Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32322d3232203d3e20323639343939.roa
File:                     34352e3138362e3135362e302f32322d3232203d3e20323639343939.roa (raw, json)
Hash identifier:          RqbMFAm/WTwVyF8yulT2F+s/+kS/veOuwoidL0aTx/E=
Subject key identifier:   0F:94:39:F6:77:DE:ED:77:FE:AC:19:81:41:BC:18:0D:4D:08:D9:DA
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       167BCE3EEC09BEF4815962BEF3670731BEE1B87F
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32322d3232203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:12 +0000
ROA not before:           Thu 05 Sep 2024 19:32:12 +0000
ROA not after:            Thu 04 Sep 2025 19:37:12 +0000
asID:                     269499
IP address blocks:        45.186.156.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7b:ce:3e:ec:09:be:f4:81:59:62:be:f3:67:07:31:be:e1:b8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:12 2024 GMT
            Not After : Sep  4 19:37:12 2025 GMT
        Subject: CN=0F9439F677DEED77FEAC198141BC180D4D08D9DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:43:02:6f:d8:d4:c0:e6:e4:80:0f:18:9a:
                    3b:81:a9:62:0e:d4:41:99:e4:72:77:a6:aa:1a:c4:
                    be:e6:85:ce:87:dc:41:bb:65:5d:69:21:10:4e:51:
                    cc:10:41:eb:79:85:43:f0:f0:f8:dd:39:63:97:88:
                    3f:99:9d:dc:ec:ec:9b:8a:c8:b4:67:8d:bd:cc:d3:
                    c1:a9:ff:f2:21:2a:f5:69:95:da:9c:de:01:34:e1:
                    d4:5b:ba:69:53:e1:e1:d8:9a:c9:e7:45:3f:63:c0:
                    ef:1f:89:0e:17:0c:8c:02:33:31:fa:44:e3:b9:01:
                    77:c9:12:14:c2:29:d3:5f:7a:1a:51:f3:b6:db:5d:
                    84:1f:e0:6e:ad:3b:7a:58:a7:2e:10:ab:2d:3b:d0:
                    ef:78:a2:46:55:76:cf:d6:24:30:e7:68:06:40:79:
                    c6:66:9c:ce:a2:8a:6e:b9:b6:a8:df:05:8b:ee:7e:
                    27:39:47:3c:e1:4c:e1:da:b8:de:d5:39:16:3e:38:
                    f8:04:18:2f:db:90:4b:e0:c4:e7:56:78:33:3b:be:
                    26:73:70:68:33:4c:51:3d:82:25:af:1b:13:6a:40:
                    31:10:f2:9b:53:d9:7d:9c:cf:fc:35:d0:0a:1f:34:
                    49:35:01:03:cf:ef:80:79:76:d6:ab:b0:24:cd:12:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:94:39:F6:77:DE:ED:77:FE:AC:19:81:41:BC:18:0D:4D:08:D9:DA
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32322d3232203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:a1:07:9e:61:0b:2c:05:60:5c:74:d1:30:22:86:88:e6:6b:
         70:e4:91:bc:19:7e:a8:08:36:91:38:21:05:e4:05:8b:e1:ef:
         f9:9f:60:52:40:ec:f0:53:22:1b:71:42:8c:0f:ea:fb:82:e6:
         bd:ec:93:b2:50:e4:de:a3:62:ab:10:f0:18:28:c3:9c:38:ce:
         3f:17:8e:80:48:5b:22:e8:a3:7d:5f:c8:6e:ea:d6:e9:76:5b:
         1f:79:f1:1a:61:f8:1e:fa:7c:64:ad:9e:b0:63:b4:62:81:5f:
         7b:7e:fc:39:ff:16:aa:46:96:50:43:79:92:3e:ef:4d:63:38:
         0f:28:f8:14:9c:fb:df:69:1b:35:f6:12:e1:69:73:ed:1b:30:
         11:be:6e:33:dd:aa:93:42:fa:19:99:d2:b8:cd:c2:b8:d6:13:
         67:55:f2:c1:ec:45:4b:38:9a:ed:17:5a:15:99:d5:60:dc:fc:
         bc:cc:1d:1d:17:e7:23:1e:c3:bb:f2:70:59:f7:04:03:d6:30:
         19:71:6d:1a:9e:b9:ae:e4:2e:a0:fb:02:8e:f8:9b:6e:25:24:
         b3:7d:d2:56:7b:f1:1f:ec:c6:fc:bc:3c:ed:47:30:c6:c4:ca:
         ac:38:2a:aa:66:d1:4e:ad:83:d0:80:da:a7:54:dd:4a:76:be:
         e2:4e:80:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:12 2024 by rpki-client on console-fra.rpki-client.org