Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323639343131.roa
File:                     34352e3138362e35352e302f32342d3332203d3e20323639343131.roa (raw, json)
Hash identifier:          byAB413ZgZjP6r3Ux/TU0t4lNi8nw4rX1OEatvtVDPY=
Subject key identifier:   6B:6B:13:5A:78:AA:F7:9A:8A:DA:9F:23:57:44:0D:06:74:8B:F8:E0
Certificate issuer:       /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial:       3FF5541AF76110085CFF13BE77BCBC74D43F055A
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323639343131.roa
Signing time:             Thu 06 Jun 2024 16:34:48 +0000
ROA not before:           Thu 06 Jun 2024 16:29:48 +0000
ROA not after:            Thu 05 Jun 2025 16:34:48 +0000
asID:                     269411
IP address blocks:        45.186.55.0/24 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f5:54:1a:f7:61:10:08:5c:ff:13:be:77:bc:bc:74:d4:3f:05:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
        Validity
            Not Before: Jun  6 16:29:48 2024 GMT
            Not After : Jun  5 16:34:48 2025 GMT
        Subject: CN=6B6B135A78AAF79A8ADA9F2357440D06748BF8E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:89:85:c2:c5:07:d5:63:61:e1:9c:dd:02:
                    68:9b:bc:23:86:f0:d7:5f:1c:43:bc:e3:17:40:bf:
                    a5:72:db:50:47:de:9e:61:1b:9e:f8:bd:53:34:13:
                    ba:8c:9c:31:35:ba:6f:a7:22:a0:57:b0:08:32:37:
                    24:7a:53:68:4a:b0:bb:53:3b:08:57:99:e3:46:7d:
                    b9:2d:fa:fd:7b:4e:cb:90:c7:7a:6a:25:73:49:39:
                    a1:ba:fe:3d:10:b8:ba:7e:79:36:1c:de:02:9d:67:
                    2a:97:84:52:5e:7c:78:42:a6:c8:e7:9a:df:9f:8f:
                    31:7e:5e:3d:b4:a1:85:76:1e:b7:20:53:db:7e:d6:
                    92:74:3d:a7:bc:34:9a:4f:02:c9:1a:cd:58:aa:8e:
                    85:a2:ea:2f:5b:0a:67:9e:1a:9b:75:1c:77:c4:51:
                    8b:06:ee:a1:8d:fa:d0:48:07:61:47:48:5a:87:1a:
                    23:fe:62:99:e4:08:b7:c8:2e:41:3e:5a:ad:37:b2:
                    05:51:29:2c:80:ae:30:bb:cf:f1:f0:4e:5e:f2:c7:
                    cd:b7:54:f3:56:51:4b:9a:ba:cc:5f:33:c8:bb:ea:
                    41:bc:94:17:d8:b2:9c:04:39:73:9d:4b:2f:ef:13:
                    50:4a:b4:dc:fb:88:b0:29:9e:bf:2a:7c:b3:7b:40:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6B:13:5A:78:AA:F7:9A:8A:DA:9F:23:57:44:0D:06:74:8B:F8:E0
            X509v3 Authority Key Identifier:
                keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35352e302f32342d3332203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:1e:94:78:f3:37:7c:1f:91:6d:41:64:57:7f:b6:0e:68:
         88:6b:fc:59:ff:66:50:d1:f6:6b:17:07:9d:5e:c0:ea:2d:d8:
         87:3e:59:d9:05:d9:2f:9e:dd:a0:a3:cf:ad:97:0f:26:35:83:
         53:48:1b:e4:7c:21:dc:bc:e3:f7:15:bd:6c:a1:66:7a:07:a3:
         e0:12:8a:e5:8e:8e:d2:e5:9f:53:7a:44:ae:e5:cc:3f:21:b4:
         08:ac:9a:f4:e6:42:55:5b:09:a7:8d:e3:7e:1f:b4:f3:47:fb:
         58:bb:2c:fb:a2:c7:6c:07:b3:23:6e:b6:ef:f4:3e:09:2f:d0:
         e6:29:83:a9:d0:fe:27:b2:32:ae:56:5f:0b:28:ae:81:85:d0:
         89:f3:ed:4f:6a:98:ae:1d:85:5f:64:2a:f2:2c:d9:43:3e:a2:
         4c:87:fd:5d:10:b5:2c:97:fa:3b:f6:52:ee:03:5f:61:64:15:
         27:76:d6:3f:1b:00:d2:d1:86:47:91:72:19:c6:5e:57:05:c1:
         e2:f2:b4:f8:4e:86:0d:46:f2:fc:58:08:01:38:65:d4:e7:21:
         be:41:3b:3b:03:67:15:8a:eb:ad:fb:4b:7c:89:c2:21:69:84:
         0e:21:ee:b0:24:a5:63:43:58:03:02:a4:76:27:c7:a4:91:11:
         7d:37:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org