Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
File:                     34352e3232362e37362e302f32322d3234203d3e20323636393834.roa (raw, json)
Hash identifier:          NTrMpzhGLqkj4jMzibBR74Em36OQBDtxYBcKI0dr+5M=
Subject key identifier:   7E:9B:88:42:46:2B:AD:FA:55:F9:07:05:EE:63:81:22:E8:9B:99:BD
Certificate issuer:       /CN=B3745D7D6DC37088A2D46D36D0AD97DAFD030190
Certificate serial:       12299276F91D942F0266B60157CA632B3BD38764
Authority key identifier: B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa
Signing time:             Thu 08 Aug 2024 13:08:04 +0000
ROA not before:           Thu 08 Aug 2024 13:03:04 +0000
ROA not after:            Thu 07 Aug 2025 13:08:04 +0000
asID:                     266984
IP address blocks:        45.226.76.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:29:92:76:f9:1d:94:2f:02:66:b6:01:57:ca:63:2b:3b:d3:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3745D7D6DC37088A2D46D36D0AD97DAFD030190
        Validity
            Not Before: Aug  8 13:03:04 2024 GMT
            Not After : Aug  7 13:08:04 2025 GMT
        Subject: CN=7E9B8842462BADFA55F90705EE638122E89B99BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e9:7b:e1:69:b7:7f:5f:6d:db:e0:1d:12:4d:
                    c5:f9:65:d6:15:2e:38:f4:b6:0c:17:72:d9:48:b3:
                    56:d5:0b:8e:7a:37:0a:ca:8a:b2:48:2c:1f:38:79:
                    72:5d:52:8c:47:cf:41:0e:38:b4:78:a8:71:60:26:
                    81:5d:a0:df:be:8d:73:35:03:55:3e:7f:b3:76:63:
                    6d:b8:1b:7c:8b:82:77:5c:06:f8:a9:28:e0:20:80:
                    e1:e1:df:5e:af:8c:5d:c3:4d:9f:f1:e5:34:a4:3f:
                    df:c3:b7:e7:16:b9:36:4b:cc:09:8d:68:ec:24:7b:
                    3f:7f:53:4e:1c:59:e8:0c:a5:9f:ef:7b:f5:f8:92:
                    8f:49:3f:9b:3e:ee:87:a8:bc:72:08:4b:0c:2d:72:
                    55:15:a8:51:de:cd:83:75:b3:c2:ff:67:24:a9:df:
                    19:dd:37:a9:1a:7b:2a:8d:af:d2:73:05:af:ec:9e:
                    49:35:66:88:94:4a:92:b1:81:eb:36:89:51:20:4f:
                    a4:19:e9:f8:63:12:81:ab:78:1f:af:9b:0f:aa:c8:
                    79:14:28:16:3f:5f:e4:71:6c:eb:85:57:78:ce:2c:
                    c3:a9:85:8d:dd:89:37:0e:bc:25:9d:3c:5b:cb:25:
                    41:cc:0d:77:36:20:df:02:70:2f:56:03:3b:8b:77:
                    9f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:88:42:46:2B:AD:FA:55:F9:07:05:EE:63:81:22:E8:9B:99:BD
            X509v3 Authority Key Identifier:
                keyid:B3:74:5D:7D:6D:C3:70:88:A2:D4:6D:36:D0:AD:97:DA:FD:03:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3745D7D6DC37088A2D46D36D0AD97DAFD030190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/1/34352e3232362e37362e302f32322d3234203d3e20323636393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:d4:15:dc:56:85:ba:df:94:4e:2f:2b:ee:27:0b:8c:61:98:
         0b:a8:61:42:0b:d6:74:2b:fc:21:4c:73:5c:2a:01:0b:bf:2b:
         1a:1b:ce:c8:4c:63:5d:19:ad:5c:3b:91:3f:c0:c5:cc:55:66:
         ba:f9:16:66:bb:33:ca:41:2b:97:e0:60:b8:b7:02:5d:fa:72:
         5c:89:bf:c6:ea:19:92:a1:cb:6f:ee:fc:d9:35:01:ee:b8:58:
         82:29:b7:63:7d:6b:9a:4f:eb:99:39:2a:30:6c:7d:94:b2:52:
         f4:04:37:8f:b5:a4:1c:e3:9b:3e:fd:75:73:30:0f:a3:b8:2f:
         9a:a4:e8:d6:a5:7a:63:b4:1f:57:f3:3e:c7:1c:eb:c5:81:7b:
         e4:5e:66:d9:cc:37:ef:10:af:b3:66:49:c8:ca:e4:1b:4b:f6:
         38:b9:7b:df:14:9b:8f:ee:d3:5f:46:3f:c4:2a:ed:15:c9:f4:
         4e:c5:d4:06:ed:4b:ba:01:20:fe:d0:78:ca:1b:a3:e7:ca:ba:
         48:55:ed:c5:2a:2c:45:2e:12:01:c6:1e:47:c2:1c:d0:5c:ac:
         76:33:9d:2f:f5:7a:94:fa:3f:bf:95:6a:18:f5:dd:b6:29:c8:
         f9:4e:6b:68:81:5b:de:6a:64:b1:80:a0:f1:fa:f7:37:b7:65:
         99:b4:1e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:30:37 2024 by rpki-client on console-ams.rpki-client.org