Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa
File:                     34352e3138382e33372e302f32342d3234203d3e20323639353038.roa (raw, json)
Hash identifier:          R0b+3kKR7sU3ehExND15uRolgIrEvZ/35VnQowKq1Vo=
Subject key identifier:   90:06:93:17:AF:A1:96:3F:CD:E3:C3:25:8D:0F:C0:D3:E1:28:6D:94
Certificate issuer:       /CN=B4A507A3449B35297C2E0851F09576570269B539
Certificate serial:       03577085118A85E4F142311740D1FC8BFC71A97D
Authority key identifier: B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa
Signing time:             Mon 27 May 2024 21:13:11 +0000
ROA not before:           Mon 27 May 2024 21:08:11 +0000
ROA not after:            Mon 26 May 2025 21:13:11 +0000
asID:                     269508
IP address blocks:        45.188.37.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:57:70:85:11:8a:85:e4:f1:42:31:17:40:d1:fc:8b:fc:71:a9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A507A3449B35297C2E0851F09576570269B539
        Validity
            Not Before: May 27 21:08:11 2024 GMT
            Not After : May 26 21:13:11 2025 GMT
        Subject: CN=90069317AFA1963FCDE3C3258D0FC0D3E1286D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:93:da:8f:5e:c5:a2:f6:9a:23:c0:c9:fd:
                    5b:9b:54:17:0a:4a:55:82:4e:c9:da:14:89:1a:4b:
                    05:22:0d:14:c1:0f:48:4a:4b:24:ab:9c:e4:33:24:
                    77:b1:bf:96:ea:12:b3:23:36:48:f9:c7:79:b6:c7:
                    9e:c4:6f:44:89:b2:e0:25:c8:41:6f:60:b4:a5:90:
                    9a:9e:d1:16:cc:34:aa:95:32:92:00:2a:78:30:1b:
                    3e:31:3c:c7:f1:ca:e5:fc:5e:65:7b:ac:4e:ac:c0:
                    3e:8b:40:64:64:e6:e2:08:1f:cb:a2:b1:b8:e9:e0:
                    f6:6f:cf:f7:8a:b7:4e:df:cc:34:5d:24:32:2d:84:
                    7c:5a:ad:61:2b:39:5d:ba:e1:cd:55:8a:fe:7a:87:
                    97:20:e8:ad:86:a5:80:c9:a3:87:7f:69:a9:70:74:
                    0a:4c:bd:69:43:53:8f:d8:9c:4f:4c:61:a5:b7:31:
                    e5:ee:fb:66:ad:73:df:fa:07:a7:46:ca:dd:92:dc:
                    98:d1:00:f8:03:04:1d:44:a2:e9:49:55:67:0e:a3:
                    88:46:89:96:f1:53:b2:74:99:c5:65:a8:bf:3b:2b:
                    c7:82:fb:32:ff:62:be:09:5d:14:23:05:41:2a:bc:
                    94:66:94:1f:e4:75:b5:1e:31:ff:6d:59:03:22:42:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:06:93:17:AF:A1:96:3F:CD:E3:C3:25:8D:0F:C0:D3:E1:28:6D:94
            X509v3 Authority Key Identifier:
                keyid:B4:A5:07:A3:44:9B:35:29:7C:2E:08:51:F0:95:76:57:02:69:B5:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/B4A507A3449B35297C2E0851F09576570269B539.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4A507A3449B35297C2E0851F09576570269B539.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE5zQUMjuw5WLX75FKTfNq9h8kqfZr5z7EQme7ma89Dc/0/34352e3138382e33372e302f32342d3234203d3e20323639353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5c:4d:6f:d3:a9:f5:93:d4:6f:12:98:85:dd:03:41:a7:78:
         66:2e:3e:ad:67:2e:fa:ce:c6:f5:e3:60:cc:86:4d:20:fc:c6:
         de:e2:4b:90:53:08:97:2b:97:de:7b:55:5d:bb:5c:2a:39:e7:
         df:a6:6d:ac:e3:27:30:e1:35:4f:7f:9b:21:21:f7:e8:02:a5:
         e8:68:39:ac:f5:37:95:01:ea:50:cc:a8:7b:52:19:6f:5c:cd:
         a7:e6:9f:a7:d3:a2:f0:88:81:02:83:24:65:a6:da:a4:a9:75:
         c6:82:25:4f:90:18:15:eb:74:81:dc:ff:11:fa:de:99:65:ab:
         39:79:9b:96:56:21:24:68:44:f3:21:2f:89:26:51:7f:2d:54:
         10:3b:95:e8:43:a0:0e:a1:b0:38:1d:b7:1f:a7:f4:fe:24:7c:
         9f:45:09:59:fb:8b:82:e6:ff:07:8e:72:50:11:c8:40:7b:3a:
         46:19:b0:fd:e9:9b:37:c6:a1:6d:33:a1:1c:50:e4:10:25:71:
         bc:b8:1b:85:cc:2d:23:fa:70:32:eb:a1:91:cd:ee:f5:a6:75:
         1c:ee:73:f7:e2:c0:29:b3:fc:67:57:a4:5e:0e:3c:aa:99:7c:
         a2:9a:b4:12:89:3a:66:95:df:c0:4c:93:ef:25:ba:35:51:d0:
         c6:fd:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org