Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa
File:                     34352e3137392e36382e302f32322d3234203d3e20323639313039.roa (raw, json)
Hash identifier:          +3XGo5pOBMBbA0O84YhCWfSm9krJ9UNWp1EUJK6PEVc=
Subject key identifier:   E0:92:4B:72:5D:15:A5:50:88:BB:8F:65:71:09:57:FC:80:4A:0B:3F
Certificate issuer:       /CN=8BA7F66325E28134C424CF19BA1599819495E340
Certificate serial:       4B10AF5E4EA97624ECF974B3CEB88D5568676712
Authority key identifier: 8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA7F66325E28134C424CF19BA1599819495E340.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa
Signing time:             Wed 03 Apr 2024 19:19:41 +0000
ROA not before:           Wed 03 Apr 2024 19:14:41 +0000
ROA not after:            Wed 02 Apr 2025 19:19:41 +0000
asID:                     269109
IP address blocks:        45.179.68.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:10:af:5e:4e:a9:76:24:ec:f9:74:b3:ce:b8:8d:55:68:67:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA7F66325E28134C424CF19BA1599819495E340
        Validity
            Not Before: Apr  3 19:14:41 2024 GMT
            Not After : Apr  2 19:19:41 2025 GMT
        Subject: CN=E0924B725D15A55088BB8F65710957FC804A0B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:4a:86:f7:c7:ce:49:c5:d7:2c:b8:37:4a:
                    4f:e5:84:99:b1:a1:f8:ac:bb:f5:c7:72:24:e0:8b:
                    4f:6b:86:49:3b:b0:5c:69:34:92:8e:14:fa:19:b0:
                    86:57:c4:0e:5c:1a:ee:4b:d7:76:bc:5e:7d:a2:5a:
                    28:60:6d:e6:d4:ec:a6:b7:38:90:b4:e4:07:66:57:
                    17:00:be:b5:a4:9b:33:0b:7f:5d:4e:92:7b:91:75:
                    b3:4c:c6:9f:ad:02:bd:79:49:da:72:35:f8:c3:23:
                    39:a3:79:83:bb:31:c4:56:83:ed:d5:88:d7:8d:1a:
                    05:54:63:56:23:32:6b:11:c8:2d:81:ad:63:8f:df:
                    1b:1c:da:36:68:71:ff:ba:a2:87:42:f3:80:86:18:
                    11:0e:85:b8:d5:d5:9a:db:ca:d6:d5:d0:f6:70:d2:
                    0a:fd:b4:af:c5:ab:23:77:11:20:46:ef:ce:cd:12:
                    9f:ad:9c:58:27:5d:74:40:74:42:b5:a0:3a:d9:ed:
                    ac:d1:02:62:f3:18:93:ae:f7:09:77:b4:d0:5d:0e:
                    e7:15:a8:bc:eb:6c:d8:52:d1:20:5d:14:78:53:f3:
                    b6:69:ef:3c:0d:51:28:4e:9b:02:f2:38:bb:bd:ec:
                    d5:b7:8a:a4:12:98:5d:ae:da:71:53:99:e4:56:5e:
                    4e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:92:4B:72:5D:15:A5:50:88:BB:8F:65:71:09:57:FC:80:4A:0B:3F
            X509v3 Authority Key Identifier:
                keyid:8B:A7:F6:63:25:E2:81:34:C4:24:CF:19:BA:15:99:81:94:95:E3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/8BA7F66325E28134C424CF19BA1599819495E340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA7F66325E28134C424CF19BA1599819495E340.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/1/34352e3137392e36382e302f32322d3234203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:cb:d9:ae:78:47:09:43:74:bd:0e:3d:71:6d:29:c1:a0:
         59:51:ad:09:2f:63:b9:7d:6a:06:91:8a:fa:0e:1d:ee:7e:33:
         88:7f:e4:46:e9:48:29:75:b2:f3:38:f3:4c:44:05:5c:23:21:
         ad:11:22:15:3e:45:86:f5:a2:f5:a0:9d:d2:bf:e2:d0:81:12:
         17:d4:8f:0d:02:b2:60:9b:77:14:8f:bf:ff:d6:35:8a:7b:27:
         75:bb:81:46:52:b9:c4:c4:b9:54:67:bf:aa:d2:04:dd:37:7d:
         5d:6e:f6:19:56:ea:80:dc:3e:98:5c:9c:6f:1d:27:b4:f1:65:
         9f:a0:ef:ba:2c:38:cc:b1:1a:c1:0c:e2:f2:a0:6d:7a:c7:e3:
         ec:33:e6:fa:52:fc:85:67:f9:25:a9:a8:eb:3e:25:57:13:d8:
         78:cd:16:cb:19:a1:cf:e3:10:25:c2:87:af:c7:77:45:f3:68:
         dc:8b:cd:4e:3d:26:02:09:01:be:89:62:04:86:51:22:d0:81:
         5b:f2:a2:0a:84:d7:1a:f2:1f:69:7e:f4:7c:04:ce:8e:a1:a2:
         61:74:28:13:ad:46:77:5c:9a:34:83:50:03:61:05:2d:8f:dc:
         28:e8:4f:9d:84:30:88:b8:d1:e6:96:7a:17:f1:79:03:25:48:
         a3:a3:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:03:02 2024 by rpki-client on console-ams.rpki-client.org