Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/1/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
File:                     34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa (raw, json)
Hash identifier:          TDAlXpvxjMKXekZJJ0ByQL7GhKiWSBWDvoB58G58rj4=
Subject key identifier:   CF:7A:91:99:5A:CC:FE:26:73:DE:0D:F6:5A:01:02:60:AE:37:95:C1
Certificate issuer:       /CN=3783421A497751FCF38FA836EFFB7DE7DAFF3E18
Certificate serial:       61DD73E374E2CF820107DFC540743C35C7848EDC
Authority key identifier: 37:83:42:1A:49:77:51:FC:F3:8F:A8:36:EF:FB:7D:E7:DA:FF:3E:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3783421A497751FCF38FA836EFFB7DE7DAFF3E18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/1/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa
Signing time:             Thu 04 Apr 2024 20:52:46 +0000
ROA not before:           Thu 04 Apr 2024 20:47:46 +0000
ROA not after:            Thu 03 Apr 2025 20:52:46 +0000
asID:                     267056
IP address blocks:        45.226.208.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dd:73:e3:74:e2:cf:82:01:07:df:c5:40:74:3c:35:c7:84:8e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3783421A497751FCF38FA836EFFB7DE7DAFF3E18
        Validity
            Not Before: Apr  4 20:47:46 2024 GMT
            Not After : Apr  3 20:52:46 2025 GMT
        Subject: CN=CF7A91995ACCFE2673DE0DF65A010260AE3795C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:6e:ce:79:41:5c:09:9d:28:08:fe:2d:46:
                    4f:df:d2:cc:e6:2c:19:af:81:f4:3e:0c:06:8c:80:
                    73:f3:75:d1:e8:85:ba:56:20:25:8f:f5:e3:4e:9f:
                    cd:6c:8d:0c:93:0a:8a:e0:83:13:fb:90:3b:c5:c6:
                    73:14:15:d9:9c:44:95:ae:d6:2e:ea:7e:d9:6e:16:
                    90:09:dc:4a:27:3c:27:bb:dc:7f:75:0e:e2:65:3a:
                    b8:2e:0c:fe:36:62:99:1b:06:d2:d1:f0:fd:5b:a9:
                    5d:4d:ae:80:6d:38:ca:15:fa:e5:d2:b1:99:c6:a6:
                    32:e4:9a:3b:a9:61:26:55:eb:f2:02:3d:99:28:15:
                    0d:4d:60:c7:5d:f3:d0:1d:49:55:18:a1:da:ba:e0:
                    30:82:69:2c:b1:75:cb:15:e7:9f:b4:bd:af:e1:e8:
                    a1:23:a8:bd:4d:d7:cc:29:dc:bb:12:4b:c6:31:57:
                    d8:a4:e5:b7:12:02:fb:a4:18:95:67:de:1d:94:ff:
                    5f:d9:45:b6:bf:9b:47:56:ed:ce:10:ba:8c:6e:35:
                    01:88:a1:af:98:cc:c5:2e:53:80:e4:5b:54:d4:75:
                    f3:c3:e5:0f:98:03:80:36:07:5c:a3:b7:e1:f3:b1:
                    4b:9e:42:04:f4:e5:50:31:5f:08:2d:f1:2c:c6:d4:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:7A:91:99:5A:CC:FE:26:73:DE:0D:F6:5A:01:02:60:AE:37:95:C1
            X509v3 Authority Key Identifier:
                keyid:37:83:42:1A:49:77:51:FC:F3:8F:A8:36:EF:FB:7D:E7:DA:FF:3E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/1/3783421A497751FCF38FA836EFFB7DE7DAFF3E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3783421A497751FCF38FA836EFFB7DE7DAFF3E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpjQzn4bNuBgo3eE9SkWBzednzdwKTmkETuaz2GDjks6/1/34352e3232362e3230382e302f32322d3234203d3e20323637303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:5f:02:90:d0:6a:3f:6f:84:59:dc:41:59:32:a6:5c:d1:
         72:f6:d2:e0:bc:07:15:11:3e:52:b5:7a:fb:67:c8:35:b9:5f:
         42:e5:92:46:7e:d8:e1:77:84:68:0a:67:74:09:02:72:fa:35:
         cf:6d:10:e2:30:15:85:9f:37:4f:84:b8:36:30:51:1b:6e:92:
         05:56:3e:ed:c9:5e:a9:39:ee:ff:4d:30:d1:a8:12:53:1c:32:
         6a:f0:3d:f0:52:24:39:9a:c4:aa:9b:43:14:aa:83:15:4e:e2:
         f0:41:40:05:4e:86:30:cb:4a:f2:39:4f:d6:44:e3:70:4d:66:
         20:8a:49:e8:b6:9d:65:af:6d:cb:72:67:c8:5e:b3:42:0c:88:
         98:6b:78:0f:fd:31:4c:83:9c:a6:68:f6:9a:66:4e:6b:48:50:
         7a:3a:45:a7:dc:87:e2:1c:c0:c1:3c:0c:a0:5d:ef:a8:06:fe:
         64:d2:e1:b3:fd:e0:90:97:76:d3:fb:62:29:d6:07:46:56:8a:
         28:78:46:0b:bb:25:55:ab:e9:1e:25:7d:5d:23:69:36:2a:46:
         af:32:34:eb:92:dd:fd:e8:f1:6e:e1:6e:92:4d:ac:d6:c6:92:
         94:f1:29:f5:aa:50:ca:e6:5d:c2:1f:e9:11:e5:7c:25:87:26:
         02:69:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 01:40:25 2024 by rpki-client on console-ams.rpki-client.org