Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/34352e342e3132342e302f32322d3332203d3e20323636303636.roa
File:                     34352e342e3132342e302f32322d3332203d3e20323636303636.roa (raw, json)
Hash identifier:          Pj03wzyP6q5PvDc2dIwdCEwFNYZk9uq4UA+0Ayb93+4=
Subject key identifier:   03:71:93:9C:9A:31:45:BB:54:C3:50:D4:30:3A:2F:54:D2:59:84:A6
Certificate issuer:       /CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
Certificate serial:       2480682439F56017EB836A99061E221FE71DCA99
Authority key identifier: F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/34352e342e3132342e302f32322d3332203d3e20323636303636.roa
Signing time:             Thu 04 Apr 2024 22:33:23 +0000
ROA not before:           Thu 04 Apr 2024 22:28:23 +0000
ROA not after:            Thu 03 Apr 2025 22:33:23 +0000
asID:                     266066
IP address blocks:        45.4.124.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:80:68:24:39:f5:60:17:eb:83:6a:99:06:1e:22:1f:e7:1d:ca:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698D7241A7709C231EAE882D9687C76C4BD16A
        Validity
            Not Before: Apr  4 22:28:23 2024 GMT
            Not After : Apr  3 22:33:23 2025 GMT
        Subject: CN=0371939C9A3145BB54C350D4303A2F54D25984A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d0:3d:5c:f4:43:03:e6:b0:e4:e3:37:49:1a:
                    6e:c0:8d:a9:d8:c2:6d:58:cb:42:74:02:da:38:c0:
                    d2:f6:d5:80:1a:58:ee:44:16:d9:75:19:3c:3e:87:
                    e8:55:57:28:c5:af:e3:d2:91:73:1e:6a:c7:3a:84:
                    a9:37:2d:5a:e9:41:f7:40:c8:8e:e0:23:0c:fb:db:
                    67:60:09:2d:9e:ae:41:20:43:5f:f0:a9:5a:f2:e9:
                    35:2a:98:3e:b6:7d:54:ff:0f:fa:cb:c7:16:bd:78:
                    2a:0f:8e:12:e9:4a:0c:f1:a8:51:65:30:f1:e6:29:
                    56:c2:11:5e:75:2a:6b:7c:c1:41:74:ee:a7:0c:1e:
                    22:13:bd:b8:8e:7f:26:4e:41:77:0d:b6:35:ff:fa:
                    68:06:0d:36:3c:be:24:3c:d3:9b:a7:1a:07:da:7e:
                    55:47:2b:54:13:cc:ec:4b:44:b2:c6:41:85:6d:cd:
                    cc:d2:b9:2e:5f:6a:d4:3c:19:6c:d6:19:8e:b9:a3:
                    73:d2:b3:08:13:47:75:b7:e9:e6:61:61:63:65:9b:
                    1b:bb:04:da:d6:8b:5a:f6:b5:10:56:a2:84:46:23:
                    df:e1:0c:cb:0d:fa:24:de:8f:b0:b5:78:83:6f:34:
                    3b:26:c7:e6:9f:f5:fe:3e:e1:cc:c6:2a:e9:73:98:
                    fc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:93:9C:9A:31:45:BB:54:C3:50:D4:30:3A:2F:54:D2:59:84:A6
            X509v3 Authority Key Identifier:
                keyid:F3:69:8D:72:41:A7:70:9C:23:1E:AE:88:2D:96:87:C7:6C:4B:D1:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3698D7241A7709C231EAE882D9687C76C4BD16A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/1/34352e342e3132342e302f32322d3332203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:39:31:58:85:43:f7:72:80:67:9f:36:d5:f8:a2:93:49:76:
         af:08:97:8f:7a:16:80:10:9b:f8:91:1d:90:9a:29:b0:b7:09:
         6b:98:4a:69:c7:c5:03:57:04:96:be:d0:d9:5d:5e:20:dd:ab:
         54:76:3d:1f:26:61:77:1e:39:2d:fa:cc:ba:73:98:60:e1:9d:
         74:14:33:b1:a5:ba:51:37:bf:8a:37:92:be:bb:18:f6:7c:35:
         9c:3d:56:fe:85:63:2b:e3:57:67:62:61:2b:bf:eb:80:b3:c6:
         5e:4a:5b:4f:37:8b:77:f6:b2:03:e5:d4:d5:2d:e1:a3:27:2a:
         ca:88:8b:b6:69:d0:c6:a5:4e:cf:4c:5b:10:72:22:7a:68:82:
         75:83:0c:c4:8c:4a:3e:8e:a0:a2:72:3d:b6:b6:97:95:4f:6f:
         d8:7a:c0:0f:b5:3f:ce:a0:a3:8b:1c:04:bf:9a:f1:ce:02:7b:
         5a:00:ff:3e:78:c2:18:73:52:89:c3:d7:9b:17:f7:06:d1:d2:
         e2:9b:2a:ac:1d:a2:6d:30:67:62:e9:a2:0a:58:38:d0:ea:ad:
         1b:26:ea:be:f3:bf:3d:7d:ab:4b:13:3e:d3:5e:e2:50:13:02:
         c3:4e:03:ee:a4:b2:9f:f1:d8:3d:35:d1:5a:0a:07:20:97:35:
         04:5c:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:06:48 2024 by rpki-client on console-fra.rpki-client.org