Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa
File:                     34352e3136302e31362e302f32322d3234203d3e20323638343032.roa (raw, json)
Hash identifier:          zUVD+q83Xr3C81mSu5CU2CCyziwtoM9b/50aqf/VXWY=
Subject key identifier:   ED:8C:23:F0:8B:39:06:F5:5C:F0:30:68:20:F6:40:C5:D4:08:56:E1
Certificate issuer:       /CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
Certificate serial:       06D63D6740654B0A6B6043977C4B6BE045F1CE08
Authority key identifier: 15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa
Signing time:             Fri 14 Jun 2024 14:20:51 +0000
ROA not before:           Fri 14 Jun 2024 14:15:51 +0000
ROA not after:            Fri 13 Jun 2025 14:20:51 +0000
asID:                     268402
IP address blocks:        45.160.16.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d6:3d:67:40:65:4b:0a:6b:60:43:97:7c:4b:6b:e0:45:f1:ce:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A
        Validity
            Not Before: Jun 14 14:15:51 2024 GMT
            Not After : Jun 13 14:20:51 2025 GMT
        Subject: CN=ED8C23F08B3906F55CF0306820F640C5D40856E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:66:f3:20:8a:43:8b:86:40:8d:fd:25:b8:d2:
                    46:af:85:1b:7c:e1:3f:ba:de:ac:64:64:80:49:90:
                    c5:4a:3f:bf:6a:2d:cf:05:ba:ed:be:bb:84:58:72:
                    6d:6f:fb:1c:58:9c:52:e5:67:e2:ff:7e:2a:09:5b:
                    22:92:eb:83:03:c5:75:d2:d9:0d:63:c0:f2:89:2f:
                    f8:bb:51:74:0c:59:0e:14:56:18:6c:32:f5:9f:a8:
                    94:2d:f4:45:e5:5e:c9:1e:6b:91:82:67:46:c1:f3:
                    4e:8e:45:75:fd:97:34:f5:00:d3:70:e4:9c:8c:ee:
                    ff:0d:5a:be:ec:a8:30:44:af:30:d9:5a:71:a9:50:
                    a1:df:82:99:81:86:3e:1b:62:60:95:34:c7:66:58:
                    f9:69:20:5b:18:11:c8:15:55:0d:90:fa:54:6e:33:
                    34:f9:fc:1a:a8:6c:2f:b3:7e:3f:1e:91:cf:62:26:
                    77:f8:32:f1:16:fd:ac:fb:9c:92:1f:bf:32:9a:9b:
                    6b:74:e9:30:18:00:96:b6:4a:3a:6e:f7:7e:84:d2:
                    0b:a2:b0:71:1a:50:cc:25:ed:aa:7f:39:b4:a6:dd:
                    f7:eb:af:32:ff:00:73:03:63:f4:b7:3b:13:0b:a6:
                    7c:bf:47:0f:fa:a9:a5:d9:88:0a:6e:9f:0f:c2:78:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:23:F0:8B:39:06:F5:5C:F0:30:68:20:F6:40:C5:D4:08:56:E1
            X509v3 Authority Key Identifier:
                keyid:15:7A:1A:A8:78:EF:7E:6D:1D:53:43:28:AA:B6:FD:83:3E:1D:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157A1AA878EF7E6D1D534328AAB6FD833E1DBE6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AvhQZzfV8KSrHTyKPK3w9UbsDqwNJz1FEk9GqMpBuPX7/0/34352e3136302e31362e302f32322d3234203d3e20323638343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:d8:0c:1a:26:80:5e:97:a8:b2:5b:25:70:56:30:f9:86:de:
         f9:9d:ed:8e:23:99:0c:a3:15:19:0c:6b:9c:1c:ab:06:ef:b5:
         87:c3:3a:38:bf:56:7b:26:fe:4a:b1:25:1c:b7:c9:b7:80:7b:
         91:18:13:60:de:12:81:c8:fc:61:d9:64:e9:0b:8f:05:9f:92:
         9d:88:32:1a:30:0a:5c:be:5d:3b:b1:90:6f:be:42:64:fa:f8:
         83:6f:1f:5a:8c:02:6a:92:ae:2f:60:ef:eb:fb:03:ea:c4:5f:
         cd:fe:9a:09:8f:ed:50:77:66:63:d0:d9:c2:bb:e5:71:77:d6:
         ca:59:20:e4:d3:09:08:72:a0:99:32:23:4c:fc:a0:40:c6:5f:
         99:0b:26:24:c2:c5:cf:e9:b5:21:1a:6a:23:81:ed:6c:7c:84:
         d3:ec:92:c7:ee:31:06:9c:62:c7:a9:42:49:bb:04:e8:06:1a:
         13:82:39:5a:a6:5e:7d:9f:f0:2a:a8:93:7d:99:ff:82:e7:11:
         c2:da:b5:bc:84:2a:14:c5:c2:50:15:70:91:37:74:76:57:0c:
         e7:16:6b:c7:b7:ad:13:a2:53:36:5c:e3:67:52:f6:99:5f:50:
         eb:19:8c:35:63:90:5e:7f:4f:25:87:a3:47:9a:e9:34:26:8d:
         ef:ca:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 02:41:49 2024 by rpki-client on console-ams.rpki-client.org