Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
File:                     34352e3233352e35362e302f32342d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          2Zxa+Z4aoQTPlaIKJdQn09eBlzPciJE+3DEY7K9BLMI=
Subject key identifier:   E7:2A:A9:A2:69:52:0D:49:AE:E8:B4:A6:54:77:D2:29:D8:43:18:01
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       28754410D6155153C4C0AF9A629FB8F558FF96
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa
Signing time:             Wed 29 May 2024 19:43:09 +0000
ROA not before:           Wed 29 May 2024 19:38:09 +0000
ROA not after:            Wed 28 May 2025 19:43:09 +0000
asID:                     273683
IP address blocks:        45.235.56.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:44:10:d6:15:51:53:c4:c0:af:9a:62:9f:b8:f5:58:ff:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: May 29 19:38:09 2024 GMT
            Not After : May 28 19:43:09 2025 GMT
        Subject: CN=E72AA9A269520D49AEE8B4A65477D229D8431801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:30:5f:15:7e:7e:90:44:7d:70:ef:7e:d3:
                    66:41:ff:16:0a:b6:ae:bf:f3:6a:07:22:d3:64:7a:
                    94:ba:75:db:e2:b3:da:89:30:d8:d9:88:fa:61:86:
                    b7:aa:89:b0:4d:14:a9:87:8a:83:17:cb:f4:6f:09:
                    d0:e5:a0:c0:2a:51:d3:a6:6c:7b:88:09:ac:fc:e6:
                    74:f3:7e:eb:3a:5f:df:f5:01:56:26:a4:a0:93:9e:
                    1d:97:16:c5:56:25:4d:36:48:7a:9e:80:77:7c:c8:
                    7c:da:6c:1e:ab:fa:8d:95:52:3b:4f:0d:aa:e0:1d:
                    a5:f9:b4:f0:6b:ba:5e:b4:29:ce:ec:ca:43:d8:f8:
                    fb:44:5f:68:dc:0e:b2:66:35:6d:3c:6f:02:81:23:
                    c4:25:13:44:be:ef:e4:a8:ad:b5:04:56:80:93:ee:
                    f6:d8:2d:bc:95:cd:27:e5:5a:cd:1b:e5:04:3f:fb:
                    9d:f2:3f:97:be:b4:fc:62:f2:db:ed:1d:39:85:9a:
                    17:f5:04:25:42:2d:45:89:15:e1:11:f2:21:81:60:
                    2a:ad:ff:4a:0d:40:24:45:d7:4f:b8:4d:be:1d:ce:
                    be:63:9c:d4:e0:a1:8a:7b:8d:8a:e5:81:a3:db:d2:
                    17:6b:c4:91:87:72:9a:70:25:6c:41:a3:e1:bf:55:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2A:A9:A2:69:52:0D:49:AE:E8:B4:A6:54:77:D2:29:D8:43:18:01
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233352e35362e302f32342d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:c1:2e:36:d7:4f:02:8b:5b:e1:86:68:4b:80:bf:73:71:
         d6:34:ad:a9:18:5e:af:20:6e:4c:2a:29:b8:c6:94:b0:4c:68:
         1e:8a:70:2c:eb:cb:f8:5c:02:fd:8c:37:5b:8f:1b:73:ae:c7:
         28:72:55:d3:38:3b:63:5a:d0:27:68:ad:22:63:8d:b2:c8:f7:
         7d:76:6b:e6:36:f7:6a:bc:47:00:82:76:25:dc:5c:30:bc:1e:
         c2:11:fb:6e:6b:18:1c:b3:d7:12:4a:31:a2:6b:54:96:5b:1b:
         90:50:08:fb:6b:01:6a:f6:5b:e7:b0:57:6f:fc:1a:56:00:9c:
         3e:d6:34:cb:fd:a4:9c:64:a1:09:61:df:6a:81:bc:a4:59:9b:
         06:f2:c4:6e:1e:92:c7:41:2b:3a:3d:9e:6f:5d:a7:8c:5d:89:
         bc:e0:03:25:34:3d:da:18:25:2e:a9:67:59:d2:10:62:9d:7a:
         6f:5c:85:f7:6b:87:42:2e:c3:1e:9f:a0:87:f2:5c:6d:85:ab:
         a7:19:d3:f0:ce:96:a8:04:ac:98:c2:1f:d3:48:65:d7:b3:68:
         7f:ce:43:56:13:95:d9:e2:a9:a0:e1:a1:ce:11:5b:a8:db:8b:
         ae:d4:6b:d1:b0:5e:82:b6:ea:20:4f:09:e0:47:29:8a:f0:98:
         f5:5f:53:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org