Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
File:                     34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa (raw, json)
Hash identifier:          ZP4ijPFWGctVstUZk5yB5u+3RrR04fcINVyBiIsf83Q=
Subject key identifier:   1D:3E:55:07:F7:3B:15:91:4B:7D:E6:C6:F5:6B:C9:20:3B:B4:D9:92
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       335499AD77DBB96E48DC80AC09DB0DF34FFE7157
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa
Signing time:             Thu 04 Apr 2024 19:59:28 +0000
ROA not before:           Thu 04 Apr 2024 19:54:28 +0000
ROA not after:            Thu 03 Apr 2025 19:59:28 +0000
asID:                     269489
IP address blocks:        45.187.236.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:54:99:ad:77:db:b9:6e:48:dc:80:ac:09:db:0d:f3:4f:fe:71:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:28 2024 GMT
            Not After : Apr  3 19:59:28 2025 GMT
        Subject: CN=1D3E5507F73B15914B7DE6C6F56BC9203BB4D992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:83:81:fb:a2:3d:dc:08:c6:01:fc:a1:68:
                    02:0e:6c:38:19:51:3f:f1:5d:a4:51:45:db:eb:8c:
                    a5:f6:87:5c:ad:e9:ae:24:1b:da:33:64:77:bd:1b:
                    fc:91:43:98:a4:a8:96:28:75:e3:da:5f:6e:56:1b:
                    a5:8f:7b:16:eb:ce:04:0a:b2:af:c9:c3:73:82:ed:
                    85:d4:95:bd:98:ed:75:28:24:56:47:7f:2b:82:a2:
                    d2:12:c9:ec:49:ad:b6:48:13:34:ba:e1:f7:c1:42:
                    c8:e2:a6:29:72:31:b8:39:b8:39:aa:28:ed:2b:b3:
                    42:0b:fe:03:0f:c0:95:36:de:8b:78:a6:e8:21:36:
                    f3:40:8c:b4:1d:97:26:41:a5:da:d4:1e:0d:bc:af:
                    69:1c:bb:a2:8c:ee:18:4b:08:ad:7d:1a:36:c5:ff:
                    5b:3c:cf:5a:32:08:a0:d5:8e:c4:34:26:c4:ed:e6:
                    9b:0d:1e:76:47:3c:bf:8d:20:91:61:db:58:7c:ca:
                    f7:8d:8d:a0:48:27:58:23:84:3d:26:15:e1:ce:cc:
                    6a:b0:57:50:94:87:13:11:91:e5:71:b1:af:24:90:
                    20:54:51:87:00:9f:95:67:fa:12:df:06:d1:b1:23:
                    84:40:68:ee:26:28:ba:45:94:0a:67:68:14:cb:ba:
                    cc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:55:07:F7:3B:15:91:4B:7D:E6:C6:F5:6B:C9:20:3B:B4:D9:92
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3138372e3233362e302f32322d3234203d3e20323639343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:03:79:45:a8:f9:73:a8:90:a6:19:c5:65:28:87:6c:51:
         42:4a:1c:65:ed:01:f9:52:d8:40:cc:23:a8:3e:92:ee:fe:d1:
         ee:72:bc:55:80:d1:ce:84:19:b4:0e:c1:b3:92:18:82:52:d8:
         b4:ce:7a:49:36:4e:d2:87:86:87:db:ee:7b:ab:fe:7a:bd:85:
         5b:39:aa:12:01:98:88:9d:a8:93:9a:52:16:d5:df:30:c9:81:
         05:1d:8d:86:bb:3a:9b:bf:ad:5a:56:a4:94:ee:a3:09:75:a7:
         b0:f6:40:93:c6:3b:48:98:ed:87:71:89:f2:7a:4a:85:17:6e:
         d7:fe:bd:55:d2:85:17:e8:32:82:38:58:10:dc:f0:c6:50:3d:
         b2:0e:c7:f4:44:78:6d:6f:8e:60:52:f5:50:c5:f0:5d:18:cd:
         f0:91:df:1c:f5:e2:94:4f:66:74:d1:e3:5d:b3:cc:9e:a1:75:
         6b:7f:83:03:12:bf:b0:98:85:9c:be:e6:ce:d0:bc:a6:09:87:
         08:0f:bb:22:78:6a:3c:b4:68:da:4f:60:4f:db:1f:a7:d4:00:
         f3:d2:75:c7:29:40:43:fd:a6:aa:39:c6:5c:17:fc:6e:8f:2b:
         8a:27:6f:68:f9:75:60:ed:f7:ca:15:07:6b:42:a4:9b:28:f9:
         95:c0:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org