Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32342d3234203d3e20323636323332.roa
File:                     34352e362e3138322e302f32342d3234203d3e20323636323332.roa (raw, json)
Hash identifier:          Hk0D91g1Zs1+iDw5K3bxLzcAjO0sP00flstYvIm4kxE=
Subject key identifier:   69:9E:32:26:8B:4D:71:CC:1E:94:75:BD:E0:46:E9:60:EA:67:A8:41
Certificate issuer:       /CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
Certificate serial:       07895F240923020ED14D4DA8D9A01A8B50C44DF4
Authority key identifier: E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32342d3234203d3e20323636323332.roa
Signing time:             Fri 06 Sep 2024 14:17:16 +0000
ROA not before:           Fri 06 Sep 2024 14:12:16 +0000
ROA not after:            Fri 05 Sep 2025 14:17:16 +0000
asID:                     266232
IP address blocks:        45.6.182.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:89:5f:24:09:23:02:0e:d1:4d:4d:a8:d9:a0:1a:8b:50:c4:4d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E850C4DA829AA4AD90F631DEF784C6044D89B7B6
        Validity
            Not Before: Sep  6 14:12:16 2024 GMT
            Not After : Sep  5 14:17:16 2025 GMT
        Subject: CN=699E32268B4D71CC1E9475BDE046E960EA67A841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:81:47:ab:c4:3e:88:1c:98:8f:05:4c:62:
                    1a:21:79:a0:06:29:e2:ea:eb:5b:e1:00:38:2e:aa:
                    44:b1:a9:d2:fc:38:6c:2d:93:fb:e3:5c:44:40:8f:
                    20:10:ac:d0:2a:6e:8e:14:35:a0:37:2b:ac:d6:49:
                    61:c9:12:b6:9a:a8:12:12:06:d7:39:47:4a:25:e5:
                    e0:ce:5e:e9:d6:57:f3:0e:b5:ac:f1:d6:20:8c:6a:
                    14:c9:f9:d9:92:48:27:6d:bd:d9:cc:c7:93:4a:1c:
                    f8:cb:fe:18:29:c9:40:33:ba:c1:4a:30:1a:1c:6c:
                    c5:4e:67:98:30:5d:a3:3c:24:4c:5d:dd:9e:39:25:
                    f0:84:ba:9c:f3:bb:fa:41:a7:da:fe:92:08:b5:37:
                    3c:6e:35:7e:77:0a:f4:d9:31:5f:4a:7b:2b:bb:12:
                    c4:2e:9e:55:4f:d5:f6:00:04:ea:b4:96:5a:aa:a7:
                    e0:a1:11:2f:0e:70:5f:8a:db:26:c3:2e:d6:82:e7:
                    e4:68:f7:0b:31:ed:7c:de:ec:e7:08:5d:d9:12:1e:
                    20:5c:f6:b2:c0:45:76:3b:53:41:d4:8f:d4:42:3f:
                    df:7b:fd:ee:44:f2:ed:23:c6:12:1c:89:a5:d2:cd:
                    ae:ed:85:d8:7f:36:5a:5a:6e:17:73:d4:1b:2d:06:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9E:32:26:8B:4D:71:CC:1E:94:75:BD:E0:46:E9:60:EA:67:A8:41
            X509v3 Authority Key Identifier:
                keyid:E8:50:C4:DA:82:9A:A4:AD:90:F6:31:DE:F7:84:C6:04:4D:89:B7:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E850C4DA829AA4AD90F631DEF784C6044D89B7B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138322e302f32342d3234203d3e20323636323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:72:bc:ea:2e:f1:74:cd:4b:d3:bd:20:17:2d:75:d7:6f:96:
         aa:a3:c1:4e:c9:aa:db:12:54:56:02:d7:e8:1d:92:4a:bb:2a:
         f6:e1:b8:49:3a:f4:12:46:17:ae:f4:7c:6e:80:ae:54:86:ea:
         ef:14:f6:2c:5d:f7:ed:f1:8a:a2:2a:a3:68:7b:9e:47:b8:6e:
         3c:cc:ac:13:e3:34:ba:21:33:da:0a:84:c1:40:38:3b:8c:c7:
         2c:f0:ce:16:88:b6:3e:bc:44:d2:fe:49:4b:d1:5e:fb:78:8b:
         09:c3:23:87:96:61:cd:d7:88:7e:f0:20:75:bf:ea:32:e8:c1:
         2b:26:09:52:af:27:90:ba:fa:71:31:60:f6:be:ed:09:11:75:
         3f:8b:a3:7e:75:e6:42:a7:6b:4c:19:f6:c4:6a:ac:14:61:97:
         f2:3b:cc:08:88:c1:f3:e7:41:ca:21:bb:65:b0:2d:e8:4e:82:
         6d:59:8a:fa:19:22:ef:2a:1f:63:ba:c7:81:97:e0:e8:f4:ff:
         f9:69:21:ae:44:a3:db:c9:7f:e4:1e:bf:a5:2d:59:ca:6d:0e:
         7c:31:92:59:d6:60:31:f9:fe:8d:7a:45:9d:1c:bb:e5:f6:09:
         d9:6a:86:1e:68:43:3d:4f:26:2a:14:d1:8f:98:6a:9d:c8:bb:
         f5:db:10:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 06:52:41 2024 by rpki-client on console-fra.rpki-client.org