Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/2/34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa
File:                     34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa (raw, json)
Hash identifier:          0yv0I7VwSQANJRDsGdjAKXZL+E1IErzK2fPXQBBTbgg=
Subject key identifier:   5A:91:89:2A:14:BA:B3:4F:89:B3:82:70:47:67:AD:19:B7:F6:05:A1
Certificate issuer:       /CN=B8DAB2C1B2EA9470165CFF654CBFE6CE329B2C9C
Certificate serial:       3C0242344F7538DB3AB6B08B49505DA6793473AD
Authority key identifier: B8:DA:B2:C1:B2:EA:94:70:16:5C:FF:65:4C:BF:E6:CE:32:9B:2C:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8DAB2C1B2EA9470165CFF654CBFE6CE329B2C9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/2/34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa
Signing time:             Thu 04 Apr 2024 01:38:05 +0000
ROA not before:           Thu 04 Apr 2024 01:33:05 +0000
ROA not after:            Thu 03 Apr 2025 01:38:05 +0000
asID:                     267113
IP address blocks:        45.227.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:02:42:34:4f:75:38:db:3a:b6:b0:8b:49:50:5d:a6:79:34:73:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8DAB2C1B2EA9470165CFF654CBFE6CE329B2C9C
        Validity
            Not Before: Apr  4 01:33:05 2024 GMT
            Not After : Apr  3 01:38:05 2025 GMT
        Subject: CN=5A91892A14BAB34F89B382704767AD19B7F605A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:9c:7a:53:67:4c:46:30:2e:5b:d6:e2:14:
                    d4:04:00:4f:81:7a:b2:a4:0c:4b:05:9a:a3:d6:a2:
                    72:46:5f:30:6f:33:ce:c7:f2:48:ed:25:30:6c:b4:
                    aa:8f:c1:38:b6:a4:95:7f:b6:be:58:9b:16:0b:d5:
                    ef:8e:0b:8f:6a:e2:48:7b:87:ca:dd:dc:ca:29:56:
                    b0:81:e1:7c:7a:a9:6c:d8:ba:cb:8d:d3:a2:fc:5f:
                    17:b4:ab:ee:5e:c7:cb:0a:2a:cc:cd:25:3c:7a:07:
                    97:11:8d:f1:6d:01:a6:c3:71:83:03:b0:d5:d3:2c:
                    97:78:51:c1:d5:da:51:06:18:23:ef:98:04:60:70:
                    3f:ca:de:dd:2e:88:6c:98:da:9c:d9:88:3c:fa:33:
                    0b:f7:16:91:06:78:a7:71:b9:8b:ea:79:2a:f0:f7:
                    47:e8:55:8a:3d:2a:f8:05:5d:2b:8e:58:36:8d:1a:
                    e3:b5:71:8b:9d:5f:13:e9:fa:59:c6:e5:68:1b:84:
                    80:04:dd:ca:1a:56:59:dd:86:97:3c:cc:36:08:7c:
                    d5:87:d1:85:ff:7b:f3:46:d2:6f:a2:7d:5c:38:08:
                    c5:58:91:ca:b6:e7:e5:3a:f9:4b:6f:dc:5b:7b:14:
                    91:37:55:3d:1b:86:62:89:07:44:76:c0:56:c1:9c:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:89:2A:14:BA:B3:4F:89:B3:82:70:47:67:AD:19:B7:F6:05:A1
            X509v3 Authority Key Identifier:
                keyid:B8:DA:B2:C1:B2:EA:94:70:16:5C:FF:65:4C:BF:E6:CE:32:9B:2C:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/2/B8DAB2C1B2EA9470165CFF654CBFE6CE329B2C9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8DAB2C1B2EA9470165CFF654CBFE6CE329B2C9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nn4qunSioixwZNj7WvF1ujM9pzqh93EnrGfHnhuHMZJ/2/34352e3232372e3134302e302f32322d3234203d3e20323637313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:33:90:df:ab:8a:3d:39:d9:df:f3:ba:d5:d8:4b:a7:c3:
         89:b7:74:19:23:df:3e:6d:82:a1:c3:6c:c4:a2:27:f3:ac:73:
         52:15:8f:78:0d:5d:97:a6:6a:29:4e:d3:c8:04:e2:cf:8a:95:
         c0:c2:05:de:7c:62:f5:f5:be:08:cc:8d:f0:26:4d:52:c2:9f:
         1d:07:ce:79:3f:8c:50:e4:28:e4:f7:5e:71:0a:93:02:f8:2c:
         34:2e:94:eb:30:52:e7:b1:9a:f8:25:2a:ef:20:e0:3a:53:11:
         ea:7d:4c:d1:2e:50:d2:a0:4b:c7:14:fa:63:35:ef:47:4c:de:
         71:a7:1c:53:53:67:4a:ab:f8:9c:ff:52:a2:1d:b9:39:b8:5c:
         8a:96:a8:77:49:18:60:57:fc:3b:db:ef:54:7c:d7:f3:88:c7:
         d0:8c:8e:ea:2d:55:7a:e5:02:45:5e:b9:7c:5d:c5:1b:a8:bf:
         c2:3b:c0:ff:13:aa:d8:8b:90:99:1b:10:78:9b:a5:4f:ba:c5:
         17:2e:34:8f:c6:cd:01:c6:0c:f3:d2:98:3d:d6:4f:08:e2:2b:
         e7:e9:5b:c0:6b:f2:c2:da:3d:d4:37:2a:96:28:f2:76:7f:32:
         ba:ac:0e:3e:52:fa:26:b3:6f:9a:c6:ab:f6:e3:fd:f2:5e:41:
         7b:8f:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 14:31:32 2024 by rpki-client on console-ams.rpki-client.org