Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/34352e372e3130382e302f32322d3332203d3e20323636353731.roa
File:                     34352e372e3130382e302f32322d3332203d3e20323636353731.roa (raw, json)
Hash identifier:          U3SYMPlS4T1mO1CcMOfXDlYV1k7H0LyQWNww2l+RB58=
Subject key identifier:   0A:F0:6C:A1:69:2F:2E:B1:ED:57:CC:64:F7:34:62:16:4E:C9:01:21
Certificate issuer:       /CN=CE2D523EDB43BBDF3EB976A7B432A3B21278E411
Certificate serial:       37E0FF1AAC5AD79162188FC9B74486CD431E9EB4
Authority key identifier: CE:2D:52:3E:DB:43:BB:DF:3E:B9:76:A7:B4:32:A3:B2:12:78:E4:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D523EDB43BBDF3EB976A7B432A3B21278E411.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/34352e372e3130382e302f32322d3332203d3e20323636353731.roa
Signing time:             Wed 08 May 2024 15:46:40 +0000
ROA not before:           Wed 08 May 2024 15:41:40 +0000
ROA not after:            Wed 07 May 2025 15:46:40 +0000
asID:                     266571
IP address blocks:        45.7.108.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e0:ff:1a:ac:5a:d7:91:62:18:8f:c9:b7:44:86:cd:43:1e:9e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE2D523EDB43BBDF3EB976A7B432A3B21278E411
        Validity
            Not Before: May  8 15:41:40 2024 GMT
            Not After : May  7 15:46:40 2025 GMT
        Subject: CN=0AF06CA1692F2EB1ED57CC64F73462164EC90121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:13:84:03:5b:cf:33:32:4e:d6:ee:51:0d:
                    d1:55:93:a5:02:ed:a8:c0:08:ae:61:8f:0b:61:e8:
                    21:08:64:dd:98:c2:62:0e:be:7c:2a:6d:3b:b5:22:
                    a6:8e:bb:f0:1c:fb:61:50:9b:a3:40:ae:f0:4e:f0:
                    0d:b6:8c:6d:0f:b3:db:11:3b:6d:36:a9:c5:85:07:
                    06:18:cc:57:53:fa:03:d9:59:7b:f6:82:83:e2:0c:
                    24:33:bc:eb:11:11:be:70:71:f9:0c:23:d0:6b:4b:
                    f5:39:67:a0:33:31:51:0f:25:6f:60:c4:a3:be:a1:
                    43:62:f2:cb:1b:1c:52:b2:c6:d9:15:72:df:7c:f4:
                    54:d3:a5:3d:09:b1:35:0a:60:44:ba:09:79:fc:b8:
                    ba:54:74:72:c1:af:f1:0f:f4:05:80:72:e4:69:f4:
                    0e:70:94:7d:5a:d1:fb:03:31:fe:92:86:54:83:32:
                    b5:0a:05:4e:82:2e:4c:d0:3e:38:d4:c8:15:a7:82:
                    a7:b1:48:d2:ed:b4:f4:21:9c:6d:be:f9:d5:58:8a:
                    c0:8a:58:13:9a:90:cd:e6:01:58:01:b6:0a:51:f1:
                    84:20:dd:3d:38:35:ad:78:c2:e5:b7:74:00:78:1b:
                    94:1b:87:45:36:27:8c:50:e7:00:0b:08:40:1e:f1:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:6C:A1:69:2F:2E:B1:ED:57:CC:64:F7:34:62:16:4E:C9:01:21
            X509v3 Authority Key Identifier:
                keyid:CE:2D:52:3E:DB:43:BB:DF:3E:B9:76:A7:B4:32:A3:B2:12:78:E4:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/CE2D523EDB43BBDF3EB976A7B432A3B21278E411.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE2D523EDB43BBDF3EB976A7B432A3B21278E411.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EwM9Runqn2PePPN1WYxCcrNpv6N9VLLbA1av5TdMjS8o/0/34352e372e3130382e302f32322d3332203d3e20323636353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:50:52:cd:32:70:e9:f2:f1:2a:82:c8:63:f4:c3:44:84:43:
         32:a5:bd:6a:6f:a1:59:e4:12:4b:a7:1c:5b:a3:bd:32:69:7a:
         57:34:46:ad:54:da:90:a1:fd:55:87:e1:19:60:86:a6:cc:ce:
         dc:7e:d9:d6:07:e6:26:71:a2:2a:3c:06:57:5b:38:82:63:1e:
         7d:e0:08:13:7a:d0:70:0c:9d:a1:b0:37:df:9f:3c:3d:38:7e:
         51:3e:16:81:90:40:1a:ce:b5:b4:a5:5c:5f:6f:0f:db:c2:33:
         93:d7:c4:49:11:0e:dc:82:a7:5d:e0:15:ff:2b:e4:30:81:bd:
         f0:fc:d7:8c:0b:47:3b:7c:d1:05:26:84:d6:db:e3:df:25:b5:
         37:bf:09:f2:7f:1d:2d:80:07:0b:d0:5b:51:e1:66:8d:46:5a:
         f9:2f:e7:92:32:cf:48:92:19:78:2e:08:cf:0c:92:4c:3e:6e:
         4e:36:3d:8b:98:b3:5c:f4:a7:f5:23:aa:3e:c2:cd:5a:55:10:
         60:32:bf:30:aa:55:a1:4f:84:c8:8f:7d:d7:eb:33:a2:5e:e9:
         2d:2f:80:4b:af:20:2c:08:59:87:65:7b:d3:29:7c:1b:b6:e0:
         75:53:46:ca:87:5b:4f:11:8e:01:6d:5e:13:86:46:d9:dd:fd:
         de:a6:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:03 2024 by rpki-client on console-ams.rpki-client.org