:19:c0:71:2c:b7:5f:66:52:f9:c3:
         3f:ca:fa:69:be:7f:26:0e:9c:f3:f8:f2:3e:7f:41:e5:f8:cb:
         bc:7a:4b:4a:aa:94:14:a6:0f:f6:16:24:dd:cc:4d:ba:c7:ad:
         db:87:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:35:10 2024 by rpki-client on console-ams.rpki-client.org