Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa (raw, json)
Hash identifier:          sZ7VdkXj088TC9ubxOeU1Vbrwt/3Gexe2cz0/Qt3xHo=
Subject key identifier:   35:F7:53:BB:34:91:9C:41:C8:68:5E:E7:3E:2F:FE:BD:14:29:66:68
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       0E91FFF9E178C02C83594AF5E6A297B41F5D2B3E
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:01:57 +0000
ROA not before:           Thu 04 Apr 2024 15:56:57 +0000
ROA not after:            Thu 03 Apr 2025 16:01:57 +0000
asID:                     268726
IP address blocks:        45.171.184.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:91:ff:f9:e1:78:c0:2c:83:59:4a:f5:e6:a2:97:b4:1f:5d:2b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:56:57 2024 GMT
            Not After : Apr  3 16:01:57 2025 GMT
        Subject: CN=35F753BB34919C41C8685EE73E2FFEBD14296668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9e:67:e1:4e:1b:ce:20:c0:95:3b:63:e0:f3:
                    ce:d0:27:54:3d:11:d7:22:73:07:2e:50:da:e5:e4:
                    fd:4b:9f:fc:1d:c4:75:59:6d:0a:09:4b:d4:ef:07:
                    15:ca:53:d0:37:61:b9:f8:8f:6b:05:1d:3a:40:9d:
                    32:59:37:e9:6f:58:42:8f:78:37:08:3e:a9:34:ef:
                    30:33:43:cf:dd:ac:9e:37:bc:47:a7:19:7d:a3:cd:
                    0d:22:7f:29:44:d6:54:c2:69:ac:9c:7e:25:6b:8b:
                    cc:de:a7:2a:3e:be:f1:ae:77:04:2d:2e:5f:29:5c:
                    2b:48:0e:3a:b7:ce:4b:b6:16:20:45:36:d7:e9:29:
                    c6:24:3c:46:d7:98:6e:ec:08:e3:9d:ec:e7:81:39:
                    b3:74:fc:a9:d9:db:06:39:2c:7e:41:3b:36:07:d8:
                    4b:2f:32:08:16:33:35:2f:ba:a4:5b:87:a4:2b:76:
                    d4:cf:65:a0:e0:fc:ca:19:3d:29:f9:dd:08:7e:8f:
                    ab:14:9a:b9:97:79:d0:2a:3f:ff:82:3e:a9:73:23:
                    c6:90:b1:c7:01:b9:db:ec:34:78:1b:f5:b1:52:1a:
                    db:a4:c8:a8:a2:f6:d3:fe:4d:94:80:67:56:b5:4e:
                    a8:d9:d9:28:fa:42:16:35:3d:fb:f9:04:b5:3c:f9:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:53:BB:34:91:9C:41:C8:68:5E:E7:3E:2F:FE:BD:14:29:66:68
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32332d3233203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:ba:9e:f4:5c:9b:90:ba:30:61:40:6a:1a:bb:a5:23:8d:
         6d:90:70:80:ad:dc:4e:51:84:78:08:0f:a5:8d:37:a7:c2:3f:
         00:c2:46:95:30:32:ed:ab:43:47:b1:7a:a8:04:09:7f:1e:95:
         05:21:26:e2:e9:5c:2f:72:3b:e0:14:1b:8f:8b:8d:22:bb:ed:
         a4:0e:35:6f:42:d1:9f:27:c9:ac:f2:1f:c6:c2:ed:08:d5:f2:
         5c:86:d9:6d:e1:01:15:54:75:1f:26:f1:40:ca:c4:8e:21:bc:
         69:ba:02:2c:f0:c0:39:a6:cd:21:2d:86:dc:9f:f8:b6:53:9e:
         b0:ed:0d:8e:78:78:9d:a4:75:ea:ac:ed:0d:69:ec:bc:12:c9:
         cb:b4:89:ea:5c:00:e8:66:14:f1:d3:d4:35:30:1d:14:b3:ba:
         70:66:f4:6d:d6:44:91:92:5e:c1:28:b1:5b:8d:bc:6d:91:06:
         82:14:d5:f6:ae:69:35:a0:ae:28:d6:ec:32:37:14:26:e0:78:
         a5:94:f6:3e:c2:8a:bf:1c:fc:7c:dc:e0:84:76:66:36:49:bc:
         0b:8f:16:64:ca:44:5f:cd:38:d5:4e:d1:fd:f8:a6:17:66:b4:
         6e:ee:79:49:d3:30:b2:30:a4:32:e5:ca:84:0c:ec:a2:2b:79:
         fb:af:88:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:25:23 2024 by rpki-client on console-fra.rpki-client.org