Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
File:                     34352e3233382e34382e302f32322d3234203d3e20323733363833.roa (raw, json)
Hash identifier:          arj02S0iUPYlou5A5N5WG/rrOMttmhFassqoKSmZ8OI=
Subject key identifier:   4F:2A:63:D0:86:7D:87:68:2D:91:29:40:D1:21:03:60:6F:2D:7F:B1
Certificate issuer:       /CN=A700B738441CDD3978A0EECBB6A84022929D91AC
Certificate serial:       668DECD655946186791C2054940AEC5C259F54
Authority key identifier: A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa
Signing time:             Wed 10 Apr 2024 13:25:17 +0000
ROA not before:           Wed 10 Apr 2024 13:20:17 +0000
ROA not after:            Wed 09 Apr 2025 13:25:17 +0000
asID:                     273683
IP address blocks:        45.238.48.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8d:ec:d6:55:94:61:86:79:1c:20:54:94:0a:ec:5c:25:9f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A700B738441CDD3978A0EECBB6A84022929D91AC
        Validity
            Not Before: Apr 10 13:20:17 2024 GMT
            Not After : Apr  9 13:25:17 2025 GMT
        Subject: CN=4F2A63D0867D87682D912940D12103606F2D7FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:36:a4:05:7c:54:8c:a5:7b:64:bf:67:47:03:
                    4e:3d:f4:1d:f3:ae:0a:8a:a3:eb:5c:cd:03:96:59:
                    10:76:08:11:91:f1:df:e5:20:84:85:8f:8f:3b:55:
                    d3:b2:96:b6:73:bf:30:b7:a6:63:5b:cc:81:36:ed:
                    19:57:b7:18:c1:00:9c:ba:8a:3a:66:7f:93:e7:50:
                    c8:61:d0:f9:46:59:ae:75:1d:18:c2:23:2b:ef:c4:
                    73:e6:9d:3d:84:5a:1c:e7:ee:e0:2c:c0:9e:a0:36:
                    63:60:2f:97:4f:da:f6:a3:6c:07:25:14:cb:be:26:
                    e4:37:ed:d2:d3:61:54:d8:c1:4b:fa:d6:12:c7:4d:
                    13:7f:ee:e2:7d:89:c7:f0:b4:a6:6d:10:c7:06:51:
                    27:c7:b3:dd:c2:18:44:51:be:71:eb:0a:73:cb:f1:
                    05:71:77:73:55:99:38:e6:34:00:0c:f9:60:26:f5:
                    e6:ed:9b:44:f4:cc:20:68:51:73:f3:bc:28:ce:2f:
                    97:d9:a5:f3:85:d0:11:1a:10:8d:a7:35:0e:1b:ff:
                    b3:8b:38:e1:65:29:df:2f:2e:e3:2a:ab:dd:9b:94:
                    29:8c:bb:9a:2f:3b:ab:5a:47:c2:4e:0a:69:a5:bc:
                    4a:1e:09:04:03:c1:5d:5d:c2:e2:61:2f:93:0a:3f:
                    c0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2A:63:D0:86:7D:87:68:2D:91:29:40:D1:21:03:60:6F:2D:7F:B1
            X509v3 Authority Key Identifier:
                keyid:A7:00:B7:38:44:1C:DD:39:78:A0:EE:CB:B6:A8:40:22:92:9D:91:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/A700B738441CDD3978A0EECBB6A84022929D91AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A700B738441CDD3978A0EECBB6A84022929D91AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/1/34352e3233382e34382e302f32322d3234203d3e20323733363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:2f:1d:1d:cc:32:67:99:35:b8:85:7b:6a:59:71:21:19:
         d5:6b:08:f6:14:46:46:c0:cb:1e:c7:12:76:ec:5d:ed:7c:79:
         02:7e:0d:3e:3f:40:87:3d:55:f6:39:99:98:db:9f:cb:8c:7d:
         b0:e9:ca:7a:06:c6:14:ba:4d:dd:81:b0:af:51:64:a4:72:b6:
         0f:6d:b7:50:86:0c:9a:fa:a8:07:44:98:a3:9d:d6:a5:22:b1:
         42:4b:70:52:db:ce:60:14:ca:24:76:85:c3:79:3b:d5:fc:3f:
         9b:0f:64:90:f4:95:4d:4c:62:6a:04:90:b0:f6:76:7f:f8:82:
         56:7b:ad:b8:e1:7f:b8:a8:20:1b:ff:32:80:c2:74:52:e8:6c:
         25:53:5a:80:5b:41:65:c5:b9:17:4d:81:49:4b:8d:99:df:af:
         13:29:2e:18:5e:fe:af:ae:91:4c:03:09:e1:ba:30:95:15:b4:
         58:09:e7:d2:4c:8b:27:9e:d2:72:74:b7:9b:85:52:17:af:ea:
         6b:ad:e9:14:0d:f6:bf:d3:61:ec:8b:e4:29:89:97:99:80:dd:
         5a:4f:f6:50:36:b9:68:26:93:18:18:89:bc:6b:32:fb:11:1d:
         90:de:b7:46:9e:83:46:11:21:08:c2:5d:f4:04:93:d7:51:6f:
         af:11:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 15:28:21 2024 by rpki-client on console-fra.rpki-client.org