Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa
File:                     34352e3138382e33362e302f32332d3233203d3e20323639353038.roa (raw, json)
Hash identifier:          FHinZ2DGNC+p1IloVTglIteIQXvC0leounJ80+nwI/M=
Subject key identifier:   2E:91:2E:16:20:EA:79:A3:B8:D7:A3:14:BE:75:54:20:32:99:C7:F4
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       467AAA057B4B869105D92299ED2262A45740BB22
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:13 +0000
ROA not before:           Mon 27 May 2024 21:08:13 +0000
ROA not after:            Mon 26 May 2025 21:13:13 +0000
asID:                     269508
IP address blocks:        45.188.36.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7a:aa:05:7b:4b:86:91:05:d9:22:99:ed:22:62:a4:57:40:bb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:13 2024 GMT
            Not After : May 26 21:13:13 2025 GMT
        Subject: CN=2E912E1620EA79A3B8D7A314BE7554203299C7F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:4b:94:f2:72:bb:80:19:af:6c:aa:92:44:
                    41:8a:8e:b6:a7:b2:51:19:c8:17:ef:73:67:4e:a8:
                    fe:63:a1:f9:09:25:8e:70:51:c0:e1:69:a0:1f:2b:
                    85:48:40:7c:a2:d5:c6:ed:8a:07:56:13:9d:c4:ab:
                    ad:a3:0e:ba:48:e2:43:98:31:f8:89:8b:63:ac:fd:
                    74:93:5f:70:54:8a:2d:e1:c1:06:28:46:dc:37:24:
                    2b:c7:f2:4d:e3:17:1c:39:39:19:2e:d8:0d:fd:f6:
                    88:de:a9:b1:4b:2f:64:81:72:e3:a5:53:d1:62:ce:
                    9b:40:45:ea:7c:b7:db:91:0b:9f:aa:c9:a7:0b:4b:
                    72:41:a3:97:24:13:b3:43:37:25:41:f5:c4:27:3e:
                    02:18:37:45:77:ca:0e:f9:86:1e:01:e8:36:db:ed:
                    3f:87:57:b5:f2:94:cc:ca:ed:1e:83:e0:1b:6f:c7:
                    3a:70:3e:e7:c9:fb:dd:07:71:00:b9:3b:e1:34:47:
                    fb:66:a7:72:9e:a3:18:0f:3e:32:86:ec:da:7d:95:
                    aa:6f:7d:9f:85:31:5b:ac:f1:d9:bf:e0:71:28:53:
                    20:18:c3:8c:9f:62:7c:1e:95:b5:81:45:48:bc:b2:
                    b3:0c:65:b2:a9:1b:5e:54:fd:13:c7:55:11:d0:73:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:2E:16:20:EA:79:A3:B8:D7:A3:14:BE:75:54:20:32:99:C7:F4
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32332d3233203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:41:a6:66:80:ea:7c:0e:35:b9:b5:4c:c7:64:9c:50:97:
         f7:44:9f:51:f3:28:56:c3:97:48:9b:a1:54:8d:d4:eb:18:77:
         02:1b:f1:7b:07:e9:fa:96:64:4c:2c:d7:5a:9f:1e:3e:9b:d3:
         34:a9:3e:a7:61:98:19:37:69:a7:c3:39:c7:e9:14:c5:2e:d6:
         57:fd:e7:9e:47:33:bd:23:33:3f:9b:35:36:d6:62:73:2f:b1:
         46:64:4b:e2:d7:13:19:65:48:6d:e0:59:d1:08:27:ee:f5:7d:
         81:11:0a:96:68:a7:14:02:f9:5b:85:27:ef:9c:18:63:00:d0:
         96:35:9f:00:3e:35:ba:08:d7:2e:cd:ee:1c:4e:25:fa:3a:55:
         38:4b:85:0d:49:8f:e0:52:84:dc:6d:3c:ff:2e:42:31:75:f5:
         68:3a:14:55:18:9e:c5:95:cf:82:a1:d8:e0:dd:d1:cf:de:fb:
         3e:eb:a8:d3:41:90:c3:6a:32:56:9a:ae:a9:57:f1:3f:72:e2:
         83:0f:eb:0e:de:a7:fb:b9:6d:ee:b4:05:ea:e1:57:59:f4:61:
         38:3a:06:78:90:e7:2b:a9:85:f7:b5:f9:8e:75:79:9b:d3:fb:
         11:3e:c8:ea:4e:14:86:85:7a:7a:ab:7c:6b:13:bc:68:c5:a9:
         01:e5:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:50:04 2024 by rpki-client on console-ams.rpki-client.org