Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138312e302f32342d3234203d3e20323637333437.roa
File:                     34352e3233332e3138312e302f32342d3234203d3e20323637333437.roa (raw, json)
Hash identifier:          HFawliRt9tqK3wmIYe6Mpseya9PI8CRqbLDi+vBfv6Q=
Subject key identifier:   28:0F:4F:0D:26:68:84:AF:F2:03:3E:4B:09:DB:F3:89:CF:02:BF:9F
Certificate issuer:       /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial:       049BD7FCEC05A8C0CD92D5434B474C6604597310
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138312e302f32342d3234203d3e20323637333437.roa
Signing time:             Fri 21 Jun 2024 16:37:12 +0000
ROA not before:           Fri 21 Jun 2024 16:32:12 +0000
ROA not after:            Fri 20 Jun 2025 16:37:12 +0000
asID:                     267347
IP address blocks:        45.233.181.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9b:d7:fc:ec:05:a8:c0:cd:92:d5:43:4b:47:4c:66:04:59:73:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
        Validity
            Not Before: Jun 21 16:32:12 2024 GMT
            Not After : Jun 20 16:37:12 2025 GMT
        Subject: CN=280F4F0D266884AFF2033E4B09DBF389CF02BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:86:5a:c2:27:08:86:4e:26:e7:e1:0a:7c:
                    04:03:14:28:a6:dd:a3:63:b4:ee:59:7c:c8:d7:66:
                    c5:b7:ba:08:53:b5:f4:50:d9:d5:30:a0:2d:33:33:
                    02:71:89:36:a4:00:8f:80:66:3a:ca:5b:c6:7a:6c:
                    43:4e:68:a7:e7:7a:4e:79:bb:fc:a1:61:06:8d:3e:
                    47:f6:e5:01:cd:6d:65:7e:55:d4:9a:21:52:18:9d:
                    8e:6e:4f:3d:09:a9:c4:0d:21:20:23:c4:8b:48:48:
                    0e:2b:69:c1:50:e6:ad:2b:db:33:fe:73:20:cf:2d:
                    85:68:c2:c5:08:d1:94:2f:cf:fc:8e:12:c8:3b:21:
                    0d:cf:79:2d:3e:42:1e:17:39:4c:20:36:e4:63:6b:
                    aa:ec:cd:06:ba:c5:e4:27:83:04:74:c6:aa:6a:74:
                    7d:49:49:40:0c:5e:5f:4f:b3:77:c3:a0:75:ef:63:
                    e1:12:db:31:37:7f:9e:70:8c:ee:77:d8:56:23:a4:
                    c2:15:51:35:97:1b:4c:16:e4:5b:9b:a4:73:18:58:
                    02:d6:a7:87:96:8e:56:bf:10:1a:07:36:bf:49:b8:
                    2a:18:15:d0:be:95:8d:64:b5:e7:31:48:af:8b:ab:
                    e7:e3:82:6d:65:c0:47:4a:49:3d:5f:10:cf:ad:20:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0F:4F:0D:26:68:84:AF:F2:03:3E:4B:09:DB:F3:89:CF:02:BF:9F
            X509v3 Authority Key Identifier:
                keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138312e302f32342d3234203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1e:4e:1f:96:16:3e:0b:3a:2e:78:be:36:bd:9f:f7:d1:a2:
         9e:71:14:5d:2f:fc:bb:23:4d:6e:d2:28:e3:d0:70:4a:27:67:
         bd:8e:b1:63:be:00:69:ca:a1:e0:a5:01:7a:97:06:de:c2:60:
         15:e1:f4:38:c0:c8:b9:39:cd:ab:6b:38:67:d8:d8:06:39:da:
         a9:5f:5a:b6:98:18:72:4b:0e:2d:39:20:75:e7:43:7f:02:1f:
         8c:56:5d:bf:5b:36:14:e9:3b:d9:18:c0:88:76:b4:55:64:52:
         fc:e7:08:c7:eb:3d:c5:5c:50:9b:af:88:f5:b9:94:1e:b2:ea:
         99:83:7a:e9:e0:b7:8e:07:9e:f0:1c:24:d7:f0:53:21:1a:44:
         4a:c7:1b:01:c1:79:0d:6c:cd:4d:ea:b1:14:13:70:61:71:2b:
         17:19:22:de:26:74:73:b0:98:e1:e1:2b:c4:e3:e0:63:8c:fb:
         76:c6:70:7b:f5:25:88:ee:29:17:7f:6d:12:b7:40:76:5c:ae:
         d5:4c:c1:5b:4b:e9:7d:0b:5a:6d:99:09:75:99:ce:7d:cf:ca:
         90:c5:9e:78:4e:e5:cb:cc:74:e9:6c:fe:8a:a7:89:e3:8b:7e:
         18:65:8f:07:19:02:9c:17:b1:48:1d:c5:90:7b:8b:29:dc:25:
         63:55:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:42 2024 by rpki-client on console-fra.rpki-client.org