Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
File:                     34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (raw, json)
Hash identifier:          AH3xr33SC2JQsTCmb6Z5LnOuslWGTYC9GxsxYMBfEW4=
Subject key identifier:   8A:69:2E:8F:51:03:B1:E0:93:AA:EA:B7:D8:E5:5E:3A:2E:F0:B0:C0
Certificate issuer:       /CN=8C229093821B288EE3264DE1144D4D961651D060
Certificate serial:       48E1FFFF6BB98AA52F7AF2634A45C4E50024E9D7
Authority key identifier: 8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C229093821B288EE3264DE1144D4D961651D060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
Signing time:             Mon 01 Jul 2024 20:03:38 +0000
ROA not before:           Mon 01 Jul 2024 19:58:38 +0000
ROA not after:            Mon 30 Jun 2025 20:03:38 +0000
asID:                     267128
IP address blocks:        45.229.138.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e1:ff:ff:6b:b9:8a:a5:2f:7a:f2:63:4a:45:c4:e5:00:24:e9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C229093821B288EE3264DE1144D4D961651D060
        Validity
            Not Before: Jul  1 19:58:38 2024 GMT
            Not After : Jun 30 20:03:38 2025 GMT
        Subject: CN=8A692E8F5103B1E093AAEAB7D8E55E3A2EF0B0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:1a:3a:7b:f6:1c:12:fa:34:14:4f:71:9e:
                    54:9d:d8:5c:1d:c0:a5:5b:4b:2c:c4:86:82:ed:d7:
                    f1:f0:f7:1d:ee:18:c5:04:89:a8:3d:a7:ca:d8:73:
                    49:d4:47:10:fc:3a:5a:ef:61:b3:53:9a:f3:83:e2:
                    8c:0c:33:10:81:53:31:ff:61:32:29:67:da:66:4e:
                    3b:a8:2d:47:8b:52:02:cf:22:5f:71:f9:b7:32:26:
                    33:8c:40:15:41:fa:c1:93:a9:f7:da:c1:99:cf:14:
                    1a:9f:bc:66:e9:d2:07:5a:39:91:9a:87:3c:42:21:
                    53:b2:12:19:87:d7:14:81:2e:08:19:da:24:18:8c:
                    c2:bf:c3:75:7c:dd:bb:af:2e:80:10:ad:8a:c2:cd:
                    27:0f:1a:ab:94:4f:8a:5d:ad:c9:28:41:51:a7:cd:
                    4a:ad:ab:5e:da:1f:77:4a:86:1e:2d:13:10:7a:28:
                    79:93:a2:34:4d:f0:65:0b:12:44:13:ba:4d:51:c4:
                    2d:2a:81:fb:e3:ac:4c:5b:b4:0b:41:da:96:17:3e:
                    f1:38:f9:3e:83:10:11:91:21:be:ed:80:ed:52:97:
                    9b:93:35:15:72:71:a0:a8:94:c5:0f:2f:07:7e:50:
                    56:b9:4b:f1:e5:11:bc:52:b8:19:44:09:57:3a:d0:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:69:2E:8F:51:03:B1:E0:93:AA:EA:B7:D8:E5:5E:3A:2E:F0:B0:C0
            X509v3 Authority Key Identifier:
                keyid:8C:22:90:93:82:1B:28:8E:E3:26:4D:E1:14:4D:4D:96:16:51:D0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/8C229093821B288EE3264DE1144D4D961651D060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C229093821B288EE3264DE1144D4D961651D060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:13:e9:a0:65:a5:34:7f:74:52:ae:b9:f1:8c:0f:dc:37:
         dd:d9:ed:cb:2a:68:36:0a:fa:8b:97:8c:b3:33:54:87:2f:97:
         b9:1a:d4:f0:70:35:ee:f1:b6:33:70:ee:ef:19:9c:4c:5f:78:
         87:e2:d7:28:f4:8e:bf:0d:b6:86:6a:f6:74:66:e9:d7:b9:52:
         c1:07:4b:ed:86:3d:e5:b8:c3:a4:f5:1a:21:46:5f:a2:85:6c:
         c5:bc:3b:5c:71:de:8d:f6:a6:87:78:1d:f5:8e:16:19:37:5e:
         b4:3a:b8:ef:99:ba:10:57:61:6b:d3:6f:70:af:d9:85:25:68:
         bf:95:8c:03:b8:63:23:e2:3c:dd:92:ac:2c:ce:c3:a7:07:0e:
         7f:6f:4e:ca:6e:19:d3:d5:2c:87:b7:d0:fc:cc:5d:37:05:3b:
         26:f1:c3:c7:69:d5:d5:90:ee:9b:04:37:f3:44:db:9a:cc:91:
         cd:a9:b5:26:e5:eb:7d:e9:23:25:e1:80:30:2a:0a:36:2f:f4:
         4f:18:51:17:43:a0:7e:31:27:53:ab:a3:f8:57:7b:12:67:82:
         42:d1:6b:b5:88:69:33:80:70:c6:e5:2d:22:bf:06:c2:c9:1b:
         cc:8e:14:a9:8a:b3:ec:42:08:93:25:55:7f:49:ad:e1:52:29:
         34:8c:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 13:47:07 2024 by rpki-client on console-fra.rpki-client.org