Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/34352e3137352e3234302e302f32322d3332203d3e20323638393336.roa
File:                     34352e3137352e3234302e302f32322d3332203d3e20323638393336.roa (raw, json)
Hash identifier:          zaw41lMTAxbVyFjSggSiDAXDX6E4HT+MheB99v/X/iY=
Subject key identifier:   53:E0:E4:2E:87:1A:16:65:AB:0A:FA:B7:8C:9D:E7:58:77:C3:8B:DF
Certificate issuer:       /CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
Certificate serial:       28F41C254747E40CF5869176DDEE6C7AD2F4AA09
Authority key identifier: CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/34352e3137352e3234302e302f32322d3332203d3e20323638393336.roa
Signing time:             Thu 04 Apr 2024 07:59:42 +0000
ROA not before:           Thu 04 Apr 2024 07:54:42 +0000
ROA not after:            Thu 03 Apr 2025 07:59:42 +0000
asID:                     268936
IP address blocks:        45.175.240.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f4:1c:25:47:47:e4:0c:f5:86:91:76:dd:ee:6c:7a:d2:f4:aa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223
        Validity
            Not Before: Apr  4 07:54:42 2024 GMT
            Not After : Apr  3 07:59:42 2025 GMT
        Subject: CN=53E0E42E871A1665AB0AFAB78C9DE75877C38BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:b5:e7:65:3d:b9:93:31:9e:3d:46:b6:ce:
                    43:16:69:73:c9:69:ac:bf:6a:8c:bb:7a:6a:6a:7a:
                    58:0c:25:61:c0:ad:87:6d:2f:9f:72:11:65:d5:00:
                    9b:53:7a:74:d7:b2:d9:f4:04:e6:7b:43:c7:ef:67:
                    b9:57:5d:0f:3e:72:ae:6a:d9:b0:20:bb:72:53:d3:
                    d4:0c:64:51:4b:81:7a:37:59:98:94:2f:a4:78:5d:
                    09:d4:16:40:b9:5d:db:32:82:5a:cf:35:1e:33:38:
                    97:61:7a:e3:76:31:c4:1e:4a:33:e8:60:03:3f:33:
                    1c:03:50:3b:2f:a1:a3:8c:1f:47:f9:14:da:ec:87:
                    3a:5d:eb:54:20:a4:0f:a4:3c:fc:11:ea:8e:8e:65:
                    ac:7f:e2:be:2d:d8:39:98:f8:7f:b2:d8:22:af:1c:
                    2f:e3:72:a3:b2:3c:80:f6:d2:dd:3b:b6:ea:0b:ce:
                    c4:5b:71:45:0d:bc:a6:9e:92:d5:4a:e2:04:41:ad:
                    0c:28:f6:dc:e9:46:9f:1c:19:78:47:1a:7d:24:f1:
                    96:cf:68:6a:3d:68:4d:18:42:05:f8:02:19:a9:b7:
                    8f:19:ca:22:e0:4e:14:0b:ce:35:46:3c:1d:ee:e8:
                    fc:1e:6e:22:0c:4f:7a:84:5a:49:c3:08:ba:3a:21:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E0:E4:2E:87:1A:16:65:AB:0A:FA:B7:8C:9D:E7:58:77:C3:8B:DF
            X509v3 Authority Key Identifier:
                keyid:CC:74:D7:FF:ED:D2:2B:46:45:90:B8:FA:9A:13:BF:3A:A1:AE:12:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC74D7FFEDD22B464590B8FA9A13BF3AA1AE1223.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9praPEZ33c2VJUb1heRV84KzUxz6bac9Y2q4AZejJo63/1/34352e3137352e3234302e302f32322d3332203d3e20323638393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:39:f7:48:e2:0e:4c:81:3c:d9:57:ea:44:3d:8c:f0:39:1d:
         12:f9:9f:5e:03:21:36:10:e3:38:ba:a9:a9:3c:52:d9:21:03:
         17:2f:53:e4:e1:8c:84:03:45:00:b1:bc:88:a5:da:a8:12:55:
         ea:a1:45:64:46:d1:4c:c2:68:02:bd:cc:0b:92:ed:7d:12:3e:
         72:b4:cd:69:25:d3:8c:b0:7e:1f:40:f2:4b:e0:28:da:e7:13:
         72:a3:7a:5e:c5:bc:0b:14:a9:4c:78:95:78:6f:cb:63:ae:5d:
         87:7b:7f:49:b9:5a:75:12:8d:5a:df:d7:38:b5:2a:0a:e5:31:
         73:c7:f7:32:c5:0d:5c:5a:82:79:4d:76:b0:38:a1:a3:ea:89:
         80:a6:a3:dc:d4:15:33:83:03:71:0b:48:ac:57:1d:46:44:34:
         3f:9d:95:31:29:8a:80:e9:bf:c5:a5:d5:51:d7:9d:87:51:f7:
         8c:d7:ff:1e:66:e7:2a:76:87:91:45:9b:bb:a6:62:ca:93:38:
         94:c8:36:08:b9:db:46:87:48:8f:6a:25:2c:f6:b6:38:a4:b1:
         24:ea:99:9c:ef:46:ca:bb:98:9c:eb:aa:60:f6:4a:ce:50:37:
         3c:6d:c6:25:71:e8:dc:bc:56:e0:8f:b7:86:33:ea:7f:12:b0:
         a4:f6:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:15:30 2024 by rpki-client on console-fra.rpki-client.org