Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32332d3233203d3e20323637363234.roa
File:                     34352e37312e3232382e302f32332d3233203d3e20323637363234.roa (raw, json)
Hash identifier:          MULPbJuXEJoUIr2TrPGBMXKILSZ6d2GTTXOjwbenLQs=
Subject key identifier:   B9:41:68:81:7B:B4:A4:53:C0:BE:92:24:9D:80:53:51:8B:50:CD:D2
Certificate issuer:       /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial:       1EFD4D8C295D7D23B05260488EA4FF82C222DEDE
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32332d3233203d3e20323637363234.roa
Signing time:             Tue 27 Aug 2024 12:51:32 +0000
ROA not before:           Tue 27 Aug 2024 12:46:32 +0000
ROA not after:            Tue 26 Aug 2025 12:51:32 +0000
asID:                     267624
IP address blocks:        45.71.228.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fd:4d:8c:29:5d:7d:23:b0:52:60:48:8e:a4:ff:82:c2:22:de:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
        Validity
            Not Before: Aug 27 12:46:32 2024 GMT
            Not After : Aug 26 12:51:32 2025 GMT
        Subject: CN=B94168817BB4A453C0BE92249D8053518B50CDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:85:a2:b5:fe:c7:6c:f7:68:7d:8b:9b:14:
                    a8:60:d0:56:21:80:8e:5d:ba:59:59:e3:8e:76:d7:
                    53:37:2c:50:56:a6:47:c9:f6:ff:f2:b3:0d:f0:d5:
                    fb:cf:89:59:36:b6:89:85:6e:7c:2f:b6:f8:bd:bf:
                    ca:cd:61:f1:0c:e0:ab:f0:f4:82:b0:08:78:66:34:
                    74:e7:c1:e5:e1:04:e1:8d:fa:b3:53:6c:94:a6:25:
                    c0:d2:45:0d:69:ba:03:45:eb:d1:89:64:40:c3:61:
                    a1:28:9c:dc:8c:70:3b:7e:fa:1e:b9:ff:54:f5:54:
                    e0:9d:76:47:19:f5:6d:d6:8c:96:aa:cd:6b:b0:a9:
                    64:f9:53:c3:55:e2:43:22:d9:12:1c:49:06:41:75:
                    9f:42:10:4f:63:24:e5:35:82:c6:2c:77:fb:10:57:
                    9a:06:69:0f:b7:47:21:11:65:85:37:68:20:90:e3:
                    9d:10:86:63:1c:37:97:02:47:2e:a0:c4:5b:ee:84:
                    c9:12:02:c4:92:8f:8a:46:b8:70:9e:e7:54:86:f5:
                    a9:d0:15:d5:f9:97:ac:08:58:28:3e:1b:9e:60:58:
                    89:52:98:81:b7:e5:95:da:93:f0:e9:38:6d:1f:37:
                    20:80:ec:ae:10:a0:7a:63:80:61:98:c5:27:2d:8e:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:41:68:81:7B:B4:A4:53:C0:BE:92:24:9D:80:53:51:8B:50:CD:D2
            X509v3 Authority Key Identifier:
                keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32332d3233203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c2:97:8e:94:8b:aa:7a:c6:cc:92:33:9f:7e:1e:cf:9b:b2:ef:
         ba:01:87:1d:70:8a:2b:78:38:db:5e:1b:86:2f:e8:10:6d:a1:
         6f:d8:16:3a:48:c6:bc:a3:d5:f6:6a:6d:38:e3:6c:2f:51:c0:
         11:fd:50:54:65:c7:31:58:64:7e:a5:d5:c3:a2:15:c0:ec:7b:
         eb:c8:c4:75:85:1d:63:89:96:97:25:72:9e:a3:d0:9d:17:3c:
         3a:26:3c:1f:5e:25:cb:2a:fc:68:9b:13:78:ea:fb:43:99:d6:
         d5:f7:5a:6a:5a:7f:5d:25:d9:a2:c0:ce:a2:ee:7d:f1:06:d2:
         5c:33:df:3b:61:d0:70:8b:98:0b:76:80:c3:56:60:08:56:b8:
         fe:53:27:c0:b4:96:20:88:9a:44:2a:18:9a:b0:25:39:57:ca:
         69:01:8b:b2:fd:97:bf:07:87:ed:f8:27:64:fd:54:cb:a4:c0:
         21:fa:b0:da:0e:c0:e7:85:8a:f0:c3:5a:3f:d3:fe:40:dc:ea:
         54:2b:d3:f4:dd:cf:cb:93:dc:d9:2d:f5:91:d3:af:29:70:79:
         bd:e2:67:b2:b6:44:21:25:67:8e:2b:5a:b4:83:25:4f:4d:b8:
         36:1f:8e:85:1c:9c:7f:a4:25:00:bd:96:9a:05:81:4c:47:70:
         1f:39:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:16 2024 by rpki-client on console-ams.rpki-client.org