Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/34352e372e3231392e302f32342d3234203d3e20323636363139.roa
File:                     34352e372e3231392e302f32342d3234203d3e20323636363139.roa (raw, json)
Hash identifier:          vTEYRQVKq2aBFVn2SguSYLNfeSOthv6jBC043pVGVk0=
Subject key identifier:   E7:2F:73:52:71:34:CC:5D:EC:B4:83:E5:96:D9:97:2E:E4:DE:96:44
Certificate issuer:       /CN=6FA2A7738A99E3D779A719ADD80B269D49707E78
Certificate serial:       42E844AA90EC3EAD8E1E7C50D0B8EA89579C3C72
Authority key identifier: 6F:A2:A7:73:8A:99:E3:D7:79:A7:19:AD:D8:0B:26:9D:49:70:7E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/34352e372e3231392e302f32342d3234203d3e20323636363139.roa
Signing time:             Thu 04 Apr 2024 02:33:49 +0000
ROA not before:           Thu 04 Apr 2024 02:28:49 +0000
ROA not after:            Thu 03 Apr 2025 02:33:49 +0000
asID:                     266619
IP address blocks:        45.7.219.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e8:44:aa:90:ec:3e:ad:8e:1e:7c:50:d0:b8:ea:89:57:9c:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FA2A7738A99E3D779A719ADD80B269D49707E78
        Validity
            Not Before: Apr  4 02:28:49 2024 GMT
            Not After : Apr  3 02:33:49 2025 GMT
        Subject: CN=E72F73527134CC5DECB483E596D9972EE4DE9644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:2a:0e:8c:f9:55:f9:99:8f:69:41:05:b2:
                    45:aa:70:82:30:e7:9e:d2:c6:53:05:7b:5d:4d:f9:
                    10:f5:87:4e:6d:1a:d0:bb:0c:31:eb:9a:d1:fe:db:
                    05:e5:85:95:bf:cd:a4:46:b1:c5:f3:85:c1:48:00:
                    90:fc:7c:e8:7c:c9:c5:b2:3e:0c:46:d5:3d:47:5c:
                    d3:f5:f3:2e:e1:3a:62:a7:82:70:82:74:0d:8c:46:
                    7f:32:19:b9:33:8b:ed:3e:6a:de:9b:df:c0:e7:64:
                    2b:2c:e9:ed:b6:02:32:5e:7a:63:16:74:fc:77:0d:
                    ba:fc:03:6a:24:e9:a0:c3:8c:76:8a:63:33:3b:1b:
                    2d:d8:e5:85:b2:b2:51:1d:e8:62:b3:d9:61:d7:2f:
                    45:1b:23:af:76:c5:0e:bf:68:ed:99:fb:56:c4:df:
                    a3:29:0f:e6:0e:b0:25:33:68:66:d0:8f:23:62:21:
                    4a:8c:0c:66:be:c3:23:69:2d:03:45:f5:dc:17:b9:
                    b9:87:8b:78:e2:78:dd:f0:77:cc:6d:4e:21:73:fa:
                    0a:1f:78:0a:f2:b4:7b:33:6d:ce:bb:b7:39:66:7a:
                    f5:0d:93:c1:5b:49:9c:9a:e4:5f:1c:0f:a4:f6:18:
                    91:6d:1d:72:75:c3:4e:f5:55:5f:75:70:b6:8b:f0:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:73:52:71:34:CC:5D:EC:B4:83:E5:96:D9:97:2E:E4:DE:96:44
            X509v3 Authority Key Identifier:
                keyid:6F:A2:A7:73:8A:99:E3:D7:79:A7:19:AD:D8:0B:26:9D:49:70:7E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FA2A7738A99E3D779A719ADD80B269D49707E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/1/34352e372e3231392e302f32342d3234203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:b6:14:92:90:96:63:ef:64:d9:34:19:8f:50:79:78:b8:
         e1:73:55:4c:9b:fc:a4:4a:e1:ae:93:da:0b:c2:e6:74:f3:da:
         16:91:19:78:8d:b8:47:b0:7f:55:b4:1e:5b:19:b7:f4:84:4a:
         50:f9:26:25:9b:58:4b:b2:a7:03:93:54:61:b0:de:82:f0:ff:
         16:0c:bf:f9:b3:af:72:44:23:61:8e:f5:0b:c5:c5:26:ce:93:
         fc:07:cb:fe:ec:52:79:66:45:8f:ba:72:3d:c0:81:bd:e8:2c:
         22:44:ff:bc:27:fb:4b:87:3b:80:73:c3:41:01:df:30:cb:25:
         76:64:0c:cb:25:a1:11:59:06:bf:4e:cc:ff:9a:1a:6f:85:bd:
         66:ba:a2:d5:a4:41:2f:b3:42:a2:de:f7:35:1e:da:5e:29:4f:
         c3:c3:02:2d:39:2d:5a:93:46:d8:c7:e2:0a:98:11:75:e0:f6:
         fd:6b:df:c9:d9:8f:0b:50:73:06:ae:da:f9:45:01:a2:52:3e:
         22:cc:c3:d0:4e:6f:cc:d2:94:14:16:67:2c:76:94:86:74:5a:
         75:84:77:3c:87:d6:8b:25:50:69:5b:87:aa:1f:84:e8:01:71:
         a6:d4:f7:12:8e:6b:4b:a2:7a:a3:8d:0b:d3:1a:a2:37:d5:4c:
         ea:18:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 04:16:31 2024 by rpki-client on console-fra.rpki-client.org