Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/34352e3139302e3136302e302f32322d3332203d3e20323639363537.roa
File:                     34352e3139302e3136302e302f32322d3332203d3e20323639363537.roa (raw, json)
Hash identifier:          yCzG567OhH6tpHFDc2puUo3NvWGJ6WeUAkuHXxN8aZ8=
Subject key identifier:   36:E6:EF:FA:88:EB:C6:31:21:47:A4:38:73:C5:6E:9E:C0:EC:75:DC
Certificate issuer:       /CN=09CC851BEB4072E175A58F34F41B9BFC39C31839
Certificate serial:       17C50EC17DF07BD0075BD4705D0E358DD269AF07
Authority key identifier: 09:CC:85:1B:EB:40:72:E1:75:A5:8F:34:F4:1B:9B:FC:39:C3:18:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/34352e3139302e3136302e302f32322d3332203d3e20323639363537.roa
Signing time:             Thu 04 Apr 2024 03:40:57 +0000
ROA not before:           Thu 04 Apr 2024 03:35:57 +0000
ROA not after:            Thu 03 Apr 2025 03:40:57 +0000
asID:                     269657
IP address blocks:        45.190.160.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c5:0e:c1:7d:f0:7b:d0:07:5b:d4:70:5d:0e:35:8d:d2:69:af:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09CC851BEB4072E175A58F34F41B9BFC39C31839
        Validity
            Not Before: Apr  4 03:35:57 2024 GMT
            Not After : Apr  3 03:40:57 2025 GMT
        Subject: CN=36E6EFFA88EBC6312147A43873C56E9EC0EC75DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:12:68:a5:0a:49:46:b6:cc:e8:f8:e8:30:
                    4f:92:23:4a:c8:94:76:f8:27:2b:c8:18:8f:d2:13:
                    03:76:09:f5:83:a6:8b:70:3c:5d:ff:71:17:19:ae:
                    b4:f2:3d:5c:1f:60:68:3a:d9:3f:af:c0:72:62:b1:
                    0a:a2:5a:8b:86:8e:46:6b:fd:bf:15:44:01:f1:65:
                    5b:57:78:39:65:3f:0f:c1:8c:e4:4f:8f:1c:cf:93:
                    45:56:a9:5c:22:f6:30:f1:9e:0a:a8:51:77:e8:1d:
                    cc:b2:dd:e7:e0:af:5d:4f:08:6d:22:af:4f:a3:ed:
                    01:e3:b1:20:f2:61:51:c0:75:b2:b3:d5:a5:0a:aa:
                    2a:8b:42:d8:fa:a0:d7:2e:91:b8:34:5b:9f:4a:40:
                    06:8a:b3:b2:42:47:b2:3c:2a:ae:ce:39:b5:86:f7:
                    b3:6d:2b:15:23:13:3d:31:42:24:e8:d5:67:9f:7d:
                    c7:4b:f0:d9:8c:74:2a:b9:67:ad:ff:5b:eb:ca:76:
                    e7:ef:f5:1d:74:91:6a:de:9e:52:15:83:b1:5c:1f:
                    ff:6f:cd:12:21:17:ac:7a:ed:39:24:b4:fc:0d:86:
                    13:39:a9:a5:42:fa:e9:d8:46:70:85:c4:ec:b1:3c:
                    9c:06:4d:bd:b4:3c:c7:7b:50:bf:a5:a9:e2:22:b4:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:EF:FA:88:EB:C6:31:21:47:A4:38:73:C5:6E:9E:C0:EC:75:DC
            X509v3 Authority Key Identifier:
                keyid:09:CC:85:1B:EB:40:72:E1:75:A5:8F:34:F4:1B:9B:FC:39:C3:18:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09CC851BEB4072E175A58F34F41B9BFC39C31839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E29vThBtBVyfDZCDxeEwmD6mStM5mbKDFPrqNqD9wyTA/1/34352e3139302e3136302e302f32322d3332203d3e20323639363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:ba:9a:02:b2:60:16:4b:74:7f:3b:11:17:c8:7e:42:ab:
         c9:e2:68:bc:12:e1:af:a6:78:0c:fb:d5:bb:d4:b2:62:59:f9:
         c4:76:8e:f5:04:9e:69:e7:d8:aa:1a:80:b9:8b:69:a8:d0:85:
         bf:35:09:e3:fb:3d:36:79:69:02:d0:b8:8e:f1:f2:b4:8d:6e:
         58:d3:9d:87:97:53:71:c4:d0:21:ff:1d:b8:89:b3:92:93:9b:
         cb:db:08:42:d1:48:e6:27:73:8b:52:44:41:6c:ac:29:f0:cc:
         a6:07:72:a6:8d:02:f6:a5:7b:c8:d6:96:9e:c8:0f:8f:02:3c:
         33:e5:f0:dc:c6:cf:2f:47:64:f0:51:57:2d:8b:ec:a1:a1:be:
         05:e2:12:ac:47:ab:92:5b:02:a7:71:c7:8f:44:32:23:f3:9f:
         8f:ac:f9:5c:7c:bd:00:12:1c:39:77:f1:50:45:fd:cd:2c:d9:
         a3:8a:b8:d2:eb:11:4f:c7:7a:b8:ce:99:31:06:3b:81:d5:77:
         43:56:f8:4e:59:4b:36:d9:f6:af:d8:0e:70:21:b7:62:58:c7:
         53:80:64:e9:bf:b7:b8:46:3a:e9:fb:89:97:dd:da:42:52:72:
         ba:a1:02:19:97:e1:76:91:8d:f5:d5:43:40:d2:5d:c5:f4:19:
         cd:8a:f2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 15:00:46 2024 by rpki-client on console-fra.rpki-client.org