Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa
File:                     34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa (raw, json)
Hash identifier:          iAUFBNaEPb1eM9w4qTboOJ9YfaI8htk4SFU8PgJ+IbY=
Subject key identifier:   4D:E7:77:55:55:5F:D4:2D:B3:CF:99:40:E6:1E:39:0D:09:E7:7B:9E
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       24710FE76C87D923FFEAA4255A9268C16FDF9D56
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:05 +0000
ROA not before:           Thu 04 Apr 2024 15:21:05 +0000
ROA not after:            Thu 03 Apr 2025 15:26:05 +0000
asID:                     267369
IP address blocks:        45.234.176.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:71:0f:e7:6c:87:d9:23:ff:ea:a4:25:5a:92:68:c1:6f:df:9d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:05 2024 GMT
            Not After : Apr  3 15:26:05 2025 GMT
        Subject: CN=4DE77755555FD42DB3CF9940E61E390D09E77B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:93:be:d7:8b:a7:08:bc:67:06:d9:5f:f3:
                    68:7c:3e:36:a1:92:6f:f4:c3:b8:a5:80:2f:5b:2d:
                    ca:c2:6c:78:72:14:bb:9e:51:1d:7c:ed:52:0c:f4:
                    67:37:81:da:a4:4f:d5:30:cc:97:bf:6c:01:5a:2e:
                    99:57:48:16:eb:bd:02:0a:9e:76:ca:c6:b7:7f:91:
                    da:f0:83:8e:f3:0a:aa:10:4f:16:7e:b9:26:bf:f1:
                    4c:c1:ba:d2:60:18:85:88:70:f6:2b:29:8d:6b:e6:
                    80:23:80:c9:ec:0c:b1:34:97:62:66:5c:5b:fb:8e:
                    b8:c8:ca:59:01:e5:a0:49:10:3b:e3:c7:3f:89:30:
                    7a:bb:c1:bd:30:e6:b1:4d:62:73:5a:70:85:c4:35:
                    6d:95:ba:df:64:9a:58:ee:f9:4b:fe:0d:17:44:a4:
                    62:d7:0e:20:30:4c:4c:f7:9a:4f:e4:2b:72:83:f0:
                    42:c1:70:5e:ec:7c:42:03:a3:61:91:c8:1f:bc:cf:
                    53:1a:a0:5c:57:78:ff:db:b8:ee:0c:04:7a:d3:11:
                    18:b0:35:93:c4:0b:2f:b8:04:05:cb:3b:cf:e0:a6:
                    f4:aa:bf:fe:fd:37:9b:19:d5:1f:89:76:29:5f:74:
                    1e:0e:d9:5b:dc:43:24:80:ec:0c:87:af:8d:a8:2c:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:77:55:55:5F:D4:2D:B3:CF:99:40:E6:1E:39:0D:09:E7:7B:9E
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137362e302f32342d3234203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b6:1d:3c:b4:b2:58:57:b1:7c:5f:a0:03:36:c6:d9:65:8a:
         5f:c8:9f:29:1e:50:7a:9e:b4:d6:0f:bf:f2:cf:f5:53:d7:6b:
         16:3f:21:61:9c:6b:65:a7:ae:81:9f:c4:2c:a8:04:90:9a:92:
         3c:d2:07:c4:ae:cc:05:2a:88:be:68:07:cc:af:ea:3e:4a:62:
         8b:89:72:d2:ce:9f:62:02:f5:06:94:18:12:8f:4d:df:0e:a9:
         b8:3f:1a:63:39:51:33:2f:02:64:ab:b9:ae:79:ea:26:40:81:
         59:f7:cf:97:25:a9:6f:e4:b5:73:cc:0b:1a:0b:1b:49:75:ec:
         74:fe:2d:88:bc:f7:f2:70:3d:53:51:07:37:02:01:35:02:6a:
         7f:12:f4:5b:7d:19:30:59:7a:b3:29:e1:ca:14:4e:be:e5:7f:
         3d:fc:16:9a:31:d2:6a:7c:b5:87:a8:f3:c1:5c:29:b6:3c:5a:
         9b:21:6f:b6:db:76:9f:40:41:41:b9:4d:ac:0a:78:53:fa:e7:
         b4:de:0a:dc:65:89:c9:b9:cf:33:7a:38:f2:2c:fe:4f:8c:0d:
         3c:6a:7e:59:1b:7b:3e:7e:e0:61:be:0c:dd:96:e3:ee:6e:eb:
         8d:2c:fe:40:85:e4:e8:8c:10:d5:d5:2c:9b:21:14:59:01:07:
         b1:87:07:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:43 2024 by rpki-client on console-ams.rpki-client.org