Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139362e302f32332d3233203d3e20323637393838.roa
File:                     34352e3136362e3139362e302f32332d3233203d3e20323637393838.roa (raw, json)
Hash identifier:          obyRcYoXX8ePEzGWsscg3f5/eR7WnLIcBmpx4zZ3MfI=
Subject key identifier:   8F:D9:10:F2:C4:54:8D:51:F0:9A:93:EE:8F:35:7C:5D:0A:F3:49:CA
Certificate issuer:       /CN=4F65CBA63267128AD0A276268D43673E12C2C422
Certificate serial:       368C0ACE62969BE14FE83A8480F001E03DADD0CA
Authority key identifier: 4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139362e302f32332d3233203d3e20323637393838.roa
Signing time:             Thu 09 May 2024 13:33:37 +0000
ROA not before:           Thu 09 May 2024 13:28:37 +0000
ROA not after:            Thu 08 May 2025 13:33:37 +0000
asID:                     267988
IP address blocks:        45.166.196.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8c:0a:ce:62:96:9b:e1:4f:e8:3a:84:80:f0:01:e0:3d:ad:d0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65CBA63267128AD0A276268D43673E12C2C422
        Validity
            Not Before: May  9 13:28:37 2024 GMT
            Not After : May  8 13:33:37 2025 GMT
        Subject: CN=8FD910F2C4548D51F09A93EE8F357C5D0AF349CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:a2:77:9e:21:f5:1b:64:21:ce:05:fc:3b:
                    eb:94:12:38:48:44:60:6e:d5:2f:84:5c:24:bd:ee:
                    d1:8a:5b:0f:5d:48:75:8d:02:40:d7:58:33:bb:26:
                    02:f4:65:49:e5:f2:15:3a:cb:0c:9c:bd:90:a9:82:
                    0a:ab:96:9c:21:8a:05:37:1a:1d:97:43:84:05:f5:
                    ef:94:e9:cc:a6:2a:44:6d:24:df:7a:33:cf:0a:37:
                    9c:77:0f:42:8c:12:60:1a:4e:e1:26:69:0f:c2:44:
                    f7:20:3d:3a:ff:73:55:08:75:e5:84:11:34:e8:98:
                    84:f0:f5:8f:3c:e1:1c:ee:54:7a:4a:ce:63:5a:30:
                    e0:bd:15:dc:e7:e5:77:76:1b:48:22:d1:e0:c9:53:
                    84:d6:fc:b8:39:ff:3b:ea:e4:98:c8:c5:bd:b7:de:
                    25:ea:3e:d3:16:20:a3:24:96:e3:c1:99:22:94:6a:
                    52:d8:52:a5:66:1f:d0:ef:94:ba:ec:6f:0e:64:6e:
                    29:4b:ad:d0:be:61:b3:36:3f:1e:23:2d:91:cf:61:
                    7f:b2:d1:dd:ab:ca:fc:d0:b0:af:af:1e:38:bf:fb:
                    82:da:ef:a8:16:cd:5f:1a:b7:77:e2:cd:fd:45:ab:
                    79:0d:0d:3c:28:9d:52:fe:ac:f3:b7:cd:49:5d:0a:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D9:10:F2:C4:54:8D:51:F0:9A:93:EE:8F:35:7C:5D:0A:F3:49:CA
            X509v3 Authority Key Identifier:
                keyid:4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/4F65CBA63267128AD0A276268D43673E12C2C422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139362e302f32332d3233203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:d6:05:15:c5:26:b4:9d:57:36:f7:e8:0d:d9:ae:ec:87:
         71:27:43:71:5b:fd:ae:47:3b:76:00:ac:a7:a4:48:6d:d4:58:
         a2:c8:71:ae:13:a9:05:ee:4c:bc:45:0c:f3:52:fe:34:87:5b:
         22:28:53:73:24:15:de:3f:a9:89:ee:97:f1:69:91:35:3e:3f:
         5c:f1:f9:cc:33:67:81:f4:8c:68:40:4d:1b:d8:b4:f0:4b:53:
         5b:6c:f7:dd:66:67:8a:57:fe:49:ae:ba:a2:87:6f:2f:69:95:
         2f:d3:27:4b:98:14:5d:8c:13:ed:23:a9:b7:c0:75:4e:1a:74:
         b7:d8:86:df:e3:38:06:79:11:27:4d:da:d9:1b:17:e0:45:0e:
         6e:5d:9e:9d:c6:1d:2f:e9:91:11:93:5f:14:1b:df:83:93:22:
         58:67:a8:f5:b8:45:7f:21:30:77:90:91:e8:62:74:2d:6f:a6:
         10:53:2f:7d:a3:c3:d1:9d:2c:ff:1c:ff:02:92:37:3c:73:7d:
         f3:df:c4:31:e0:be:90:00:47:20:ef:69:8c:58:f8:f0:0a:f5:
         bf:fd:d8:5d:e4:00:b1:9c:4c:42:6d:15:3d:99:0c:68:f7:cd:
         33:a8:5e:2a:4b:37:3b:60:28:f9:b5:41:f9:89:d8:ed:70:4d:
         a5:ab:91:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 03:23:43 2024 by rpki-client on console-fra.rpki-client.org