Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230372e302f32342d3234203d3e20323639323337.roa
File:                     34352e3138322e3230372e302f32342d3234203d3e20323639323337.roa (raw, json)
Hash identifier:          HisBj1w5Jub6sYEcV4xCzeUoxvFPnuD3EjB0K491fkw=
Subject key identifier:   C1:B4:DC:7A:96:E9:D0:22:08:5C:70:59:8E:9F:26:93:32:B6:98:18
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       34E911BD253C820B5C4CFB37C4C3A2F5CBBE4D78
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230372e302f32342d3234203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        45.182.207.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:11:bd:25:3c:82:0b:5c:4c:fb:37:c4:c3:a2:f5:cb:be:4d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=C1B4DC7A96E9D022085C70598E9F269332B69818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:6f:21:d5:74:9a:e6:c9:63:cd:22:54:1c:
                    ed:d2:89:2b:6d:e7:a3:5a:71:d6:42:3e:1a:b7:3f:
                    c7:ae:a4:12:06:96:af:0b:51:63:27:5f:5f:eb:38:
                    4a:f1:4f:7f:c8:1f:27:8d:64:fa:50:bc:02:15:3c:
                    17:7c:a3:4a:17:72:21:3b:9a:8f:3a:f0:8c:ee:d9:
                    9a:08:7b:f2:7c:8d:bf:39:de:17:e0:dd:62:a1:4a:
                    1f:7d:9f:4d:ab:84:8c:3f:c8:97:33:a3:4a:03:31:
                    5d:bc:fa:ed:4b:68:01:63:ac:55:06:2c:22:e4:51:
                    15:01:8c:ab:48:ff:08:b0:7c:9c:1b:51:42:bf:8d:
                    b2:71:c7:62:3e:06:99:8e:7f:40:74:a3:71:21:ec:
                    ab:a8:39:ae:d6:53:2e:9e:a8:6a:52:5a:4e:07:f5:
                    9e:4f:3c:5b:50:b3:6f:28:fa:09:95:ad:ba:1e:bf:
                    84:39:7f:c6:92:64:e0:02:0f:27:14:a3:95:3c:c6:
                    ac:47:37:28:9c:45:21:20:46:6c:56:a5:49:af:57:
                    86:47:1a:46:50:74:15:36:01:1f:d9:4b:36:b1:49:
                    3c:b0:81:c6:59:16:6a:6c:4e:22:9b:d7:7e:bb:4e:
                    3f:bc:16:8a:1d:c3:24:0f:47:30:a6:35:3f:40:62:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:DC:7A:96:E9:D0:22:08:5C:70:59:8E:9F:26:93:32:B6:98:18
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230372e302f32342d3234203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:08:43:35:dc:6c:5c:ca:d9:24:1b:7b:eb:bb:32:6f:cf:32:
         ca:00:c7:4f:f8:88:c2:3d:3e:bc:73:83:93:c8:17:a1:e4:44:
         29:09:6e:ea:a5:b8:11:1a:35:12:aa:df:97:6e:b7:02:06:27:
         66:86:b9:ed:0a:6d:f9:37:1e:8b:b9:32:ce:f2:04:f3:6f:b8:
         33:77:46:11:2e:53:0e:9a:f8:16:61:0d:65:8f:47:47:ce:ad:
         19:01:54:20:9b:1b:ad:49:b8:25:e6:41:cd:bc:f2:d8:42:55:
         10:18:cf:85:35:ff:d8:ab:6a:09:33:28:d9:59:64:07:b9:c0:
         e1:4b:ca:e1:b9:2c:42:a8:b3:2a:44:20:2f:82:64:a7:8a:af:
         ae:f9:64:a3:e5:52:49:31:04:f6:df:08:8f:81:d0:48:0a:8e:
         9b:41:e2:30:53:d7:90:7b:e7:d6:a3:23:f1:b9:85:81:5d:3f:
         31:82:a8:8a:69:36:86:d7:f0:27:d2:e7:a1:e5:b3:ee:52:ff:
         04:fa:25:97:3e:40:6b:ad:18:84:4a:db:18:66:5b:12:2b:e0:
         8a:8c:64:b1:15:8f:30:43:a3:7d:36:f3:ae:6b:5c:76:f0:1c:
         28:16:39:6f:f5:ef:63:53:4d:d3:73:3d:d4:a5:ca:5e:1c:59:
         95:30:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org