Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
File:                     34352e3138362e35332e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier:          ld4ghoXuJ/dryzxiPn1gENdiX7yCU6sqvq1KglflMTM=
Subject key identifier:   A8:8B:86:73:DF:40:D8:C4:58:DE:B9:93:A9:BA:E3:6D:17:14:5E:1F
Certificate issuer:       /CN=B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590
Certificate serial:       692E6032FBDCABD4CD7A6E62ADAB34F3ED73AB28
Authority key identifier: B1:D5:9F:FB:E0:0F:E7:A5:A6:E9:BA:33:55:FD:28:DB:94:D7:05:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
Signing time:             Wed 09 Oct 2024 18:17:00 +0000
ROA not before:           Wed 09 Oct 2024 18:12:00 +0000
ROA not after:            Wed 08 Oct 2025 18:17:00 +0000
asID:                     269411
IP address blocks:        45.186.53.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2e:60:32:fb:dc:ab:d4:cd:7a:6e:62:ad:ab:34:f3:ed:73:ab:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590
        Validity
            Not Before: Oct  9 18:12:00 2024 GMT
            Not After : Oct  8 18:17:00 2025 GMT
        Subject: CN=A88B8673DF40D8C458DEB993A9BAE36D17145E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:b6:36:35:11:88:49:30:21:59:73:73:a5:
                    20:30:e0:45:0c:e2:0c:e2:dc:26:63:14:4c:52:01:
                    e5:f5:c8:4c:dc:d3:56:0e:ea:60:26:e0:ec:9d:34:
                    96:69:1a:54:62:79:9a:ea:58:62:fc:65:d8:a0:92:
                    23:0f:9d:d4:76:e3:24:33:d3:0b:20:83:89:9d:ec:
                    d7:f4:b2:41:07:7e:85:3b:4d:0b:35:98:56:57:08:
                    65:9d:58:2b:32:ce:2b:cd:a6:cc:36:75:da:21:4d:
                    b7:58:13:08:40:5e:d9:66:bc:42:c1:ec:7c:9f:1d:
                    3e:8d:10:2a:3d:3e:4e:f8:ec:5f:50:4b:e3:02:0a:
                    86:85:e6:4f:8c:07:db:e1:c2:34:00:49:8b:b0:aa:
                    ae:fa:e8:f0:e2:95:f9:36:4d:d5:04:86:1a:db:cb:
                    3f:3d:dc:4e:f2:7e:3d:27:69:e7:06:ff:12:9d:61:
                    50:b0:02:c3:c1:4b:13:01:e2:95:34:f5:09:e5:e5:
                    e4:dc:3d:1b:60:c6:34:8a:8e:77:d0:3a:88:8e:5a:
                    18:a5:d7:e8:9c:28:38:b4:46:7d:07:86:87:48:b7:
                    74:28:9c:52:e0:3a:c2:99:ac:76:25:68:e3:cc:08:
                    45:0e:ab:5f:05:02:c6:04:9c:85:bc:bd:b3:37:a6:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8B:86:73:DF:40:D8:C4:58:DE:B9:93:A9:BA:E3:6D:17:14:5E:1F
            X509v3 Authority Key Identifier:
                keyid:B1:D5:9F:FB:E0:0F:E7:A5:A6:E9:BA:33:55:FD:28:DB:94:D7:05:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1D59FFBE00FE7A5A6E9BA3355FD28DB94D70590.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:7a:43:e7:e5:f7:16:df:5f:91:9b:bc:45:48:ec:da:de:a6:
         7c:b5:27:d3:b1:8d:d3:b6:b6:40:66:f9:47:06:49:f6:61:7e:
         db:5c:0f:be:7d:37:e3:32:16:52:44:fd:9c:11:67:95:24:f8:
         44:f5:c0:f7:7f:12:8a:fe:10:04:b6:78:59:87:3b:38:e8:18:
         90:ad:c3:b7:1a:97:ce:3b:b1:f7:12:c8:05:28:1b:8a:61:bb:
         d1:d7:3e:e4:a8:62:b5:16:51:5e:e9:04:14:9d:36:b3:2d:64:
         90:70:6d:72:e9:1e:39:0f:c9:22:82:4f:9a:53:fe:ac:de:0e:
         61:45:8d:33:a7:18:d5:a0:fc:3f:a4:8c:7f:51:30:18:e3:10:
         dc:40:ce:f5:9a:81:c2:0e:39:bd:89:e6:9b:52:38:1a:52:06:
         e6:7b:b0:7c:b4:93:05:97:c8:95:12:4a:dc:02:2b:47:b2:a0:
         0a:63:ae:f8:a8:15:d7:24:a1:ae:05:a2:e9:f1:51:46:36:61:
         99:7c:0b:a1:c9:16:f4:17:df:70:3d:7a:ef:99:fb:da:9f:0b:
         ff:6c:71:ed:81:7d:86:16:61:dc:9a:35:9d:c3:75:4c:56:f8:
         59:12:f7:d3:23:20:87:66:89:6b:9c:61:a9:79:83:9e:5a:c7:
         3e:7e:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 00:03:59 2024 by rpki-client on console-ams.rpki-client.org