Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/34352e3233302e3134382e302f32322d3234203d3e20323637313639.roa
File:                     34352e3233302e3134382e302f32322d3234203d3e20323637313639.roa (raw, json)
Hash identifier:          zjbUtQLYniwWIIUQkIfcVCNOa0r4CHgUIXOPq5vb264=
Subject key identifier:   E1:CC:F4:77:CB:6D:68:7C:44:B7:F6:42:F6:AA:77:60:D3:E8:D6:9A
Certificate issuer:       /CN=936F7241EA7E60B9E9A8560344A7F62A26E12094
Certificate serial:       32AEAE0BE8BE58B914538CD7F8D6887BBA664BCA
Authority key identifier: 93:6F:72:41:EA:7E:60:B9:E9:A8:56:03:44:A7:F6:2A:26:E1:20:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/936F7241EA7E60B9E9A8560344A7F62A26E12094.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/34352e3233302e3134382e302f32322d3234203d3e20323637313639.roa
Signing time:             Tue 06 Aug 2024 20:52:02 +0000
ROA not before:           Tue 06 Aug 2024 20:47:02 +0000
ROA not after:            Tue 05 Aug 2025 20:52:02 +0000
asID:                     267169
IP address blocks:        45.230.148.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ae:ae:0b:e8:be:58:b9:14:53:8c:d7:f8:d6:88:7b:ba:66:4b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=936F7241EA7E60B9E9A8560344A7F62A26E12094
        Validity
            Not Before: Aug  6 20:47:02 2024 GMT
            Not After : Aug  5 20:52:02 2025 GMT
        Subject: CN=E1CCF477CB6D687C44B7F642F6AA7760D3E8D69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:9a:03:7c:a8:ca:ce:7a:47:75:31:3d:23:
                    9e:21:72:3a:36:9c:b5:e6:40:89:2d:8f:eb:d0:e0:
                    89:d2:8c:cb:47:44:4c:e5:8e:69:cb:90:18:aa:fe:
                    7f:7f:97:ca:94:16:11:a2:60:1f:ee:b4:1f:01:13:
                    d3:ec:30:ec:c7:ef:d7:60:fe:80:04:c0:58:91:52:
                    37:9e:40:7d:f5:01:25:06:9b:c3:93:80:5f:80:e7:
                    66:99:fc:18:9e:f9:88:ac:0e:f0:c5:ee:b2:03:ff:
                    75:a8:d7:98:65:32:1d:af:9a:d2:d6:85:9d:77:91:
                    28:3d:a8:dd:87:76:18:ee:53:69:17:ba:3c:1a:e9:
                    c9:3d:d3:6a:01:03:e0:06:58:2f:4c:52:3c:91:00:
                    6a:67:2b:38:e8:0d:e0:39:6b:04:b4:fa:50:03:be:
                    8d:cb:21:ff:16:3d:ad:b5:ba:58:11:75:32:69:82:
                    d2:58:73:d1:ed:14:78:72:06:90:8d:9a:92:45:4e:
                    74:c6:3e:18:ed:11:ac:cb:d0:9b:6d:1b:0a:83:87:
                    42:64:3f:59:cf:aa:ca:f4:a7:09:c8:ee:13:d6:36:
                    e2:c9:33:2f:9a:e8:eb:71:8c:d9:68:69:aa:4a:07:
                    ef:19:96:99:80:a6:e5:fb:7a:17:d0:55:e7:90:81:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CC:F4:77:CB:6D:68:7C:44:B7:F6:42:F6:AA:77:60:D3:E8:D6:9A
            X509v3 Authority Key Identifier:
                keyid:93:6F:72:41:EA:7E:60:B9:E9:A8:56:03:44:A7:F6:2A:26:E1:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/936F7241EA7E60B9E9A8560344A7F62A26E12094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/936F7241EA7E60B9E9A8560344A7F62A26E12094.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtLA8u3iSgkAWn14j9RSve7MLfj72jtHSMoPZVgLzZWU/0/34352e3233302e3134382e302f32322d3234203d3e20323637313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:a5:31:a5:6e:d9:06:89:b3:b5:10:90:39:90:94:81:d1:
         b0:85:09:4a:64:c3:d7:a0:dd:01:b5:e1:b3:80:46:dd:ac:72:
         43:94:74:08:85:b5:14:77:f7:a5:aa:97:1d:67:47:2a:d0:f0:
         39:9e:a8:2f:58:e3:b3:7d:a2:ca:54:9e:fb:90:4e:1a:84:2e:
         2c:96:f3:35:a5:ef:d7:60:61:48:6c:88:e1:a0:d7:35:27:1e:
         b4:90:b5:2b:ad:50:00:bd:69:a1:26:aa:c9:e9:03:6b:0d:40:
         d8:7e:d2:27:a5:d8:9d:cf:ca:c7:54:ba:57:85:aa:b4:d1:83:
         9c:8b:95:82:0f:1a:7a:c6:8c:f3:51:8a:24:98:0f:85:23:22:
         14:6c:20:53:56:8c:46:6d:f8:50:96:04:66:cc:ee:56:5c:00:
         d5:88:d7:13:68:ee:ac:58:fb:c8:be:65:34:60:1b:cd:58:c5:
         c1:e3:54:5b:8e:6a:dc:b9:51:f6:c1:a9:b8:f0:2b:81:16:0f:
         49:51:28:cb:aa:3f:90:1f:d8:05:ba:2d:43:1c:13:87:00:6b:
         11:99:75:c4:0b:e6:7f:3d:f0:ed:01:63:42:5d:da:b4:eb:1c:
         76:21:c6:85:32:f8:7c:83:7c:9c:03:92:a6:53:c3:63:78:ec:
         dd:3c:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 05:48:13 2024 by rpki-client on console-fra.rpki-client.org