Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
File:                     34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa (raw, json)
Hash identifier:          RxXomoHuXm9rIhculVYS6zbhEFISWAjkwRdk5x0ORGc=
Subject key identifier:   B8:54:12:C2:B0:4E:E3:91:BC:E4:B2:D3:D8:F8:21:3A:E7:4B:EA:0B
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       5BA6EED4BC4A8C4F471F8CF9E3C320E796F96302
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa
Signing time:             Thu 04 Apr 2024 19:59:33 +0000
ROA not before:           Thu 04 Apr 2024 19:54:33 +0000
ROA not after:            Thu 03 Apr 2025 19:59:33 +0000
asID:                     267203
IP address blocks:        45.231.136.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:ee:d4:bc:4a:8c:4f:47:1f:8c:f9:e3:c3:20:e7:96:f9:63:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:33 2024 GMT
            Not After : Apr  3 19:59:33 2025 GMT
        Subject: CN=B85412C2B04EE391BCE4B2D3D8F8213AE74BEA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:62:84:e9:0b:aa:8a:44:05:ff:b5:eb:d0:
                    93:c8:fe:e4:8c:2a:c9:17:26:61:04:ec:f1:6f:42:
                    f2:1f:f9:17:b3:e6:91:07:d0:38:69:5a:a1:a1:79:
                    b6:b4:bb:36:42:6b:34:5f:37:69:6b:31:76:a9:c7:
                    a9:c0:2f:e2:91:77:8c:a2:30:da:07:61:bb:24:31:
                    1e:d6:31:84:28:80:f9:ff:fa:02:8c:4f:a3:80:f5:
                    19:db:69:e7:50:8a:e5:52:bf:1e:85:10:11:43:aa:
                    c1:b7:e5:dc:d4:83:6a:f0:f3:04:44:13:ff:f5:c4:
                    ef:d0:88:33:5e:a9:91:79:cd:3a:c1:82:f7:c4:b7:
                    b4:c2:22:2f:52:a5:63:57:e2:eb:6d:60:ae:78:0b:
                    4d:d2:26:41:c6:1e:6b:e5:48:53:14:d5:8f:f8:65:
                    78:88:f8:b6:87:45:7a:3a:25:b6:c5:48:de:0b:cb:
                    3f:ae:82:64:39:74:ca:dc:1f:5c:b6:01:8b:1e:f6:
                    c3:5f:41:46:c0:59:a4:4d:51:0e:6a:27:6b:21:53:
                    35:d8:d3:8b:59:3b:74:51:c6:53:fd:cf:7f:39:51:
                    35:41:2d:e4:03:55:e7:37:32:38:08:9b:dc:00:dd:
                    01:2a:37:24:41:1b:0e:3c:8d:55:ed:c7:28:d3:f8:
                    e3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:12:C2:B0:4E:E3:91:BC:E4:B2:D3:D8:F8:21:3A:E7:4B:EA:0B
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3233312e3133362e302f32322d3234203d3e20323637323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:15:95:61:8a:5c:b8:9d:01:3a:a4:85:d8:af:73:b6:be:
         f0:54:40:14:61:3d:08:7b:88:3b:35:49:89:59:88:33:a2:73:
         a9:8c:fa:1b:55:b9:f5:9d:f2:aa:59:e7:82:9a:0a:b7:b5:84:
         fc:0b:17:25:0d:1f:ec:48:dc:28:4a:d8:26:17:9d:32:01:a5:
         1e:fa:70:e7:b9:bf:41:4f:ff:f7:59:37:92:f9:78:fc:dc:76:
         2a:9b:01:2e:16:bf:00:21:b6:fe:bf:07:0a:9f:d8:59:ba:d7:
         47:1c:f6:08:5b:35:ed:db:6c:e4:1f:0b:c4:a7:d1:f3:3c:2c:
         b4:fc:96:2c:a5:54:17:20:3d:77:0e:8f:4c:cd:1a:49:36:f6:
         a0:ac:0d:be:ac:f6:b9:58:ef:2f:10:f1:74:09:e9:2a:5c:84:
         53:4b:a2:00:98:6b:99:ad:a0:a4:2f:89:03:36:20:92:9c:9c:
         67:84:33:f6:ca:08:87:c0:ca:e4:69:28:b2:73:dc:ef:bd:45:
         66:b6:c6:3c:85:37:bc:0d:5e:24:2e:e1:01:90:a9:65:42:c9:
         f5:72:95:2e:2d:14:6b:c8:ae:f8:45:a4:c4:89:95:7d:bc:60:
         a7:43:c7:56:ca:76:ec:d5:74:a1:74:e1:35:af:b2:c6:82:26:
         50:94:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 13:11:10 2024 by rpki-client on console-ams.rpki-client.org