Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3332203d3e20323637353536.roa
File:                     34352e37302e302e302f32322d3332203d3e20323637353536.roa (raw, json)
Hash identifier:          eRxmEKioe6vQbJCx2RmBnjZW29iRhzK5/Pd4ZXy95j8=
Subject key identifier:   F3:3C:06:D3:F9:B0:A2:99:C7:D2:D4:03:B8:5A:39:D5:FE:25:CD:ED
Certificate issuer:       /CN=8FE80FE05562599EF604A23C6D77710BED889A51
Certificate serial:       17E2A4CBDA15FB0C77B05940A3DE32970B626009
Authority key identifier: 8F:E8:0F:E0:55:62:59:9E:F6:04:A2:3C:6D:77:71:0B:ED:88:9A:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FE80FE05562599EF604A23C6D77710BED889A51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3332203d3e20323637353536.roa
Signing time:             Sat 09 Nov 2024 23:00:50 +0000
ROA not before:           Sat 09 Nov 2024 22:55:50 +0000
ROA not after:            Sat 08 Nov 2025 23:00:50 +0000
asID:                     267556
IP address blocks:        45.70.0.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e2:a4:cb:da:15:fb:0c:77:b0:59:40:a3:de:32:97:0b:62:60:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FE80FE05562599EF604A23C6D77710BED889A51
        Validity
            Not Before: Nov  9 22:55:50 2024 GMT
            Not After : Nov  8 23:00:50 2025 GMT
        Subject: CN=F33C06D3F9B0A299C7D2D403B85A39D5FE25CDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:aa:04:8f:f7:fa:f9:64:b3:13:9e:cc:0b:
                    06:51:e6:46:c9:d7:04:47:31:3d:73:ca:2d:c8:ce:
                    ff:29:26:44:39:e8:e3:a6:27:db:8f:1d:ac:91:2d:
                    4d:5b:97:d3:e8:c2:97:4a:9f:35:2d:a8:ef:f4:c4:
                    98:1e:f7:bf:38:21:d2:65:fc:b4:2f:f9:a6:29:52:
                    1a:89:4d:a3:2c:20:72:d7:d5:d1:5b:6a:f2:d6:f2:
                    c0:a2:91:3f:85:87:97:d6:61:28:a9:40:f1:4c:22:
                    1b:49:99:d0:d7:fa:1f:59:b2:8e:36:bd:b8:24:5e:
                    05:91:9b:dc:2e:12:c8:65:99:03:27:f0:c5:9f:16:
                    fc:a5:48:a8:52:45:d2:4a:f1:52:7f:38:57:3a:ff:
                    15:8e:8e:45:87:30:64:f7:e9:09:07:ca:6b:65:72:
                    15:21:51:9f:30:8f:63:3d:80:8a:f8:b9:44:9c:ba:
                    f7:9e:1c:df:97:67:c5:49:ff:af:aa:e8:81:9b:7f:
                    e1:ac:ee:2a:98:c8:33:8a:cb:70:79:a3:e4:3c:fe:
                    d2:6c:7a:d6:11:8b:6c:5e:ff:60:a1:fd:e9:8b:9d:
                    4e:73:e6:2b:e0:bb:08:39:ce:5f:39:87:aa:c7:65:
                    37:f3:83:d5:9a:f9:6d:99:7d:4a:e0:8e:7f:e7:43:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:06:D3:F9:B0:A2:99:C7:D2:D4:03:B8:5A:39:D5:FE:25:CD:ED
            X509v3 Authority Key Identifier:
                keyid:8F:E8:0F:E0:55:62:59:9E:F6:04:A2:3C:6D:77:71:0B:ED:88:9A:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/8FE80FE05562599EF604A23C6D77710BED889A51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FE80FE05562599EF604A23C6D77710BED889A51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/34352e37302e302e302f32322d3332203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:55:68:56:5d:9d:ef:58:8c:ef:fc:bb:e1:0e:12:51:2b:7f:
         9b:6f:27:c9:24:c9:23:26:23:8e:5b:d5:7a:94:df:93:99:35:
         a5:d3:8d:97:c7:df:07:06:ec:5f:0d:8a:b5:21:29:23:35:c4:
         6e:85:04:f8:45:3b:e5:2e:18:69:d6:56:1f:05:3f:17:cc:40:
         d6:c1:bf:34:8d:79:fa:bb:52:c8:3f:96:60:9a:6f:c6:13:bc:
         e1:56:66:c3:1e:73:70:cf:13:14:43:61:57:23:64:71:1e:88:
         9b:7c:e3:b0:b2:01:43:59:db:16:e0:2a:8f:97:ce:f4:e8:24:
         e0:3e:da:77:83:7f:89:35:a6:a9:aa:6b:ff:a6:08:87:8b:60:
         3e:f6:94:48:cc:63:9c:86:3e:bd:8c:4e:b8:b5:04:37:66:75:
         0a:f1:36:46:6f:14:0f:5c:dd:32:a9:a2:52:e5:3f:11:1b:4e:
         65:1b:cf:ef:3e:7d:5a:55:3b:eb:25:f9:2a:3d:a1:cd:6e:1c:
         1b:49:0b:97:55:14:c0:a8:d8:e4:0c:9c:d7:05:8b:9c:ea:8f:
         71:6c:d0:66:e3:c5:d9:ff:86:cd:44:1a:92:65:3d:28:b0:76:
         f7:01:1a:20:70:2c:6f:64:30:ff:d3:06:e9:e0:b1:6f:c3:4a:
         ef:03:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 06:52:30 2024 by rpki-client on console-ams.rpki-client.org