Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa
File:                     34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa (raw, json)
Hash identifier:          zN8R91LkcgmFzo6I/iToJZSdWsTKdTN6kwr0BrZLzzI=
Subject key identifier:   C7:20:1B:B4:8B:3B:3C:08:46:A1:FD:08:74:0F:B1:CB:78:6D:EE:89
Certificate issuer:       /CN=4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C
Certificate serial:       2CA55C57EACD8336C3B03B53AA8103CD38538067
Authority key identifier: 4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa
Signing time:             Thu 04 Apr 2024 15:46:30 +0000
ROA not before:           Thu 04 Apr 2024 15:41:30 +0000
ROA not after:            Thu 03 Apr 2025 15:46:30 +0000
asID:                     268085
IP address blocks:        45.168.248.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a5:5c:57:ea:cd:83:36:c3:b0:3b:53:aa:81:03:cd:38:53:80:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C
        Validity
            Not Before: Apr  4 15:41:30 2024 GMT
            Not After : Apr  3 15:46:30 2025 GMT
        Subject: CN=C7201BB48B3B3C0846A1FD08740FB1CB786DEE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:f5:aa:b1:f5:23:92:80:6e:97:d2:ae:47:
                    d3:e7:67:3a:b1:f1:46:a9:8a:d3:7a:91:12:f3:21:
                    e2:92:da:cb:35:dc:42:d0:d2:31:84:01:0e:32:0e:
                    f8:f3:6c:6b:9f:b5:26:1d:a9:56:a2:63:b3:72:1c:
                    74:19:16:7f:cc:7a:ae:16:08:36:ff:bf:2a:a2:2a:
                    c5:58:4b:81:6e:3d:5f:5c:18:6d:2d:1b:50:14:6e:
                    9c:7f:dc:cc:cd:03:bb:34:25:4e:24:5e:cb:ca:3a:
                    15:1a:62:f7:d9:be:6c:ad:47:a9:2c:81:eb:6e:7e:
                    88:a4:a7:e2:1a:14:fb:18:6c:7a:c0:8c:d1:c4:b2:
                    43:27:be:5c:bc:55:c0:3a:8f:f5:b2:91:ac:4f:10:
                    a9:34:da:af:7d:cd:92:00:8c:fe:b2:9f:d6:ac:9f:
                    2e:8a:9a:13:fe:4d:98:a1:e6:c0:83:b7:68:66:0e:
                    d6:b6:1e:db:00:5c:b9:4f:c3:6e:30:c7:d1:b5:26:
                    2a:ba:23:ea:af:e5:58:75:72:ad:b6:72:f5:62:16:
                    16:a9:25:be:cc:19:57:85:5f:53:6b:9b:2c:81:69:
                    cf:2f:f6:99:2d:83:58:b7:9e:75:12:e7:09:bb:d4:
                    37:99:ab:99:d0:80:32:50:93:19:06:6a:4c:99:13:
                    84:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:1B:B4:8B:3B:3C:08:46:A1:FD:08:74:0F:B1:CB:78:6D:EE:89
            X509v3 Authority Key Identifier:
                keyid:4B:4B:10:01:9F:BA:A1:FA:47:63:B4:B8:C3:85:E8:F1:3C:DE:B8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B4B10019FBAA1FA4763B4B8C385E8F13CDEB85C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/1/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:98:4f:0b:4e:32:fa:f1:61:9b:ee:99:01:44:18:a4:19:
         f0:0a:53:b7:ff:fd:a2:d9:8c:8c:ec:c3:22:6a:00:1a:6c:a8:
         5a:b6:d7:e3:a6:42:04:35:5a:43:27:17:a7:1c:fd:c6:da:41:
         a6:8d:d8:c5:73:40:59:40:11:9d:18:07:60:14:f9:0b:97:77:
         a9:7e:ff:ff:bd:9e:6e:e4:47:de:6e:fc:db:5c:36:c6:2f:a9:
         7d:a6:bf:dc:9c:25:7f:23:ae:6f:25:87:e9:bd:6a:84:ea:92:
         6a:76:40:34:d0:ce:5a:54:43:0e:8c:3c:4a:eb:7c:d7:93:6a:
         39:4a:3e:e5:b2:d0:8a:fc:76:76:54:1d:97:20:48:d6:df:a0:
         45:89:b2:81:bd:e5:75:f0:e2:4c:a9:17:c5:2a:25:a6:b4:ac:
         ae:47:24:4e:ff:12:22:79:e1:19:f4:f5:d2:87:37:22:59:60:
         55:4d:6f:b1:4b:cc:1f:c1:48:b5:8f:74:0b:5a:a8:b3:89:52:
         0b:d6:d6:e9:80:cc:e6:a6:b1:a5:0f:60:9f:cc:9e:92:76:c9:
         cd:95:f8:87:26:8e:65:cf:c5:b1:1a:84:1f:ca:18:33:5f:27:
         6f:fc:ea:71:a6:1a:84:2c:7f:3c:2c:b6:43:a6:4a:be:7f:b0:
         9a:1e:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 17:31:36 2024 by rpki-client on console-ams.rpki-client.org