Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32322d3332203d3e20323637363234.roa (raw, json)
Hash identifier:          0y6LT6HrnXXJx/pwGfRoW2fjpX9B2oVNYk0hN396h1E=
Subject key identifier:   06:01:D6:A8:8B:4F:EF:1A:99:36:0F:5D:B6:96:BB:A4:DD:B9:A6:52
Certificate issuer:       /CN=0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6
Certificate serial:       27ECCBAF1535B9EA0B0B2D455FB99E15DEDA8CCE
Authority key identifier: 0D:DC:1D:20:20:A9:FE:4F:6C:73:9A:DD:E7:C5:11:F8:8A:F0:08:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa
Signing time:             Tue 18 Jul 2023 18:35:08 +0000
ROA not before:           Tue 18 Jul 2023 18:30:08 +0000
ROA not after:            Tue 16 Jul 2024 18:35:08 +0000
asID:                     267624
IP address blocks:        45.71.228.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ec:cb:af:15:35:b9:ea:0b:0b:2d:45:5f:b9:9e:15:de:da:8c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6
        Validity
            Not Before: Jul 18 18:30:08 2023 GMT
            Not After : Jul 16 18:35:08 2024 GMT
        Subject: CN=0601D6A88B4FEF1A99360F5DB696BBA4DDB9A652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:8c:5a:a3:de:02:ca:07:0d:67:2d:1b:a7:
                    b4:e7:72:68:3c:60:0d:0b:25:8e:00:c7:25:5c:6c:
                    51:86:a6:2d:fb:77:f9:9e:ec:27:cd:cb:aa:97:b8:
                    6d:0b:32:e8:63:46:6d:b2:26:39:10:5a:54:1a:06:
                    f8:f3:89:ff:de:84:57:36:b3:3b:3d:1d:9f:0e:c7:
                    88:a1:7d:ef:09:1a:db:e6:82:fb:fe:1a:90:d0:cb:
                    a6:9b:6a:4a:2d:43:fc:54:bc:9e:b6:5a:56:04:6e:
                    70:aa:40:02:3a:81:c5:e2:24:57:4e:53:e0:49:1b:
                    38:86:19:ed:a5:31:78:cf:97:b6:c0:0d:50:4a:0e:
                    6a:ed:55:07:cb:95:e9:d7:80:a9:18:f1:f9:08:8a:
                    30:dc:73:36:3f:bd:f6:34:10:92:e5:92:fa:24:70:
                    36:e2:7e:11:72:9f:c6:40:b0:8d:15:ea:c0:47:cf:
                    ea:18:f2:be:4d:2e:66:ce:2b:15:36:4c:a2:1c:5e:
                    bb:f0:24:2f:48:07:75:cf:7c:dd:8c:80:f6:b3:d0:
                    fb:05:57:15:6f:23:7d:44:55:65:97:7e:c1:6b:64:
                    42:ec:bf:aa:bb:ba:64:63:b3:3e:1f:eb:ec:f5:e8:
                    36:ab:b2:65:f8:ec:f1:1f:f6:75:b5:42:0d:bc:c5:
                    1e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:01:D6:A8:8B:4F:EF:1A:99:36:0F:5D:B6:96:BB:A4:DD:B9:A6:52
            X509v3 Authority Key Identifier:
                keyid:0D:DC:1D:20:20:A9:FE:4F:6C:73:9A:DD:E7:C5:11:F8:8A:F0:08:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DDC1D2020A9FE4F6C739ADDE7C511F88AF008C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3332203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:18:50:7d:91:d9:a0:82:1a:a6:27:ed:89:28:84:c5:1f:2c:
         0c:d7:28:4a:89:8a:2d:93:b8:fa:84:8d:a5:e7:1e:9d:f9:7f:
         37:97:59:e9:14:01:41:d2:05:ff:9f:76:20:b0:ea:b0:9d:74:
         16:26:4b:e1:2d:9d:35:15:a1:ac:37:42:4d:40:a4:7d:e5:f8:
         21:f7:d6:8f:c3:30:82:db:38:87:ac:69:c2:74:fe:5b:87:e1:
         e0:4c:41:f0:94:0a:1d:1d:e5:98:44:d3:82:4c:22:82:ac:90:
         12:1a:16:75:1e:12:2e:90:99:d1:ed:70:51:41:89:9e:3a:4b:
         53:35:60:69:d1:25:54:07:b6:f0:12:ed:63:00:67:ad:aa:de:
         6a:3c:d7:b5:70:bd:9c:cf:24:77:2a:e9:7d:cf:90:a8:8c:63:
         52:f7:63:ef:db:11:80:36:b4:a9:ff:90:27:61:55:e9:e2:7e:
         b0:11:7c:5e:2d:36:5f:81:88:14:e6:af:ad:0b:5e:fc:41:bf:
         b6:29:27:18:c5:e4:6e:10:2c:cc:6b:81:7d:ed:04:a5:a7:9a:
         4c:4b:db:00:eb:30:6d:95:8f:14:dc:13:32:18:71:5c:0c:49:
         25:74:f0:d2:61:9d:29:9c:68:a0:cd:c2:29:b7:39:eb:35:fc:
         ad:92:53:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:40 2024 by rpki-client on console-fra.rpki-client.org