Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32342d3234203d3e20323637333437.roa
File:                     34352e3233332e3138302e302f32342d3234203d3e20323637333437.roa (raw, json)
Hash identifier:          1RXj4LBzHKvFILB/iEPnM6tMlU68elZEQQAuksfjyBE=
Subject key identifier:   41:1C:A8:32:5A:BB:F7:B6:E7:91:DD:D6:11:61:E2:12:F3:7E:54:36
Certificate issuer:       /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial:       44F1FCEAF3B7FC761E8A95794B6E16B05BACFE57
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32342d3234203d3e20323637333437.roa
Signing time:             Fri 21 Jun 2024 16:37:09 +0000
ROA not before:           Fri 21 Jun 2024 16:32:09 +0000
ROA not after:            Fri 20 Jun 2025 16:37:09 +0000
asID:                     267347
IP address blocks:        45.233.180.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f1:fc:ea:f3:b7:fc:76:1e:8a:95:79:4b:6e:16:b0:5b:ac:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
        Validity
            Not Before: Jun 21 16:32:09 2024 GMT
            Not After : Jun 20 16:37:09 2025 GMT
        Subject: CN=411CA8325ABBF7B6E791DDD61161E212F37E5436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:aa:74:19:d3:97:31:a8:83:eb:80:1c:26:57:
                    2d:ef:33:24:8d:bf:b9:9d:50:8f:de:6c:bb:92:7e:
                    2a:85:75:ef:61:9c:83:a0:b9:f0:f2:48:9f:39:ee:
                    b6:7e:10:dc:17:0f:9a:96:dd:22:bb:b1:0b:24:7c:
                    c1:7b:47:6a:41:85:53:08:2d:5d:1d:75:6c:45:ed:
                    ed:89:eb:a8:dc:f6:62:7c:c1:dc:7f:e1:1b:1f:db:
                    8c:9a:96:8a:25:b1:ed:c5:6f:94:d2:9c:2a:7d:83:
                    16:a0:b9:4d:94:a3:8a:4f:d8:a9:da:a7:c6:73:64:
                    97:a7:f2:8e:3e:af:43:39:77:fd:a5:dd:5f:50:0e:
                    bd:d8:b9:7d:48:eb:15:e0:3b:0d:b9:b5:c6:9b:1e:
                    54:f0:1a:74:a2:38:65:db:fb:2b:a2:9f:c1:5d:1f:
                    26:48:6e:fd:06:dd:a6:82:ff:87:30:92:77:ff:fd:
                    77:9a:d8:7e:f2:0e:f0:bc:51:9c:c9:c7:1b:11:99:
                    66:20:ce:92:98:7f:8d:42:c1:0a:e0:cd:f5:ec:5e:
                    db:c0:71:96:f7:55:57:79:0e:ae:85:6f:88:88:00:
                    89:c3:82:7c:8c:8e:af:cf:19:b8:9f:c1:5d:56:72:
                    81:14:34:44:6b:fa:f9:46:99:01:2d:f2:fc:15:af:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1C:A8:32:5A:BB:F7:B6:E7:91:DD:D6:11:61:E2:12:F3:7E:54:36
            X509v3 Authority Key Identifier:
                keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138302e302f32342d3234203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:19:c3:a4:5f:b4:c9:9e:af:56:59:22:16:da:9a:48:ac:
         61:0b:d9:2d:c0:4d:c2:11:a4:8a:9f:9d:3e:87:f5:8e:e9:ad:
         a9:a6:f3:44:4d:9b:ca:97:a1:42:d1:16:13:7f:2a:6b:50:4d:
         cc:70:88:e9:8e:85:1b:f4:da:52:89:06:84:3f:2b:ab:48:5d:
         5c:66:14:9a:81:38:90:58:14:ca:9c:11:9f:37:81:9a:95:2d:
         4b:7c:c3:35:b8:d1:85:f2:39:4e:e0:02:1d:7c:d6:2d:49:62:
         16:81:ae:e2:da:ac:1b:41:b5:b6:49:48:e0:15:52:ae:99:29:
         1a:75:55:e9:c3:5e:50:16:be:f8:50:f9:1d:58:04:37:bc:97:
         d0:bc:22:ee:11:61:a6:7d:d8:f0:2f:d7:02:07:c3:72:42:91:
         3f:d0:aa:05:18:eb:95:2a:4e:a5:aa:71:2e:67:29:48:d1:3c:
         19:85:7d:1d:e9:45:8e:88:e0:fb:8a:b4:38:dd:59:b7:8e:6b:
         8b:68:03:dc:97:79:a8:e3:47:fe:49:f0:99:48:f1:ef:05:72:
         f0:3c:94:88:98:eb:df:c6:a5:69:60:cb:0d:6a:c9:31:22:16:
         1f:c4:1a:af:9b:1c:35:a1:69:e9:b9:79:25:75:fe:0d:12:e6:
         1c:22:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:53:22 2024 by rpki-client on console-ams.rpki-client.org