Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
File:                     34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa (raw, json)
Hash identifier:          SkSKE4GzWntwOtACWw1WGz3N9xqZTrZk4JTy0W+Zqek=
Subject key identifier:   F4:82:63:20:74:1F:72:05:CA:8E:D5:C0:43:80:65:E0:7F:69:27:B1
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       61C9EFD389CAB2E51C0BA0338A8535FD0FAC1CF2
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:02:00 +0000
ROA not before:           Thu 04 Apr 2024 15:57:00 +0000
ROA not after:            Thu 03 Apr 2025 16:02:00 +0000
asID:                     268726
IP address blocks:        45.171.184.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c9:ef:d3:89:ca:b2:e5:1c:0b:a0:33:8a:85:35:fd:0f:ac:1c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:57:00 2024 GMT
            Not After : Apr  3 16:02:00 2025 GMT
        Subject: CN=F4826320741F7205CA8ED5C0438065E07F6927B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:43:61:85:fe:93:b9:db:cc:91:9b:6d:07:
                    68:5a:0c:ac:d1:8b:dc:aa:2a:e0:49:a0:df:47:40:
                    4d:f5:d0:c3:a0:c7:64:0e:d1:2d:06:84:8e:84:35:
                    4b:7f:cf:56:35:5c:ab:f9:a2:ef:fb:5d:e0:5e:37:
                    d7:30:ed:ca:0d:ae:0f:a8:fb:45:2d:ba:5e:30:21:
                    c4:ff:79:db:59:42:d5:5f:67:0a:ec:83:8c:ec:32:
                    89:c4:b4:3d:3e:ff:0d:da:d2:bd:45:ea:46:e8:45:
                    8b:ed:ae:f8:76:50:45:25:05:c3:60:d2:d8:83:7b:
                    dc:30:50:ca:1b:02:95:24:3c:9b:d2:c2:e4:25:e6:
                    aa:2d:81:89:e9:06:88:35:98:09:57:3c:10:5f:55:
                    77:cf:0f:7c:49:6f:25:34:17:f1:66:88:32:ff:7b:
                    d9:82:bf:6b:1a:d4:d4:d2:5d:8b:04:ff:53:b3:1f:
                    32:01:1c:9a:06:81:c6:21:63:61:c2:29:5f:1a:97:
                    ba:1b:5b:e4:7a:cd:97:97:06:2a:24:99:b0:82:aa:
                    35:09:b9:55:81:ce:b1:42:c7:d1:a6:bb:d6:44:e6:
                    f7:44:a6:2f:7c:a4:7f:96:aa:61:f1:f7:aa:92:8a:
                    a7:6c:06:c8:ed:8d:d5:33:8b:b5:f8:eb:3f:af:dd:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:82:63:20:74:1F:72:05:CA:8E:D5:C0:43:80:65:E0:7F:69:27:B1
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/34352e3137312e3138342e302f32342d3234203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:bb:17:fd:59:87:18:83:1f:64:95:6b:3f:16:af:5e:73:
         c1:6c:82:d6:e6:c0:a9:26:5d:0f:14:21:22:18:a4:e4:e8:67:
         69:50:26:b1:e9:6c:46:fb:e3:d2:0d:b9:9f:98:46:34:10:36:
         d2:aa:1d:31:8f:be:21:20:b3:17:a0:31:fc:76:18:8d:d2:7d:
         01:8e:e6:4f:4b:69:5c:92:30:b4:e2:22:52:9a:29:ab:c6:5b:
         93:94:50:ae:01:5e:78:06:44:37:96:1a:ea:e1:4a:85:44:1f:
         96:d1:ee:2a:a2:fa:6f:42:84:ee:ec:32:30:24:70:d8:56:ee:
         96:26:ff:b5:e2:dc:36:fc:2d:f9:5f:c7:68:26:cb:8c:d0:64:
         54:da:5d:5a:ca:f9:a1:df:83:af:8c:35:c0:06:74:4a:6d:38:
         39:22:5e:ee:8f:ab:82:c9:d6:d8:d2:39:3e:c2:31:83:91:97:
         d3:5f:a3:05:d7:19:ec:00:bb:8c:71:17:c0:64:82:13:47:b4:
         44:b0:6c:70:29:72:0e:90:be:e5:b9:1a:95:79:e5:02:56:96:
         dc:12:cd:1d:1a:09:f2:73:44:12:b2:71:5e:61:b3:8e:26:85:
         d5:91:a0:af:b1:69:b8:96:cd:6c:67:7a:e1:12:cf:de:3f:1e:
         17:f4:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:25:23 2024 by rpki-client on console-fra.rpki-client.org