Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232392e302f32342d3234203d3e20323637363234.roa
File:                     34352e37312e3232392e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier:          1CKJD9gDI0gTiRPQgihE5gV1XMWW9J7zoj8nJ25pD/0=
Subject key identifier:   F0:E5:09:06:53:FD:12:BC:8D:AB:0B:7A:1D:60:92:09:92:A5:1D:44
Certificate issuer:       /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial:       7159D5E2B7D98E6B04A69B8DC2B719AD887786FB
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232392e302f32342d3234203d3e20323637363234.roa
Signing time:             Tue 27 Aug 2024 12:52:49 +0000
ROA not before:           Tue 27 Aug 2024 12:47:49 +0000
ROA not after:            Tue 26 Aug 2025 12:52:49 +0000
asID:                     267624
IP address blocks:        45.71.229.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:59:d5:e2:b7:d9:8e:6b:04:a6:9b:8d:c2:b7:19:ad:88:77:86:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
        Validity
            Not Before: Aug 27 12:47:49 2024 GMT
            Not After : Aug 26 12:52:49 2025 GMT
        Subject: CN=F0E5090653FD12BC8DAB0B7A1D60920992A51D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:08:1d:c5:82:ef:4a:64:c6:c8:a3:ef:be:
                    a0:ee:32:a5:da:22:12:b7:b5:a7:35:19:e1:b5:f8:
                    6e:81:1d:91:fd:89:46:5a:2c:da:ef:d4:a1:36:82:
                    83:23:28:e0:77:49:b2:3e:5a:55:48:36:d6:3b:8c:
                    19:16:02:01:f1:3a:ca:c2:42:b4:f5:91:db:68:ed:
                    40:22:a0:49:7e:b0:23:fb:aa:14:26:26:d2:8f:85:
                    2f:23:76:ae:87:d6:dd:82:36:aa:fa:ca:f0:88:7f:
                    0b:e0:92:1f:12:e1:8b:a6:fa:e0:86:de:2c:55:de:
                    41:3d:df:94:4d:0f:59:43:a9:d2:c9:2d:06:d2:15:
                    03:20:e6:7e:ff:8d:db:bb:34:d8:d5:47:ef:c5:14:
                    bc:1d:1a:15:e9:13:71:58:32:e4:5d:da:81:77:23:
                    13:0d:e2:63:be:a5:81:c4:c4:ac:e4:80:95:9e:ee:
                    a5:d4:92:0f:e8:86:75:51:7d:39:58:9d:48:03:89:
                    aa:24:fa:47:ff:68:89:ce:ed:17:9b:d5:ce:3f:bc:
                    77:bc:e9:a0:f9:07:fc:0e:28:63:bb:28:7f:a6:0d:
                    79:89:e4:57:0a:e0:eb:ca:0b:cf:83:1b:b6:1e:dc:
                    40:4d:fc:ca:e3:f2:ee:d3:be:21:11:08:52:cb:83:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E5:09:06:53:FD:12:BC:8D:AB:0B:7A:1D:60:92:09:92:A5:1D:44
            X509v3 Authority Key Identifier:
                keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232392e302f32342d3234203d3e20323637363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:38:13:c5:2d:a5:af:5d:dd:7b:94:45:9a:c3:3b:3e:7f:
         ee:3c:73:07:b0:83:27:e3:4a:f9:c2:65:21:ad:b7:de:3a:98:
         cd:2c:46:e1:93:64:9d:fa:e8:ab:a6:ce:34:a3:a4:cb:7d:07:
         a7:11:1d:29:4a:25:a9:be:af:6a:b2:f1:2e:0a:dc:06:8b:65:
         e5:5f:56:b5:a7:5b:91:22:81:8b:ad:c3:78:f4:31:59:27:f7:
         10:7d:54:0f:6e:ed:2b:86:f7:1c:e2:87:ae:c9:3c:18:f3:d1:
         0c:6b:4b:50:a8:06:3c:0e:86:d7:89:73:c6:40:c0:6b:4c:46:
         88:59:de:47:8a:af:13:38:14:4e:2a:c1:00:7e:c0:50:a2:81:
         46:8a:d4:30:23:6a:3e:2f:02:50:98:83:c9:d3:6b:dd:a2:93:
         91:ff:1f:62:c2:a5:98:ce:8f:2d:8c:91:4c:3b:20:24:9f:67:
         78:0c:d4:4c:f8:c7:e9:e6:36:78:f7:95:aa:6c:9a:be:6b:bc:
         83:94:18:bf:f1:06:c6:9a:b6:25:1e:8a:1b:17:f7:2d:42:45:
         57:2e:8a:a8:33:8d:b1:f2:bd:a3:9a:74:ad:cc:20:10:86:57:
         46:dd:53:96:3c:ed:96:15:31:f1:ca:05:60:93:66:22:73:d3:
         bc:1b:d9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 08:59:50 2024 by rpki-client on console-fra.rpki-client.org