Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/1/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa
File:                     34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa (raw, json)
Hash identifier:          KFMv3uVGSJbDjkjwuU4cPQkOw6ZJ0jgaNAeObfIWJoE=
Subject key identifier:   8E:52:F9:4D:9D:85:34:13:53:B2:AA:13:4F:5D:35:4A:CE:C3:27:20
Certificate issuer:       /CN=6170A5C4C56DE1003F50443C398C61236230C102
Certificate serial:       6B919A224A9B264A5AB624515DFAD21BA0790670
Authority key identifier: 61:70:A5:C4:C5:6D:E1:00:3F:50:44:3C:39:8C:61:23:62:30:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6170A5C4C56DE1003F50443C398C61236230C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/1/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa
Signing time:             Wed 03 Apr 2024 19:16:02 +0000
ROA not before:           Wed 03 Apr 2024 19:11:02 +0000
ROA not after:            Wed 02 Apr 2025 19:16:02 +0000
asID:                     267142
IP address blocks:        45.229.240.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:91:9a:22:4a:9b:26:4a:5a:b6:24:51:5d:fa:d2:1b:a0:79:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6170A5C4C56DE1003F50443C398C61236230C102
        Validity
            Not Before: Apr  3 19:11:02 2024 GMT
            Not After : Apr  2 19:16:02 2025 GMT
        Subject: CN=8E52F94D9D85341353B2AA134F5D354ACEC32720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:36:01:4d:a0:bb:5a:22:c5:19:d1:a9:43:30:
                    fb:65:16:2e:3c:05:13:7f:cc:ea:97:6f:2f:bd:fb:
                    ee:c0:bd:83:17:74:5c:e8:4a:3e:f6:8a:2d:9b:f5:
                    e8:69:72:b8:13:f4:c6:be:4d:53:21:90:30:bc:80:
                    cb:a0:ea:4f:08:e3:5f:b9:09:4e:a5:cd:1c:03:40:
                    ab:72:71:b4:a8:25:ec:4c:98:98:94:e1:6c:ea:d8:
                    f2:f1:1d:6d:55:92:74:dc:27:e0:a7:93:cf:4e:44:
                    df:2a:78:d6:7c:21:3c:63:02:d6:76:a6:03:06:7b:
                    0d:4f:c3:38:35:e5:f3:91:58:a7:aa:28:d2:2d:e4:
                    0b:42:4a:85:9f:25:08:48:0e:6f:70:56:65:e4:a5:
                    cd:e6:92:19:b6:90:a5:27:f8:0b:27:56:fa:ed:8a:
                    5d:c6:1a:4a:19:ea:16:78:08:4d:f7:96:44:48:35:
                    ab:53:a2:89:57:70:35:f2:d8:1a:2f:08:ac:55:31:
                    e0:41:03:c8:cd:ec:ca:93:17:74:a0:0f:1d:d7:ba:
                    6c:f4:af:93:05:32:47:91:97:c5:2f:15:0d:9d:1b:
                    b2:ea:31:ad:3a:a1:ba:6a:ba:e4:87:d5:8e:de:93:
                    d2:02:19:8f:d0:0a:8b:1e:b4:02:ab:b0:64:83:c9:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:52:F9:4D:9D:85:34:13:53:B2:AA:13:4F:5D:35:4A:CE:C3:27:20
            X509v3 Authority Key Identifier:
                keyid:61:70:A5:C4:C5:6D:E1:00:3F:50:44:3C:39:8C:61:23:62:30:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/1/6170A5C4C56DE1003F50443C398C61236230C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6170A5C4C56DE1003F50443C398C61236230C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/1/34352e3232392e3234302e302f32322d3234203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:82:07:20:3b:d4:61:47:45:af:0a:0c:06:83:80:a4:57:
         0b:bc:cd:22:d8:c5:c7:50:14:53:e4:7c:2c:b5:7f:6c:f0:2e:
         49:fa:73:54:4b:8c:18:f4:b6:d4:f4:76:cf:b0:d8:51:c1:15:
         52:a2:d4:4d:f5:a6:03:d0:1f:57:ca:93:8e:d2:f6:3c:b2:39:
         31:84:65:06:9a:fb:fc:f6:c3:57:8a:b4:6d:97:70:37:fd:e3:
         06:4a:93:28:d9:00:e4:b7:3e:2b:0e:bb:f3:43:f6:ce:48:d0:
         fe:0f:b8:d7:66:3f:56:6f:f2:a4:0a:53:96:bc:e9:d2:02:f1:
         1d:cc:c6:51:cc:80:31:44:4c:70:0f:d8:45:ab:d0:d0:75:bf:
         d6:27:7c:aa:b0:04:51:6b:b4:c3:0f:57:bb:da:4d:ff:fc:f8:
         d3:ae:9f:f6:c3:aa:96:6a:a3:6d:86:9e:d2:15:b3:a7:c0:22:
         2c:c6:3f:aa:e2:45:f3:88:8f:2b:82:99:b6:68:e6:04:b9:f5:
         f5:5f:5b:c7:af:70:64:ce:ee:20:d6:c8:6d:21:53:0a:a0:bc:
         07:81:ed:43:dc:b2:4e:b3:3f:24:26:6e:b8:c1:b9:80:72:9f:
         75:21:13:72:4b:77:56:f7:57:99:26:2c:45:9d:6c:95:4b:17:
         80:f1:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 03:55:06 2024 by rpki-client on console-ams.rpki-client.org