Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa
File:                     34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa (raw, json)
Hash identifier:          t4Ocb3VlNUxRS5IWnejb5W9eFI/VX2CYC8mJITj16fc=
Subject key identifier:   51:E9:17:11:DB:67:58:F0:C8:09:11:6E:7F:7A:80:E8:DE:DC:BE:5F
Certificate issuer:       /CN=4D37A04C3C53C597EA82B0D88BB7A3820B44DB30
Certificate serial:       7856D514E6DA8CB0B862230493A4BB602C073270
Authority key identifier: 4D:37:A0:4C:3C:53:C5:97:EA:82:B0:D8:8B:B7:A3:82:0B:44:DB:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa
Signing time:             Mon 06 May 2024 13:50:39 +0000
ROA not before:           Mon 06 May 2024 13:45:39 +0000
ROA not after:            Mon 05 May 2025 13:50:39 +0000
asID:                     269537
IP address blocks:        45.188.168.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:56:d5:14:e6:da:8c:b0:b8:62:23:04:93:a4:bb:60:2c:07:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D37A04C3C53C597EA82B0D88BB7A3820B44DB30
        Validity
            Not Before: May  6 13:45:39 2024 GMT
            Not After : May  5 13:50:39 2025 GMT
        Subject: CN=51E91711DB6758F0C809116E7F7A80E8DEDCBE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:76:22:20:83:85:74:dc:a7:cd:d0:2e:d8:
                    62:a3:28:26:63:b4:56:ba:6a:4e:07:ab:b6:49:92:
                    86:ce:72:13:39:d9:17:bf:a4:d4:1f:3a:2b:f7:2d:
                    74:38:4c:c8:0b:23:a5:76:6f:cf:a3:e0:8b:dd:de:
                    c0:95:18:d9:6b:3f:15:97:78:46:40:41:2e:4c:89:
                    9d:19:75:3b:d5:14:f3:83:9a:af:ff:e6:70:47:5c:
                    ce:9c:eb:b2:e2:3c:ed:82:35:f7:bc:05:84:6c:3f:
                    3b:a9:3e:79:21:ea:da:4a:37:8f:ce:1f:24:32:e9:
                    41:e1:6b:fe:1b:09:11:38:ca:9c:f7:8a:f3:bb:32:
                    a1:fb:4f:b7:e8:cc:41:1c:be:9c:db:54:62:3f:f8:
                    8a:e9:8e:97:1c:15:42:6a:de:54:39:77:e0:7c:50:
                    c7:6d:09:21:48:63:82:6e:78:fd:c0:18:50:da:d3:
                    92:18:41:72:e1:fb:ef:48:11:15:7e:87:bf:cf:17:
                    d2:7f:4f:1c:c1:7d:0e:42:91:60:02:e9:f9:bc:32:
                    21:fd:d1:ff:ad:ec:44:6c:32:8b:bf:61:7b:1d:5c:
                    3d:77:3b:ab:3e:8c:0f:03:99:5c:00:9a:0e:75:b9:
                    79:50:cd:91:a3:4e:32:97:63:28:ab:3a:4e:b6:56:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:17:11:DB:67:58:F0:C8:09:11:6E:7F:7A:80:E8:DE:DC:BE:5F
            X509v3 Authority Key Identifier:
                keyid:4D:37:A0:4C:3C:53:C5:97:EA:82:B0:D8:8B:B7:A3:82:0B:44:DB:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D37A04C3C53C597EA82B0D88BB7A3820B44DB30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DD2GBnneUiZHvk3zUoPbkis6fym6RQviUQ6vM6RCv1Tx/0/34352e3138382e3136382e302f32322d3234203d3e20323639353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:f7:3d:9d:e2:ad:e3:c3:fd:a6:f8:e8:84:3a:9a:15:02:
         3c:77:b3:a7:a5:e8:cd:97:75:72:c9:ed:a6:cb:12:4e:16:b2:
         5d:17:9d:75:79:84:a6:08:63:f0:9c:fe:57:8e:d9:20:6f:2a:
         24:49:3b:e1:2e:7d:0e:a9:9d:a9:82:38:08:56:d2:ec:b7:11:
         0f:2f:9d:11:cc:8b:64:5b:8c:cf:2f:58:41:a1:73:3e:14:93:
         01:7d:88:d5:a4:64:1f:fb:5d:e6:ed:16:27:24:25:59:70:c3:
         df:44:fa:73:0a:0b:f0:85:c6:85:45:4d:f0:90:43:45:5f:bd:
         07:48:24:c2:13:40:1f:3e:52:2c:a3:e6:98:10:46:28:de:02:
         01:98:7e:c3:0a:2a:4e:78:f6:b6:9c:9c:00:85:bc:79:0c:22:
         f5:cb:dc:11:6d:75:52:50:c0:7f:f0:db:ff:02:36:c5:fc:6c:
         e1:df:0f:a2:8a:e0:9a:c5:9f:1f:e9:16:21:ae:fa:b7:bb:c8:
         c3:f7:e5:84:4d:79:d1:4c:8b:c2:0a:95:e3:c7:a2:73:e7:88:
         56:30:81:9b:85:e4:1b:b6:aa:22:45:20:2a:8a:82:e3:b9:76:
         34:ec:69:6e:b4:2e:67:f2:7a:2b:5e:17:9f:b1:ee:bd:d1:e8:
         5b:cf:2c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 15:05:27 2024 by rpki-client on console-fra.rpki-client.org