Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
File:                     34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (raw, json)
Hash identifier:          pNVcL7P8PGTW/mfWatjUapdJSu/SSrFnua3PluD/qdI=
Subject key identifier:   3E:AA:10:A0:C6:60:A5:29:B8:6C:A2:F8:0C:74:03:4B:81:2A:1D:64
Certificate issuer:       /CN=197DE4B6180FCA095E69FF5F4203DADC224DBFB6
Certificate serial:       44F9AA075CB114DB20FE1AF2BC283C4121219506
Authority key identifier: 19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
Signing time:             Tue 23 Jul 2024 18:08:51 +0000
ROA not before:           Tue 23 Jul 2024 18:03:51 +0000
ROA not after:            Tue 22 Jul 2025 18:08:51 +0000
asID:                     268398
IP address blocks:        45.160.24.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f9:aa:07:5c:b1:14:db:20:fe:1a:f2:bc:28:3c:41:21:21:95:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197DE4B6180FCA095E69FF5F4203DADC224DBFB6
        Validity
            Not Before: Jul 23 18:03:51 2024 GMT
            Not After : Jul 22 18:08:51 2025 GMT
        Subject: CN=3EAA10A0C660A529B86CA2F80C74034B812A1D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:e2:e4:25:68:73:8d:89:3a:f3:c9:69:44:
                    40:74:9f:c2:b0:bd:0f:4d:e0:95:32:7f:85:73:f5:
                    c4:94:cc:ca:e2:61:87:d1:9a:35:c9:47:a4:bc:98:
                    87:46:fa:98:ce:89:de:65:4e:2f:cf:20:8c:8f:11:
                    92:13:4c:27:30:33:4e:e4:b9:bf:03:a0:e0:74:0b:
                    df:d4:bb:8f:0c:61:54:41:37:7e:29:d9:72:37:e8:
                    84:e5:1d:bd:03:aa:7d:fb:90:e1:02:1f:10:62:56:
                    09:0d:85:6b:c7:a2:73:9f:4b:75:fa:2a:8b:25:15:
                    d9:d0:59:b8:b4:ac:00:01:b4:8c:ae:68:1f:34:74:
                    52:0e:d8:c9:8b:61:b2:a3:af:9f:7f:00:13:a7:83:
                    b6:18:10:54:5b:a3:ff:5b:2f:ce:01:1b:91:e9:3d:
                    9c:71:b5:ed:6a:d6:12:f6:63:95:ba:60:f6:73:04:
                    0f:51:fe:9d:96:1f:5d:b0:a5:a2:f0:02:1f:f9:a8:
                    9d:1c:f4:35:03:9c:be:95:32:55:63:d5:9b:06:fd:
                    23:bd:8a:fb:fe:0c:b2:4f:fe:70:16:cc:01:c2:67:
                    54:cb:9a:5f:84:19:17:34:d4:1f:1b:70:41:fe:7e:
                    a2:81:e5:21:e0:16:6a:94:91:6a:35:c6:7d:e2:50:
                    c8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:10:A0:C6:60:A5:29:B8:6C:A2:F8:0C:74:03:4B:81:2A:1D:64
            X509v3 Authority Key Identifier:
                keyid:19:7D:E4:B6:18:0F:CA:09:5E:69:FF:5F:42:03:DA:DC:22:4D:BF:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/197DE4B6180FCA095E69FF5F4203DADC224DBFB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:69:9e:e7:88:cd:cc:00:5d:1a:09:33:d4:0a:87:e5:ee:c4:
         1e:4d:fc:59:9f:9b:69:cf:a7:b7:ef:88:7f:59:ca:67:76:0b:
         b5:11:df:95:96:b7:10:1c:99:c0:76:1c:00:15:1b:bf:74:0d:
         5b:0b:49:1c:65:3b:48:16:a5:71:2e:67:75:c3:0a:e5:e2:ca:
         c4:89:96:1c:0a:04:65:53:b4:f2:32:5f:51:dd:44:54:bd:2c:
         10:bc:9e:d3:54:9d:78:ea:d7:f9:f3:0a:e7:35:3e:33:3a:00:
         5c:27:91:15:1e:ec:42:d5:7b:72:d7:73:ea:53:b8:3b:6e:e7:
         f8:c5:2d:39:1c:7f:20:6e:38:a4:cc:0d:03:25:a4:e7:46:32:
         3b:f8:98:a9:f2:c5:57:ac:a5:85:3a:d1:94:46:5f:ae:68:0b:
         8b:ca:ed:f2:66:c5:b1:03:fc:76:95:bb:98:51:f1:21:9b:0f:
         9f:fd:41:60:ee:a9:e4:ef:95:14:17:d4:16:85:a3:74:17:ab:
         ca:6f:dd:af:5c:11:30:a2:e3:dd:a6:f4:85:c8:e8:b5:76:60:
         b3:7d:be:d9:25:7c:74:74:42:9f:81:5b:92:81:c6:47:fc:cf:
         7b:76:f5:12:6f:96:b9:f8:8f:03:50:ed:80:7b:64:41:b9:30:
         19:f6:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 13:52:13 2024 by rpki-client on console-fra.rpki-client.org