Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa
File:                     34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa (raw, json)
Hash identifier:          mL9RHAf+M5J6DT8wUbGQmWV2P/P24hjp5O4uhz5MQ3A=
Subject key identifier:   3B:68:F5:C3:D0:57:9D:E2:17:BB:8F:1D:C9:3B:07:7E:0F:4A:A6:4F
Certificate issuer:       /CN=05749835F92CCEEF3F9BB76E98EEAC180176BE4A
Certificate serial:       0D8AF70EB9F0A8B262F60C26F331C5936BCDF26E
Authority key identifier: 05:74:98:35:F9:2C:CE:EF:3F:9B:B7:6E:98:EE:AC:18:01:76:BE:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa
Signing time:             Wed 03 Apr 2024 20:00:15 +0000
ROA not before:           Wed 03 Apr 2024 19:55:15 +0000
ROA not after:            Wed 02 Apr 2025 20:00:15 +0000
asID:                     269343
IP address blocks:        45.184.204.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:f7:0e:b9:f0:a8:b2:62:f6:0c:26:f3:31:c5:93:6b:cd:f2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05749835F92CCEEF3F9BB76E98EEAC180176BE4A
        Validity
            Not Before: Apr  3 19:55:15 2024 GMT
            Not After : Apr  2 20:00:15 2025 GMT
        Subject: CN=3B68F5C3D0579DE217BB8F1DC93B077E0F4AA64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:4b:97:90:bd:68:0c:8d:33:ac:3e:f3:5b:
                    90:4d:4b:58:cd:c5:be:28:47:7c:35:a7:80:27:4c:
                    0b:d5:ac:04:02:19:63:41:e3:b4:9f:02:03:9b:c3:
                    43:7a:77:e0:33:36:d8:b3:ad:10:87:e6:a0:db:2a:
                    81:57:b6:92:af:be:da:44:46:43:b5:1d:b2:2e:55:
                    ee:1b:a5:ea:aa:6f:92:7f:7d:15:1d:aa:b9:9e:d4:
                    41:db:df:55:5c:38:de:30:c0:8e:9c:ee:74:cb:2e:
                    f6:5b:b1:5e:8e:c0:33:d5:e0:c0:f2:44:06:82:9a:
                    8f:22:c7:9b:66:86:2b:f8:8b:7a:02:5b:8f:8b:13:
                    96:80:67:8f:cc:47:e9:dc:0c:c5:6f:a2:a9:33:7a:
                    3a:67:42:fa:31:c8:9f:09:ef:36:23:3d:17:12:41:
                    9b:8c:64:13:65:d6:c4:ad:4f:9b:61:53:24:0f:e8:
                    1e:f4:72:38:64:a6:eb:e6:1e:1f:70:ae:8d:ef:39:
                    76:81:34:f2:f6:f8:d9:62:12:09:c1:9c:49:4b:8b:
                    0c:d9:f0:5e:01:44:bc:d2:57:90:1f:94:d5:8d:23:
                    62:a8:8a:87:e5:91:bb:32:23:cd:1e:bb:b0:f7:09:
                    3c:4c:a1:0c:b8:fb:cc:94:d0:44:3d:31:fb:4b:3f:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:F5:C3:D0:57:9D:E2:17:BB:8F:1D:C9:3B:07:7E:0F:4A:A6:4F
            X509v3 Authority Key Identifier:
                keyid:05:74:98:35:F9:2C:CE:EF:3F:9B:B7:6E:98:EE:AC:18:01:76:BE:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05749835F92CCEEF3F9BB76E98EEAC180176BE4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BUFbugTBqSv2cQYDnL9dzn192cMLX1MBYPkiBDecoVRM/1/34352e3138342e3230342e302f32322d3234203d3e20323639333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:f1:5c:80:72:36:6a:0b:52:89:e6:65:0d:38:44:da:4e:3b:
         46:a7:7c:55:a4:aa:4b:00:1b:03:12:6d:5d:c2:08:b6:76:75:
         67:35:37:ca:c7:7f:e2:f9:ae:d1:60:6f:3e:57:61:cb:92:43:
         a0:1b:fd:d7:89:ac:a7:5c:11:f9:93:a3:29:49:43:c9:83:89:
         c1:3a:19:ac:7d:13:c6:da:3a:c2:f4:53:5b:1b:75:15:58:78:
         59:83:bd:5a:d7:4e:83:ff:1e:89:65:a5:58:61:99:9c:d5:77:
         22:eb:a1:9d:ca:e1:1a:ea:cf:d6:79:25:fe:16:06:18:42:20:
         c5:6c:4c:d8:f1:5d:d4:74:79:19:f7:05:18:b3:23:f5:56:9b:
         7f:e6:cf:87:f3:67:3b:8b:75:39:b9:8e:2f:44:29:dc:84:0e:
         6b:ff:2e:95:94:e0:65:ed:0f:ea:1c:f7:a9:d6:48:d4:ac:9d:
         a2:0a:ec:8d:4f:1e:44:b8:ba:01:d4:54:d7:7c:81:0c:70:7b:
         99:9d:7f:89:3c:b7:d3:86:1a:6a:39:4f:31:0b:0d:8e:6e:98:
         fe:41:b6:7e:a3:0d:20:a5:e5:5c:18:8c:82:37:a8:7f:cc:8d:
         ac:5e:fc:db:63:9b:0d:2b:54:49:b1:0a:7e:f3:9e:4d:1b:ee:
         30:d4:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 12:53:45 2024 by rpki-client on console-fra.rpki-client.org