Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa
File:                     34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa (raw, json)
Hash identifier:          1n0tyKKwLWUD4MoEeF22vBddfQD8InHQSS7FbW0JP3Y=
Subject key identifier:   2B:5C:E4:ED:AA:87:73:8F:41:CA:3C:65:AB:03:4A:6B:1D:9A:B7:D0
Certificate issuer:       /CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
Certificate serial:       100C2BFB9F3F7BC496851B33AC61D61DB17464A6
Authority key identifier: DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa
Signing time:             Wed 03 Apr 2024 22:32:47 +0000
ROA not before:           Wed 03 Apr 2024 22:27:47 +0000
ROA not after:            Wed 02 Apr 2025 22:32:47 +0000
asID:                     269378
IP address blocks:        45.185.140.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:2b:fb:9f:3f:7b:c4:96:85:1b:33:ac:61:d6:1d:b1:74:64:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB64CCDB727E7F11F10919482DBA32E200A88AE
        Validity
            Not Before: Apr  3 22:27:47 2024 GMT
            Not After : Apr  2 22:32:47 2025 GMT
        Subject: CN=2B5CE4EDAA87738F41CA3C65AB034A6B1D9AB7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:b9:7e:d9:10:f6:2d:bc:93:e1:62:f7:52:
                    af:fd:94:19:c8:4e:cf:77:64:65:60:37:b3:38:bd:
                    43:17:19:90:4d:65:1b:5d:2f:6b:24:72:af:74:36:
                    63:d9:07:e4:b1:76:b4:1e:44:ac:05:e2:66:76:0d:
                    b5:26:07:11:2f:91:df:5d:0e:73:93:e1:f8:bc:ae:
                    1e:17:c4:9d:92:57:21:47:87:7b:13:7e:7a:07:59:
                    18:fb:b5:aa:b1:71:e1:79:5c:a7:78:1b:d5:8f:de:
                    ab:9b:5a:64:05:cb:5d:5f:91:c8:80:61:4b:0e:9e:
                    b8:2e:f9:ea:e7:86:1f:fb:e4:8a:44:0a:e7:61:e2:
                    5a:6a:d5:dd:ec:f2:f7:e1:26:75:1c:4f:a5:a4:c3:
                    99:51:1e:4e:c9:fe:58:91:92:b3:79:93:fa:58:96:
                    5e:67:38:12:5f:92:62:10:38:a2:e7:e7:90:3a:23:
                    6b:1d:08:6c:63:01:61:98:9c:43:a1:7e:df:41:57:
                    84:5a:1f:f8:0c:50:18:9a:75:4a:81:a4:2b:89:40:
                    9b:be:f3:15:83:ea:64:9d:01:98:f0:e5:c8:c9:78:
                    d6:a0:bf:8d:97:b3:79:80:1e:d0:a6:bb:11:75:eb:
                    b2:58:81:39:9b:16:96:0c:53:34:c4:de:ca:28:19:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:E4:ED:AA:87:73:8F:41:CA:3C:65:AB:03:4A:6B:1D:9A:B7:D0
            X509v3 Authority Key Identifier:
                keyid:DB:B6:4C:CD:B7:27:E7:F1:1F:10:91:94:82:DB:A3:2E:20:0A:88:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBB64CCDB727E7F11F10919482DBA32E200A88AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tQvmUMCSkW9HkwhVVyVkdCWyLqbhkkifeZgtXhhf1gX/1/34352e3138352e3134302e302f32322d3234203d3e20323639333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:ff:cf:db:91:c3:15:ec:6a:6e:48:a2:2d:02:ea:e1:2b:
         17:5c:26:2f:d4:1f:ac:65:20:00:35:69:7d:ce:a1:9c:f8:19:
         25:93:c6:bf:f6:e0:17:a6:64:33:a9:b4:a1:05:94:15:1e:19:
         60:88:48:0d:3f:3b:55:05:77:54:48:61:61:31:64:62:e8:68:
         65:43:1a:36:df:26:79:ec:7e:24:85:e1:84:c5:58:77:f3:c2:
         be:f8:04:f6:98:6d:22:81:bd:75:ed:94:8c:03:82:1f:68:b5:
         c1:25:67:58:4e:7a:97:fb:e3:69:67:b9:52:a5:e0:4e:ef:fc:
         93:60:9d:58:f1:45:08:95:b7:5e:52:07:a6:a3:7e:7a:0c:6b:
         2b:39:4e:ef:33:b9:93:12:38:26:4e:4e:1a:54:67:59:6e:15:
         d7:c8:b7:81:fc:2a:c3:0f:2c:54:3c:67:39:50:eb:f7:81:bf:
         c1:33:50:41:e9:a4:15:8b:6d:1d:1c:2f:73:47:40:b6:10:48:
         4c:48:cb:2b:b7:13:a4:35:e9:31:f9:82:4b:c1:d2:35:a3:c7:
         c9:a5:5c:7b:70:59:74:82:40:ea:31:f5:35:4a:d0:c9:30:79:
         28:61:dc:4e:9e:66:51:98:c5:97:f2:d0:db:c5:31:d7:9b:8c:
         ce:13:92:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 10:30:18 2024 by rpki-client on console-fra.rpki-client.org