Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32322d3232203d3e20323637363234.roa (raw, json)
Hash identifier:          FajYnd62BIldXKMYGzosbjzPW4XY8MWAfbuu2eTADAg=
Subject key identifier:   F5:C7:12:DA:F7:14:14:EB:7E:4C:AB:6F:8F:A3:09:E2:77:D7:A0:F6
Certificate issuer:       /CN=0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6
Certificate serial:       2F1000C424D00D4B76EB1B7D412B8BADB432C70F
Authority key identifier: 0D:DC:1D:20:20:A9:FE:4F:6C:73:9A:DD:E7:C5:11:F8:8A:F0:08:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
Signing time:             Tue 18 Jul 2023 18:34:09 +0000
ROA not before:           Tue 18 Jul 2023 18:29:09 +0000
ROA not after:            Tue 16 Jul 2024 18:34:09 +0000
asID:                     267624
IP address blocks:        45.71.228.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:00:c4:24:d0:0d:4b:76:eb:1b:7d:41:2b:8b:ad:b4:32:c7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6
        Validity
            Not Before: Jul 18 18:29:09 2023 GMT
            Not After : Jul 16 18:34:09 2024 GMT
        Subject: CN=F5C712DAF71414EB7E4CAB6F8FA309E277D7A0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:dd:d8:f9:97:2f:7c:17:13:49:2b:15:0d:
                    d0:e2:13:f2:19:d1:85:e9:11:dd:ac:6e:86:e5:55:
                    80:99:f7:a6:7d:a5:ea:ff:c0:52:12:8f:7e:40:80:
                    78:82:5e:60:bb:33:04:8c:91:a2:a1:aa:15:19:d3:
                    88:15:a5:b8:92:25:ea:07:48:01:e5:93:50:12:27:
                    d0:38:58:df:15:08:15:9a:0b:cd:ae:b2:fe:00:17:
                    5a:c3:5f:a1:7c:7f:37:b6:bf:dc:89:e7:de:41:03:
                    f6:4d:af:35:25:33:cd:e1:7f:8b:3a:41:b3:24:01:
                    d4:2a:61:80:4b:6c:1b:96:39:18:42:56:06:07:81:
                    2b:9d:47:d0:e3:4e:4a:06:58:82:dd:92:85:23:1e:
                    e3:b6:02:e5:35:7f:dc:94:6e:38:08:5f:d6:cb:8d:
                    2a:7e:c6:78:34:ab:f9:2b:d9:53:6b:f2:35:dc:57:
                    da:fc:22:14:06:31:a6:49:c8:e7:ca:44:96:d5:2c:
                    eb:06:31:e9:7b:e1:31:f3:f1:44:c5:d6:d7:29:87:
                    e2:7b:78:ad:fd:58:ce:1c:33:9b:46:a9:93:2e:63:
                    01:25:8b:5f:de:54:cc:c5:20:45:2e:dc:d8:a1:ce:
                    23:1b:7f:fb:e8:64:42:5d:1d:fc:2e:8f:70:72:fd:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:12:DA:F7:14:14:EB:7E:4C:AB:6F:8F:A3:09:E2:77:D7:A0:F6
            X509v3 Authority Key Identifier:
                keyid:0D:DC:1D:20:20:A9:FE:4F:6C:73:9A:DD:E7:C5:11:F8:8A:F0:08:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:02:c5:09:42:54:c9:2b:ca:f4:b3:4b:a4:db:0b:09:44:95:
         05:dd:e3:0b:1e:b2:78:3f:d1:4a:ec:e9:bf:11:c9:81:46:a5:
         5a:57:be:2c:69:67:9b:7e:b7:8b:de:ad:33:65:e8:7b:f5:08:
         ef:e7:cf:c3:82:5f:b7:67:00:d1:56:e2:0e:25:d9:01:11:9b:
         ea:9b:11:59:85:80:99:ec:ba:2c:ff:ad:c9:7c:d7:ba:eb:4f:
         ae:7a:37:45:21:8e:5d:c4:b4:04:fe:80:26:e6:6f:51:fa:55:
         8d:9f:fe:d1:69:08:0b:3d:a6:c8:ea:9f:b5:da:f7:56:27:b7:
         42:ae:62:53:ec:c4:4e:24:8a:e9:24:5d:25:7c:46:1b:54:c6:
         ce:0d:d4:8c:2b:7b:e2:57:66:f9:20:f3:a7:45:b3:49:ba:85:
         57:7b:e8:db:65:ac:0d:98:45:8a:bb:d3:13:77:8c:60:de:23:
         5d:d4:b1:4b:0d:b6:9b:a2:dd:47:15:f4:43:02:e1:ff:99:b3:
         6f:d2:bb:67:30:fe:97:cb:a5:b1:3a:79:1d:2f:e0:d6:8a:95:
         7e:a9:d4:9d:f1:94:d4:aa:ce:92:0b:2b:92:82:4f:ae:fd:04:
         79:c8:43:a7:8c:c4:05:d8:db:91:5b:cd:25:22:fb:35:3f:67:
         7a:ba:5d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 20:53:07 2024 by rpki-client on console-ams.rpki-client.org