Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/34352e362e3234342e302f32322d3234203d3e20323731303738.roa
File:                     34352e362e3234342e302f32322d3234203d3e20323731303738.roa (raw, json)
Hash identifier:          OLqt77pA227fCWKZVS1raoXOClHWGC/l7iOazIdUA68=
Subject key identifier:   DF:E9:5E:3B:F2:1D:BF:D2:60:95:57:EB:9A:3B:50:60:03:9A:70:64
Certificate issuer:       /CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
Certificate serial:       5B806ACDE2D5318500400D95C41692C5F0AB461D
Authority key identifier: 1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/34352e362e3234342e302f32322d3234203d3e20323731303738.roa
Signing time:             Thu 04 Apr 2024 01:07:05 +0000
ROA not before:           Thu 04 Apr 2024 01:02:05 +0000
ROA not after:            Thu 03 Apr 2025 01:07:05 +0000
asID:                     271078
IP address blocks:        45.6.244.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:80:6a:cd:e2:d5:31:85:00:40:0d:95:c4:16:92:c5:f0:ab:46:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CBEAA86D03EF7AECC656CCE5B400357459EF7D6
        Validity
            Not Before: Apr  4 01:02:05 2024 GMT
            Not After : Apr  3 01:07:05 2025 GMT
        Subject: CN=DFE95E3BF21DBFD2609557EB9A3B5060039A7064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:cf:7e:0c:82:ee:56:56:c0:a8:08:72:ac:
                    71:c8:f9:ae:3b:f0:c4:bf:5e:53:c4:25:b4:c9:ec:
                    0b:b9:dd:11:72:28:41:f5:31:be:63:13:60:70:26:
                    e1:35:43:66:e5:d9:eb:97:d3:aa:73:b6:ea:66:87:
                    17:e3:27:3d:24:8b:53:f7:9a:ef:03:6d:e4:18:31:
                    b2:02:b1:b3:2e:06:e1:ca:b3:a3:ca:33:a5:c3:81:
                    a3:8f:27:47:9c:37:e7:64:0c:c2:9a:82:a0:30:df:
                    5b:8a:1f:3c:bc:24:32:aa:ce:2a:0b:15:56:bb:36:
                    2f:dc:7c:84:e3:e8:81:f1:0a:a9:17:71:b9:79:ce:
                    00:d4:d5:f9:ad:c8:70:28:10:77:c2:e7:5a:0c:2d:
                    7b:14:59:e3:e1:53:2d:ec:b7:0e:bc:ec:86:db:7e:
                    41:ea:84:03:9a:d4:61:83:cc:a5:50:16:91:f4:67:
                    d3:9c:f8:74:fa:64:46:f7:be:3e:62:30:29:aa:8d:
                    37:3c:49:ed:dc:d1:bb:03:c8:2a:fe:fe:7f:49:de:
                    32:64:5d:5e:bc:c5:8a:6c:43:a9:95:b9:07:c0:3a:
                    0b:20:5a:8a:19:26:cf:c1:51:fe:df:82:78:9b:0f:
                    45:6c:38:77:06:a6:d9:44:da:87:7f:16:71:4e:65:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:5E:3B:F2:1D:BF:D2:60:95:57:EB:9A:3B:50:60:03:9A:70:64
            X509v3 Authority Key Identifier:
                keyid:1C:BE:AA:86:D0:3E:F7:AE:CC:65:6C:CE:5B:40:03:57:45:9E:F7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CBEAA86D03EF7AECC656CCE5B400357459EF7D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ax3sGfduTBhgk2muSHiAccSTThuASzZLZ9JFTY1Law7m/1/34352e362e3234342e302f32322d3234203d3e20323731303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:b6:b1:8a:4e:6d:29:e8:65:a7:44:1e:da:a6:98:7a:8e:7b:
         10:ed:22:29:47:c7:ba:eb:99:f1:df:f0:dd:ed:bc:8f:f9:b2:
         06:2c:87:07:28:16:4e:62:ed:cc:cb:4d:4d:a2:14:1a:53:95:
         00:84:ec:7b:af:9d:9a:d7:39:a5:fb:9f:3d:43:45:37:0f:87:
         72:ea:ce:3c:2c:69:bc:c6:e2:b8:4a:fb:10:fc:54:d2:f8:aa:
         ea:3c:88:2b:67:c5:e2:2c:b9:cd:5f:9d:4d:5c:12:aa:f5:f0:
         7c:43:24:10:7f:a4:a8:85:59:f7:d1:f9:97:3b:19:30:32:01:
         c4:db:d0:e0:f2:f6:dd:6c:fe:77:ac:e5:41:76:f6:53:5b:7b:
         85:57:43:72:0a:47:ef:4d:1f:1f:37:4a:4d:3b:2e:86:58:24:
         78:07:db:2d:73:6b:8b:2a:23:d3:9f:4a:7c:fd:cc:8a:fe:e6:
         c5:ee:45:16:f5:8e:e5:c8:c3:14:75:29:5f:01:4b:0a:89:3c:
         8b:a6:34:da:fa:20:80:6c:0a:76:3f:1e:19:cb:df:26:7b:24:
         8e:55:08:a8:42:c6:37:2b:59:4c:06:93:d5:26:39:ef:29:c0:
         97:b0:de:46:73:e2:b4:4d:bc:75:25:b8:50:8e:76:d1:23:dd:
         73:ed:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 13 22:40:52 2024 by rpki-client on console-fra.rpki-client.org