Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
File:                     34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa (raw, json)
Hash identifier:          KO+yj21m1mXaFMxfxmtDR+AKHtNTbzGycfDDfYGBCys=
Subject key identifier:   E4:8E:5E:9A:20:A7:C9:FC:56:A0:0F:D3:81:E1:CB:AE:A3:5C:0E:1D
Certificate issuer:       /CN=126B4823621052C06EFA0ACC9992C77256A7C670
Certificate serial:       05BF982F5CF419BBC3921BA2466B8DB50EC06BCA
Authority key identifier: 12:6B:48:23:62:10:52:C0:6E:FA:0A:CC:99:92:C7:72:56:A7:C6:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126B4823621052C06EFA0ACC9992C77256A7C670.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa
Signing time:             Tue 23 Apr 2024 22:13:23 +0000
ROA not before:           Tue 23 Apr 2024 22:08:23 +0000
ROA not after:            Tue 22 Apr 2025 22:13:23 +0000
asID:                     267128
IP address blocks:        45.229.138.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bf:98:2f:5c:f4:19:bb:c3:92:1b:a2:46:6b:8d:b5:0e:c0:6b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126B4823621052C06EFA0ACC9992C77256A7C670
        Validity
            Not Before: Apr 23 22:08:23 2024 GMT
            Not After : Apr 22 22:13:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:b4:74:93:19:61:0c:4e:40:db:97:bb:fd:
                    ed:03:b2:d1:20:e3:3a:57:63:a2:09:5f:f7:e1:dc:
                    52:38:08:1e:9a:d0:3a:03:4d:8b:03:e6:03:eb:0c:
                    4f:70:30:08:c5:81:0e:1e:28:4d:a1:67:5b:ef:d1:
                    26:4d:33:33:9a:9c:70:a1:fc:e5:c3:65:13:de:a4:
                    9c:b8:c4:a9:ea:33:42:d1:e5:fa:37:3e:2e:b3:2b:
                    78:cf:91:1e:14:a6:c5:9b:a4:14:8c:91:ef:48:b1:
                    b9:35:2d:3d:11:bc:2a:ad:62:02:6c:ef:54:24:27:
                    fa:7e:30:6a:cd:75:b2:84:44:31:ac:01:04:ea:55:
                    dd:56:7e:02:ee:42:07:59:0c:3f:d4:3e:f6:7f:fd:
                    33:8e:e9:29:a4:6c:71:1e:6b:a6:a5:a4:7a:7d:a4:
                    28:b5:b8:74:9d:14:a9:93:28:9b:bf:a2:5a:87:08:
                    f6:c3:28:53:fb:0e:68:5b:e3:18:8e:c0:1e:1b:0d:
                    ca:e7:6c:41:1b:bb:59:f3:73:e8:4a:16:9f:ce:bd:
                    56:e8:78:2c:7f:86:16:59:a8:4e:99:59:55:d2:a4:
                    d3:bb:ab:34:79:d1:c6:a7:53:cd:3c:7b:35:c1:3f:
                    2c:dc:80:45:38:8a:93:52:36:fd:16:44:9c:5b:de:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:5E:9A:20:A7:C9:FC:56:A0:0F:D3:81:E1:CB:AE:A3:5C:0E:1D
            X509v3 Authority Key Identifier:
                keyid:12:6B:48:23:62:10:52:C0:6E:FA:0A:CC:99:92:C7:72:56:A7:C6:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/126B4823621052C06EFA0ACC9992C77256A7C670.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/126B4823621052C06EFA0ACC9992C77256A7C670.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/1/34352e3232392e3133382e302f32332d3233203d3e20323637313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:f1:6a:1a:21:05:27:09:05:30:a2:99:0a:82:6a:23:aa:aa:
         68:3b:28:42:a1:ed:f4:87:4a:08:25:99:97:de:a4:bf:a7:c4:
         09:b0:02:c8:f7:06:07:be:d1:dd:9d:1b:d9:d1:9a:0d:9b:b5:
         19:e4:e9:1e:4f:59:a4:d5:01:a2:ef:e4:c3:00:7d:3a:2c:a3:
         f2:93:3a:61:2d:d0:1a:8b:48:0a:58:77:58:83:50:f7:a9:ae:
         41:ef:19:b2:d9:3b:c8:5c:92:f3:0e:32:a7:ab:c7:7a:ce:07:
         3d:fd:ad:33:1a:41:d9:66:e0:83:dc:f2:54:17:61:51:1d:e1:
         bd:b8:1d:4a:3d:e0:16:dd:09:e7:6a:c7:c1:61:01:8c:3d:87:
         dc:b5:fa:7d:f8:dd:f9:b1:e9:25:7e:cb:35:e8:09:1f:22:e8:
         31:c2:99:2e:5a:cc:72:ea:d6:03:85:2b:39:09:f9:00:69:c5:
         64:f9:5a:2b:07:53:4e:3e:fe:a8:ba:9f:e1:39:67:33:37:0c:
         6d:89:da:7d:ba:39:0b:a2:69:f1:6f:b8:4b:23:b4:9a:5d:c6:
         0f:27:09:8b:05:b0:46:58:4b:6a:59:de:2c:ad:95:f9:23:11:
         b5:2f:b1:b0:a7:23:20:ea:2a:ac:58:e0:59:80:e6:85:05:81:
         d2:6f:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 02:14:11 2024 by rpki-client on console-fra.rpki-client.org