Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa
File:                     34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa (raw, json)
Hash identifier:          EGUdSkeeW4oruSKdkUVwum+eVtEYgxKcLl7bgd9Gdrc=
Subject key identifier:   2F:E2:BB:A1:EA:45:D2:F4:5E:DB:9E:37:27:9A:8F:1E:86:74:16:A0
Certificate issuer:       /CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
Certificate serial:       7F14311D5908196F14526EFEBE7FF39721DDC8F7
Authority key identifier: C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa
Signing time:             Fri 28 Jun 2024 21:52:22 +0000
ROA not before:           Fri 28 Jun 2024 21:47:22 +0000
ROA not after:            Fri 27 Jun 2025 21:52:22 +0000
asID:                     269590
IP address blocks:        45.189.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:14:31:1d:59:08:19:6f:14:52:6e:fe:be:7f:f3:97:21:dd:c8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58A469341D2EFFDB450D434A30F25C9B1AD2A2C
        Validity
            Not Before: Jun 28 21:47:22 2024 GMT
            Not After : Jun 27 21:52:22 2025 GMT
        Subject: CN=2FE2BBA1EA45D2F45EDB9E37279A8F1E867416A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:80:3d:c2:d5:e7:7c:fa:19:66:36:f2:b1:d9:
                    b2:db:c3:b2:df:dc:ef:43:2c:31:57:92:04:f9:23:
                    72:7b:90:34:69:55:ad:70:98:e7:85:66:10:34:7d:
                    13:e5:d1:86:ac:c6:f2:9a:18:8d:aa:90:34:c8:33:
                    ae:ea:85:d7:cd:a0:6f:b3:69:5b:ab:a0:9b:fe:78:
                    31:7d:a8:6a:d5:e9:51:1b:22:6b:4d:7c:a4:07:0e:
                    5a:02:e9:98:d1:57:a7:dc:31:64:10:d2:78:2e:bd:
                    80:e1:69:71:25:b6:86:72:9f:89:0d:9f:c2:69:1f:
                    02:26:89:73:93:bf:e2:b2:58:f5:64:41:8c:8d:15:
                    e5:c9:1e:8e:ac:c2:fa:ae:24:2e:61:0d:bb:f4:31:
                    27:a7:da:da:7e:0b:4f:a8:99:46:cc:b3:97:13:ac:
                    d8:05:c9:0a:cf:99:fe:8d:86:56:23:15:9b:52:5a:
                    11:b7:53:bc:84:37:a5:b1:ce:cb:17:f4:0a:bb:c1:
                    cd:95:a2:1a:18:6b:00:c4:e6:04:a7:8b:db:68:51:
                    ef:a1:48:d0:f5:ce:69:2e:1c:f0:7d:ec:7e:4f:e8:
                    f0:56:ed:5f:9a:0c:aa:75:8e:3c:45:e9:09:5f:61:
                    5e:f6:e7:49:d3:e3:c8:ce:3b:8d:15:7b:40:df:d8:
                    dc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:BB:A1:EA:45:D2:F4:5E:DB:9E:37:27:9A:8F:1E:86:74:16:A0
            X509v3 Authority Key Identifier:
                keyid:C5:8A:46:93:41:D2:EF:FD:B4:50:D4:34:A3:0F:25:C9:B1:AD:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C58A469341D2EFFDB450D434A30F25C9B1AD2A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133362e302f32322d3234203d3e20323639353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:b7:e8:07:18:de:e9:97:41:89:90:f9:74:10:c0:d2:60:ff:
         4c:49:13:95:76:98:6c:f0:02:4c:6f:d3:ef:93:47:a2:32:61:
         e6:18:59:58:0d:04:24:45:71:7c:7c:e8:c9:a3:5f:a2:b2:08:
         47:9d:28:5e:c0:7b:38:d4:07:85:ef:5a:76:42:b6:ce:7f:ac:
         ae:03:c3:88:cb:32:e6:9d:98:40:90:1a:4a:8d:c4:8c:be:b9:
         46:32:de:d1:89:97:cb:d9:f2:dc:2b:53:36:00:4e:32:c8:d3:
         5f:90:69:a4:0f:14:8d:9d:4f:6d:e1:cf:61:dc:1a:42:4b:48:
         15:f8:e8:39:b8:1b:b2:ef:ff:20:44:e2:82:68:a1:58:4b:2c:
         fb:cc:fe:f2:d2:52:32:09:1d:ea:5f:45:a2:e0:d7:49:62:1c:
         64:b7:91:b5:54:51:18:e2:f4:63:8f:90:cb:44:35:1c:5f:fe:
         c2:6d:0e:2a:4c:7a:61:a2:70:35:5a:1a:1d:fc:f0:54:29:79:
         84:bc:ed:07:10:68:bb:7e:fd:03:3b:e9:ee:40:7c:34:7a:be:
         83:01:82:cb:81:78:7f:84:d6:66:30:aa:9f:46:89:4a:e4:32:
         b5:6e:1b:db:73:82:8f:fd:33:8d:6d:26:c7:0c:50:5d:33:bb:
         88:18:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 09:31:39 2024 by rpki-client on console-fra.rpki-client.org