Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa
File:                     34352e3233392e32342e302f32322d3234203d3e20323638333734.roa (raw, json)
Hash identifier:          Wbt8rAZEEpNVVN50LP+SD7rzFNLzs3vDpI/XZb1bc60=
Subject key identifier:   EC:7D:CD:0A:B7:82:85:78:A5:81:49:F4:5B:C6:98:9B:89:F0:14:AE
Certificate issuer:       /CN=85D0AE05227D56565003824049A1D38AF3AE2B67
Certificate serial:       26A1AAF833960CCB0B32CA69705BCAC81C3E54F3
Authority key identifier: 85:D0:AE:05:22:7D:56:56:50:03:82:40:49:A1:D3:8A:F3:AE:2B:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85D0AE05227D56565003824049A1D38AF3AE2B67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa
Signing time:             Thu 13 Jun 2024 20:59:53 +0000
ROA not before:           Thu 13 Jun 2024 20:54:53 +0000
ROA not after:            Thu 12 Jun 2025 20:59:53 +0000
asID:                     268374
IP address blocks:        45.239.24.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a1:aa:f8:33:96:0c:cb:0b:32:ca:69:70:5b:ca:c8:1c:3e:54:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D0AE05227D56565003824049A1D38AF3AE2B67
        Validity
            Not Before: Jun 13 20:54:53 2024 GMT
            Not After : Jun 12 20:59:53 2025 GMT
        Subject: CN=EC7DCD0AB7828578A58149F45BC6989B89F014AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:9b:b8:37:29:3a:80:b3:ba:12:36:70:65:
                    99:ce:f2:1f:a7:8d:e6:3e:36:f3:11:8c:45:8e:a5:
                    23:66:5f:44:9c:e5:21:fd:bb:0d:d1:5d:07:0d:82:
                    33:2b:29:b9:62:11:6f:2d:58:3b:7e:c9:72:11:a2:
                    d9:a9:1f:22:e0:d4:55:fa:a6:bb:fd:20:fe:7e:e3:
                    2b:2a:15:f5:3c:4b:da:20:79:75:47:e4:f5:6c:23:
                    2d:4e:29:51:0c:05:14:2e:1c:7c:04:91:4e:89:be:
                    43:f2:c5:4e:91:c3:5e:f1:c1:7c:b6:cf:c5:9e:92:
                    5c:34:91:b2:97:f3:ec:5b:08:26:82:71:f5:22:75:
                    68:b9:b0:6b:b6:cd:92:84:c5:1e:68:82:e4:49:c1:
                    62:72:ce:f3:0a:19:59:ec:a4:01:b5:41:21:69:d1:
                    36:ec:74:65:d2:f1:93:02:53:5e:2c:84:c3:dc:46:
                    ff:24:84:3d:d2:fe:b6:2b:dc:2f:7a:d8:0c:59:5a:
                    5e:3d:db:25:d7:af:3c:c6:1a:aa:e8:57:67:08:22:
                    09:8d:62:08:6e:70:de:37:85:ea:6a:96:1f:ef:b4:
                    8e:ee:37:ba:f6:d7:e2:6b:14:fa:f3:73:53:94:7b:
                    22:e8:ac:c0:86:39:bb:8a:a9:cf:66:09:22:6b:02:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:CD:0A:B7:82:85:78:A5:81:49:F4:5B:C6:98:9B:89:F0:14:AE
            X509v3 Authority Key Identifier:
                keyid:85:D0:AE:05:22:7D:56:56:50:03:82:40:49:A1:D3:8A:F3:AE:2B:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/85D0AE05227D56565003824049A1D38AF3AE2B67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85D0AE05227D56565003824049A1D38AF3AE2B67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AM1j2FoZT14zXyoFgcx8o2dfunaY2e17BKW2jXcTVwWM/0/34352e3233392e32342e302f32322d3234203d3e20323638333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:e8:a6:62:f7:07:27:0a:d1:1b:6f:2f:76:72:f4:89:3d:
         8d:18:86:9b:c1:4c:3f:f6:f6:48:aa:55:32:1f:bc:b1:1c:4f:
         4d:c8:be:48:22:ec:5e:13:db:46:25:9f:27:2b:46:f7:01:84:
         bf:3a:d7:a6:48:56:be:5d:3d:7c:e5:48:16:75:c8:02:fa:31:
         c4:13:df:9f:42:bd:4b:54:5e:36:2a:3b:4e:61:ce:4a:03:d9:
         80:12:3a:df:e4:4e:3c:1f:17:f8:99:c0:89:60:39:55:24:29:
         8c:42:41:f9:1c:2a:26:dd:19:17:db:b9:5b:31:b3:ff:b2:f0:
         78:25:62:9e:4a:77:55:88:93:3f:57:97:06:e9:f1:82:5c:28:
         b2:d0:1f:74:62:31:43:09:74:5f:03:17:70:8b:44:bd:b0:31:
         39:2c:74:41:58:aa:65:cc:a7:e8:67:50:07:cc:eb:df:c2:86:
         ab:63:87:47:81:b4:42:27:1d:1e:7e:79:88:51:2c:3a:40:86:
         8b:cd:f6:cc:ee:ae:bf:b3:15:94:06:89:33:16:f1:39:04:3d:
         3d:aa:2c:f5:19:61:ee:2a:e8:dc:0f:a6:88:92:bd:2b:72:74:
         ee:0a:ec:9d:db:cf:ec:36:e6:81:7e:c2:c3:2c:10:e4:27:e0:
         23:e3:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 02:36:59 2024 by rpki-client on console-fra.rpki-client.org