Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
File:                     34352e3138342e34342e302f32322d3234203d3e20323639333131.roa (raw, json)
Hash identifier:          IxKPRBidygZpQvyjW5PUaD4xVnf+37vJ6Nk+SaotFQE=
Subject key identifier:   20:E8:D3:B7:83:29:EE:C5:B2:5B:0D:1C:F4:49:29:50:29:DE:43:91
Certificate issuer:       /CN=BF234AB2322E7E5B16EF5E5FE90EFF330E062728
Certificate serial:       970A709B01CC4343B44FFAF1A5438D407162AE
Authority key identifier: BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa
Signing time:             Tue 07 May 2024 14:24:08 +0000
ROA not before:           Tue 07 May 2024 14:19:08 +0000
ROA not after:            Tue 06 May 2025 14:24:08 +0000
asID:                     269311
IP address blocks:        45.184.44.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:0a:70:9b:01:cc:43:43:b4:4f:fa:f1:a5:43:8d:40:71:62:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF234AB2322E7E5B16EF5E5FE90EFF330E062728
        Validity
            Not Before: May  7 14:19:08 2024 GMT
            Not After : May  6 14:24:08 2025 GMT
        Subject: CN=20E8D3B78329EEC5B25B0D1CF449295029DE4391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:b5:9d:b6:0d:81:15:a1:b7:d5:a8:a4:88:
                    b9:55:34:a8:0b:6d:c7:d5:e8:4b:7c:2c:3e:e1:ed:
                    df:c9:9a:2b:48:b7:a0:35:d0:de:d1:a9:c6:a5:09:
                    00:82:5c:a1:8c:27:c9:b5:cd:3d:c4:e9:18:85:35:
                    c4:8a:70:77:b7:c6:fb:62:d6:5e:47:b3:30:bc:3c:
                    60:8d:f5:31:13:3c:6d:88:2d:b7:52:c8:5f:62:b1:
                    89:c3:06:0a:c2:4e:a3:1b:0c:3d:38:0e:3c:f5:92:
                    26:68:a3:d7:62:e1:5f:1b:dc:be:e3:1f:27:1d:43:
                    62:ad:1a:39:17:14:22:fc:00:c4:ed:2e:91:ef:a5:
                    62:31:46:dc:0c:7d:2e:b6:43:76:83:22:5a:26:58:
                    11:30:8f:b0:e3:23:52:f0:39:b4:f6:cc:0b:f6:74:
                    b5:d0:30:e3:f5:2a:e3:f5:7c:f0:30:f9:94:27:de:
                    3a:84:00:bf:4d:79:28:50:bf:46:09:ab:b8:5d:48:
                    e7:a8:d6:5f:c2:8a:b1:55:1e:39:c8:e7:f3:b5:2b:
                    dc:1f:01:d1:f6:a6:20:9f:a8:a7:79:44:eb:ed:24:
                    d7:56:d8:d8:ae:1d:13:18:3d:18:66:69:6f:60:2b:
                    ca:19:9b:cc:69:f4:67:c7:59:6b:f3:f1:65:de:70:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E8:D3:B7:83:29:EE:C5:B2:5B:0D:1C:F4:49:29:50:29:DE:43:91
            X509v3 Authority Key Identifier:
                keyid:BF:23:4A:B2:32:2E:7E:5B:16:EF:5E:5F:E9:0E:FF:33:0E:06:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF234AB2322E7E5B16EF5E5FE90EFF330E062728.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA7vDYY2Vdj9LcCtoixct2gmPoqegLYp9mEuT18MpWYs/0/34352e3138342e34342e302f32322d3234203d3e20323639333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:04:2d:21:72:54:5f:21:a0:2d:de:f1:70:54:ca:87:7c:
         cc:62:75:e7:11:d9:c4:0d:a1:11:7e:10:06:83:78:de:3f:c6:
         ff:41:83:80:cc:4f:e3:c8:97:6b:d4:73:5c:06:0a:68:2f:18:
         06:d8:2b:8a:6f:a8:ea:fc:64:ea:48:33:44:5b:bc:ab:8a:b1:
         91:57:b6:2f:11:5e:98:8a:7c:bf:03:7a:e9:21:3e:57:34:23:
         62:e1:65:c2:3a:d0:eb:0a:24:1f:f9:4e:49:52:7b:69:7f:67:
         31:93:35:10:11:31:51:e2:bd:d0:40:02:7e:7d:ba:ae:ee:1b:
         1b:3f:4e:68:23:69:92:47:4f:5c:18:50:2b:5f:36:b0:e4:94:
         53:71:e9:99:1e:d8:b3:6b:a0:fb:a1:c0:54:38:d2:b4:8c:8d:
         29:90:cd:83:9a:37:6a:ab:46:41:e1:c1:f9:03:43:71:1c:10:
         fb:cb:de:77:f3:74:b8:c6:6f:09:e8:52:ea:51:c7:28:96:38:
         d9:ad:cd:bb:aa:d0:bf:05:86:f1:0f:c8:f5:11:d7:a3:07:06:
         7f:46:14:dc:f1:91:7a:a3:6b:32:22:84:72:5a:c5:ea:6d:65:
         0a:e1:c8:85:b9:0c:d0:45:a2:12:ff:fd:a0:7d:3e:18:98:79:
         28:1e:ca:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:16:44 2024 by rpki-client on console-ams.rpki-client.org