Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33362e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          65rLs4QlCMRNNvKScJp2sL6e3raFcaXEg5llXxkpXq8=
Subject key identifier:   DC:30:7E:65:E6:B1:2F:6F:42:47:6B:0B:06:CD:59:9C:FC:8A:96:F2
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       155F59B2C7620EBA1D1412C2DB6F44DE2B3539DF
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32342d3234203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:17 +0000
ROA not before:           Mon 27 May 2024 21:08:17 +0000
ROA not after:            Mon 26 May 2025 21:13:17 +0000
asID:                     269508
IP address blocks:        45.188.36.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:5f:59:b2:c7:62:0e:ba:1d:14:12:c2:db:6f:44:de:2b:35:39:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:17 2024 GMT
            Not After : May 26 21:13:17 2025 GMT
        Subject: CN=DC307E65E6B12F6F42476B0B06CD599CFC8A96F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:67:9d:d4:0a:63:0f:67:94:7f:cf:1d:fa:01:
                    5b:ef:c8:9a:6e:a2:9c:84:68:6a:ed:7c:c1:f6:cf:
                    c7:10:21:be:27:a8:ef:b1:dd:26:69:fb:f5:7d:28:
                    e7:40:3e:fa:e2:70:c8:d3:7b:43:02:db:2f:14:a0:
                    36:40:35:8a:df:7a:a4:70:a7:50:d6:b3:2e:30:7e:
                    6a:ca:ef:91:82:d1:30:46:7a:ad:1c:d9:6f:08:fc:
                    00:a3:37:d2:7c:4a:18:2e:83:e1:e5:2c:1c:50:f2:
                    71:f0:2d:7c:b8:26:c1:5e:75:e0:54:6c:a1:36:f2:
                    bc:95:0b:05:aa:b8:19:4e:09:af:6e:37:3a:05:c6:
                    ca:9b:b7:b4:67:3b:76:c2:57:43:53:f7:71:a1:6e:
                    7b:96:4e:da:78:18:67:20:37:1b:54:d1:81:bd:a5:
                    2b:c3:77:fb:24:a7:ba:f9:6b:a6:2c:db:10:40:8a:
                    4d:a7:93:01:a8:aa:b5:bb:0e:28:fb:34:e0:75:6a:
                    3a:71:59:b7:d3:e5:ee:e0:71:a3:ac:da:10:4d:e7:
                    71:99:e5:c7:81:19:db:e1:cd:a2:51:08:88:82:24:
                    c0:4e:c7:f0:e8:7e:fe:ce:74:83:b1:34:c9:e2:9a:
                    4a:18:43:d7:0d:5e:e3:6b:c3:d2:8f:bc:f9:37:bc:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:30:7E:65:E6:B1:2F:6F:42:47:6B:0B:06:CD:59:9C:FC:8A:96:F2
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33362e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:07:a2:c2:f3:69:0d:6f:6a:08:e5:6a:22:46:7f:d3:63:e7:
         39:a3:07:db:15:d9:46:bc:7c:c6:ce:5c:b3:43:79:36:52:99:
         74:a7:84:3d:d1:df:c3:f2:97:a8:f2:87:a6:05:ae:87:0b:b6:
         64:cb:9a:98:85:cb:aa:5a:35:b3:83:a4:63:3b:be:40:4f:55:
         0e:64:d0:df:b1:cb:6e:fb:6a:2a:94:92:00:70:09:11:97:8b:
         63:ee:92:b1:b8:8b:e2:89:bc:b9:ad:d3:c3:cc:03:0e:9c:43:
         15:ac:59:f3:7e:8c:1c:4f:94:1f:d1:f7:91:dd:bc:0d:46:57:
         2d:b2:f6:89:7e:19:97:f9:e7:51:4a:bf:79:36:d8:88:39:32:
         11:df:82:1e:fe:48:d2:15:af:33:41:73:86:62:b6:2c:33:c6:
         0a:99:62:d9:24:3d:5f:8b:d8:ce:ce:3a:40:82:db:26:48:c2:
         c2:49:ec:c8:cd:3a:b0:8d:a4:3a:58:f6:2c:33:4f:11:c0:b4:
         ea:5a:5f:e8:c2:ee:0d:82:d4:0b:cb:3e:b3:e4:da:1b:a4:df:
         46:b4:25:72:13:28:53:70:2d:8e:e1:63:2f:45:9c:20:0f:ea:
         5c:1d:b0:01:08:7a:43:95:82:24:5f:20:4b:4d:9c:e5:0c:98:
         c4:88:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org