Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa
File:                     34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa (raw, json)
Hash identifier:          ngbWyrU16+xJbiU/yS4n0m4rHhlznb+Emi++aPxlZDc=
Subject key identifier:   EA:09:9B:73:71:F7:FF:E0:CB:54:13:9D:A0:ED:9F:77:ED:AB:1B:7E
Certificate issuer:       /CN=5A003371CC68E0AE639A96528D538339E91DC729
Certificate serial:       38648C2D3B9906227D875A70E1A006F04C78BA0C
Authority key identifier: 5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa
Signing time:             Mon 11 Nov 2024 12:40:28 +0000
ROA not before:           Mon 11 Nov 2024 12:35:28 +0000
ROA not after:            Mon 10 Nov 2025 12:40:28 +0000
asID:                     268518
IP address blocks:        45.162.128.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:8c:2d:3b:99:06:22:7d:87:5a:70:e1:a0:06:f0:4c:78:ba:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A003371CC68E0AE639A96528D538339E91DC729
        Validity
            Not Before: Nov 11 12:35:28 2024 GMT
            Not After : Nov 10 12:40:28 2025 GMT
        Subject: CN=EA099B7371F7FFE0CB54139DA0ED9F77EDAB1B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:5d:30:12:66:ae:f0:6b:b8:65:cb:ca:b7:
                    fb:d8:a6:28:94:f3:84:88:4f:d1:f4:ad:86:bd:2e:
                    9a:5b:33:d9:f8:4a:2d:df:68:3c:39:9c:a8:1e:57:
                    7b:a0:04:50:7f:76:a5:a8:07:7a:0a:4b:14:20:e4:
                    9f:f2:c4:0c:f7:fd:95:fa:b7:d3:9d:00:7b:24:76:
                    a5:e6:b7:db:42:e7:15:d2:61:e4:fe:2c:e9:af:27:
                    96:23:fd:33:7e:be:87:f7:9c:f6:05:81:97:cc:e3:
                    a0:8d:b4:5b:a1:78:be:f9:30:bb:09:f1:75:94:af:
                    13:5f:fe:17:6b:2d:34:88:72:f7:de:f6:d0:22:4d:
                    04:42:e6:5e:7d:c4:4d:31:d0:46:b1:b4:6b:f2:5a:
                    d0:12:76:0a:cb:34:26:e5:fe:bd:26:23:ec:74:be:
                    02:d9:ff:4f:d1:95:17:15:a5:27:9e:23:79:d9:2a:
                    1d:af:9b:18:90:69:15:67:0c:f8:ae:af:11:dd:37:
                    a7:a7:20:ec:a5:4d:05:c3:8e:23:99:4b:2b:70:ef:
                    60:37:7d:05:34:af:7e:3c:93:23:fb:07:c1:09:e3:
                    52:9f:01:2e:a2:95:cc:3e:26:27:f4:6f:25:ad:e7:
                    40:75:9b:06:41:72:d2:8b:1e:7b:53:88:62:e8:22:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:09:9B:73:71:F7:FF:E0:CB:54:13:9D:A0:ED:9F:77:ED:AB:1B:7E
            X509v3 Authority Key Identifier:
                keyid:5A:00:33:71:CC:68:E0:AE:63:9A:96:52:8D:53:83:39:E9:1D:C7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/5A003371CC68E0AE639A96528D538339E91DC729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A003371CC68E0AE639A96528D538339E91DC729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/34352e3136322e3132382e302f32322d3332203d3e20323638353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:16:ac:0c:34:bb:4f:a3:a0:c3:cc:14:05:df:73:dc:e4:c3:
         ee:34:87:74:12:a4:2b:92:24:91:a5:42:ca:a0:5b:9c:97:a5:
         d3:40:e6:c6:3f:9a:c3:f8:27:a8:fd:ad:d9:51:6d:1d:79:8b:
         98:f3:2b:08:f3:ef:5b:c2:a1:3c:7f:d7:77:72:09:90:61:81:
         e0:8c:ec:d5:72:75:b4:37:73:86:9c:b4:cf:f2:2d:f3:d9:09:
         7d:ae:e1:7c:0b:4e:06:ca:3d:de:32:a5:ab:64:8a:1a:c6:2a:
         64:ec:5a:a8:65:a9:6d:c3:e7:ab:98:e9:93:9e:0b:4f:8f:f4:
         71:24:69:c5:bf:b7:f8:ba:91:8f:97:44:9e:0c:a9:4d:b8:03:
         75:25:8f:f8:78:87:ba:b5:c5:e2:14:f6:89:ab:2f:b0:ff:b6:
         8b:7e:57:bb:c0:a3:d6:4d:e1:22:1c:86:29:0b:c7:50:eb:8d:
         aa:40:fa:46:aa:b9:93:d0:34:b3:50:78:fb:1d:9e:a2:79:64:
         79:c5:ba:e7:14:de:53:4e:d1:11:17:92:f5:68:88:c0:bb:c5:
         8b:7a:df:dc:2c:46:91:10:8d:1c:3a:da:f2:bb:99:90:c9:05:
         ad:6f:94:31:be:e2:9a:4e:2e:58:a0:c3:be:6b:e6:b7:a4:20:
         c5:1f:80:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 06:36:35 2024 by rpki-client on console-fra.rpki-client.org