Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/1/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
File:                     34352e3138382e36382e302f32322d3234203d3e20323639353233.roa (raw, json)
Hash identifier:          dk7ahRV+owTrB5Boj90KwHySp0ONZJTF2az93y8no3E=
Subject key identifier:   38:84:D4:E1:20:A5:86:B8:B3:19:88:98:EB:A3:42:74:9E:EE:0B:8C
Certificate issuer:       /CN=B65952D7DE8A3C15FAB2E453E1EC67F018CDC61A
Certificate serial:       7D5A7196DD49C0C89C4314AEB4A6846E9E0B09C1
Authority key identifier: B6:59:52:D7:DE:8A:3C:15:FA:B2:E4:53:E1:EC:67:F0:18:CD:C6:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65952D7DE8A3C15FAB2E453E1EC67F018CDC61A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/1/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa
Signing time:             Thu 04 Apr 2024 19:15:34 +0000
ROA not before:           Thu 04 Apr 2024 19:10:34 +0000
ROA not after:            Thu 03 Apr 2025 19:15:34 +0000
asID:                     269523
IP address blocks:        45.188.68.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5a:71:96:dd:49:c0:c8:9c:43:14:ae:b4:a6:84:6e:9e:0b:09:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65952D7DE8A3C15FAB2E453E1EC67F018CDC61A
        Validity
            Not Before: Apr  4 19:10:34 2024 GMT
            Not After : Apr  3 19:15:34 2025 GMT
        Subject: CN=3884D4E120A586B8B3198898EBA342749EEE0B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:02:82:49:89:39:84:60:e6:32:dd:ec:fa:
                    b0:37:fe:b4:c8:72:98:34:d7:4d:98:9e:d4:6d:7b:
                    3f:df:f2:a2:3d:31:ed:2a:2d:c5:79:04:9e:ce:5f:
                    d9:6d:b6:58:cf:65:63:75:ec:0d:36:a3:44:76:cf:
                    f9:ac:bb:11:25:5d:fa:cf:3d:41:06:1b:74:41:6a:
                    6a:ed:88:06:ff:c2:5c:4d:02:05:15:5e:fe:71:11:
                    1b:ae:01:5f:a7:31:01:ba:d2:37:8a:cb:f7:da:cb:
                    1c:c1:e9:88:9f:5e:57:91:05:f2:4e:e2:26:6a:e5:
                    e5:68:e0:fe:4b:56:90:9f:6a:66:aa:be:bb:a5:19:
                    5e:07:6e:8f:c9:03:88:c6:67:16:4b:a3:d7:12:4c:
                    c6:5e:b7:aa:8e:ab:43:4e:ec:56:59:44:fe:f0:9e:
                    e4:c1:8b:f4:7a:d6:fb:e8:17:81:7a:cf:49:1b:f5:
                    46:df:89:48:dc:f6:3b:81:c8:93:81:e1:24:dd:f2:
                    4b:b9:70:6f:4c:c4:3c:22:ab:5e:93:5d:dc:ce:f7:
                    bc:96:37:1d:64:d8:84:43:8a:b0:43:7b:e8:90:e3:
                    dc:7e:c2:62:d8:d2:57:ea:58:3b:b4:3c:46:d6:cd:
                    24:a7:6f:69:5e:f1:af:cc:72:04:86:dc:0e:34:5b:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:D4:E1:20:A5:86:B8:B3:19:88:98:EB:A3:42:74:9E:EE:0B:8C
            X509v3 Authority Key Identifier:
                keyid:B6:59:52:D7:DE:8A:3C:15:FA:B2:E4:53:E1:EC:67:F0:18:CD:C6:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/1/B65952D7DE8A3C15FAB2E453E1EC67F018CDC61A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B65952D7DE8A3C15FAB2E453E1EC67F018CDC61A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAtHy94PZxeuH98JNxDzrtuwp7L4HWJpP1C44gnfuEQt/1/34352e3138382e36382e302f32322d3234203d3e20323639353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:da:f9:6f:a4:68:ee:fa:28:ba:ea:10:43:71:0c:26:e9:64:
         36:0d:37:8a:6d:18:b7:40:fd:bf:b1:6b:39:fa:2d:10:d7:3e:
         49:86:f7:ac:ee:16:4b:04:81:48:18:71:d7:98:73:70:d2:bb:
         e9:3a:cb:16:e3:6b:d7:6f:be:11:f7:a0:cb:76:da:32:9f:f3:
         8e:d8:06:16:08:66:2b:77:46:51:ed:f5:7d:6d:06:c5:14:6b:
         71:76:64:71:53:5d:dd:cd:99:a0:36:f1:ca:5c:63:b8:5f:1b:
         55:a6:db:b0:1f:fd:6b:d3:bc:70:d3:2a:29:31:58:db:0d:ce:
         98:63:e6:75:db:8f:64:7a:5e:bf:82:88:9f:08:d0:9d:0a:60:
         d1:fc:a8:72:93:97:d9:f6:df:a8:fa:a6:cc:ce:5f:f8:bb:c6:
         db:40:8e:c1:e9:43:c0:14:b3:b6:70:a1:8c:00:33:8f:8b:22:
         1d:96:27:29:ee:0e:2c:85:99:22:67:34:87:46:97:9f:9d:42:
         ca:11:b5:79:5a:6c:a0:c4:aa:98:9c:c8:45:8d:dc:3d:4e:bc:
         dc:ea:3a:4c:11:96:73:54:49:fa:c4:16:41:27:57:c2:1f:59:
         70:75:ca:96:c4:f3:54:5e:fd:01:94:ce:86:23:70:29:15:d0:
         66:35:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org