Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137392e302f32342d3234203d3e20323637333639.roa
File:                     34352e3233342e3137392e302f32342d3234203d3e20323637333639.roa (raw, json)
Hash identifier:          smgB08vgOdCrGapem/8olEQWHjcoar2294Tt7m4lPbQ=
Subject key identifier:   E0:21:99:36:7A:C4:E0:85:9C:CC:A0:73:55:0E:11:7B:F0:77:1D:40
Certificate issuer:       /CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
Certificate serial:       0902A3EB89B3C0914A038039D25FCFDF63986E36
Authority key identifier: CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137392e302f32342d3234203d3e20323637333639.roa
Signing time:             Thu 04 Apr 2024 15:26:07 +0000
ROA not before:           Thu 04 Apr 2024 15:21:07 +0000
ROA not after:            Thu 03 Apr 2025 15:26:07 +0000
asID:                     267369
IP address blocks:        45.234.179.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:02:a3:eb:89:b3:c0:91:4a:03:80:39:d2:5f:cf:df:63:98:6e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81
        Validity
            Not Before: Apr  4 15:21:07 2024 GMT
            Not After : Apr  3 15:26:07 2025 GMT
        Subject: CN=E02199367AC4E0859CCCA073550E117BF0771D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:4f:d2:aa:1c:41:b8:1e:db:55:c8:73:a6:
                    e4:13:6a:ba:1f:d2:cd:d3:86:0c:a1:82:50:2b:b2:
                    3d:34:21:85:e8:cd:7a:40:1b:fb:de:8d:15:48:63:
                    ac:5c:8c:1e:b1:5b:c4:3a:6c:46:ee:e5:b2:6b:02:
                    7b:4b:ad:e6:d0:d2:51:de:60:e0:90:a4:39:bf:7c:
                    ee:88:8a:20:17:63:24:d9:43:c6:23:8e:ee:8b:15:
                    70:41:18:c4:45:6e:47:fa:cc:fc:06:c5:24:18:fd:
                    49:71:7a:76:3e:e8:19:a8:59:b6:d7:a5:79:f5:0e:
                    4e:51:82:01:a6:51:af:a1:a8:d4:8a:b8:94:67:d0:
                    49:3c:bf:ba:f2:31:c8:b2:e7:07:14:cf:3e:48:3a:
                    f8:42:49:11:6c:6c:cb:8e:1f:89:02:ae:f3:83:6c:
                    1d:d6:af:70:a2:5a:47:28:b0:b1:c5:6c:b9:03:0b:
                    af:c2:19:68:54:76:d8:cf:53:cb:e6:93:e7:85:0b:
                    04:19:6a:04:c9:c1:5f:d1:4c:62:8d:d0:19:f2:03:
                    64:2c:0b:bc:9e:54:e0:95:a7:63:e9:6d:fc:94:27:
                    f5:04:0c:e1:80:b7:86:02:65:86:73:38:ab:e0:c4:
                    d0:dc:94:c2:af:63:a3:85:d0:c4:27:ed:68:e0:83:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:21:99:36:7A:C4:E0:85:9C:CC:A0:73:55:0E:11:7B:F0:77:1D:40
            X509v3 Authority Key Identifier:
                keyid:CC:F5:F1:E6:1C:17:E7:64:7E:2B:1A:48:89:AE:B9:35:AB:80:AF:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCF5F1E61C17E7647E2B1A4889AEB935AB80AF81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/1/34352e3233342e3137392e302f32342d3234203d3e20323637333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:30:66:ee:46:bc:48:51:2a:f8:90:0c:97:eb:e2:f9:f8:b1:
         ff:23:2b:3a:da:95:43:3b:74:57:83:40:ae:99:f6:4a:2b:29:
         28:e9:7d:71:bc:90:fe:b1:d7:a4:af:58:5e:3f:5e:f9:1b:86:
         db:ca:94:89:71:07:ca:d1:93:d8:f3:37:17:8c:86:67:01:43:
         b0:76:9e:e2:7b:9f:87:ec:70:b4:38:2f:2d:cb:72:fb:f1:d8:
         8b:c1:06:84:eb:1f:44:28:5f:3c:12:d8:f9:b7:70:23:25:47:
         3f:8b:1a:b8:78:90:b5:26:de:65:b9:b7:68:6d:ec:04:bb:fc:
         a6:fc:3d:54:e7:c0:33:14:0c:bb:6f:8e:36:92:d2:2d:1e:67:
         cb:5f:78:f6:d5:87:f4:19:a7:76:78:27:65:0c:69:29:e9:fc:
         72:a4:4b:0e:63:5f:ca:42:be:d7:f7:f7:68:2b:86:22:9a:71:
         9e:41:4f:8b:b7:ae:11:1c:6c:b5:4f:cc:29:48:d3:a5:4c:d5:
         d4:c6:82:66:8c:e3:66:bb:3b:39:ea:34:2d:e8:c7:1b:22:c5:
         6f:c7:3e:8f:76:ad:50:fd:c9:32:a8:7d:92:7b:6b:de:c8:7d:
         13:f6:2d:f9:34:20:f9:75:a2:2e:d2:96:49:49:1f:4a:ef:51:
         51:dc:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 16:55:06 2024 by rpki-client on console-fra.rpki-client.org