Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323032.roa
File:                     34352e3138342e36382e302f32322d3332203d3e20323032.roa (raw, json)
Hash identifier:          7Zw9N2vGafy9xDejp5EvIo4wLUcU8AnYETLNNBWAEJI=
Subject key identifier:   CB:9B:AB:E9:F7:AB:7D:C6:A0:7A:4C:1F:F2:17:75:57:A3:80:2C:1F
Certificate issuer:       /CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
Certificate serial:       4B95162FEAC37C89915AAB17A441AE1FEF03CAF9
Authority key identifier: 7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323032.roa
Signing time:             Fri 16 Aug 2024 04:52:58 +0000
ROA not before:           Fri 16 Aug 2024 04:47:58 +0000
ROA not after:            Fri 15 Aug 2025 04:52:58 +0000
asID:                     202
IP address blocks:        45.184.68.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:95:16:2f:ea:c3:7c:89:91:5a:ab:17:a4:41:ae:1f:ef:03:ca:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA2EA6A0D3A338D4FA4840C542D4E9164C82629
        Validity
            Not Before: Aug 16 04:47:58 2024 GMT
            Not After : Aug 15 04:52:58 2025 GMT
        Subject: CN=CB9BABE9F7AB7DC6A07A4C1FF2177557A3802C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8e:7f:6d:c5:bf:86:4f:f2:9b:b4:e1:0d:69:
                    ea:78:fb:94:48:6a:d4:36:05:82:fd:cc:a7:c7:c6:
                    e7:08:19:9b:5c:9f:9d:7a:ba:d4:e7:d6:dd:8b:e8:
                    13:d0:0a:a0:9f:f5:36:3f:1b:f9:14:29:fa:e0:91:
                    ac:0d:2e:7d:92:41:80:71:3c:b2:78:c0:27:f4:61:
                    62:15:f1:1c:77:9c:64:01:b5:3b:34:1d:7b:73:d2:
                    8c:1e:7c:43:39:d6:4d:8d:3b:a1:a7:f0:1f:fe:10:
                    24:26:c5:92:d1:28:d6:4d:98:ad:5e:04:be:ea:eb:
                    f9:ac:96:24:6d:29:88:48:be:b0:26:94:8b:58:3c:
                    cc:ff:41:8a:e4:df:57:5c:19:4c:7e:cf:af:3e:f1:
                    c2:56:ec:4a:c2:b4:29:8a:06:33:91:46:e1:c0:27:
                    42:2f:67:1d:b9:3c:08:0b:8d:1e:aa:39:54:34:8d:
                    75:16:2b:b4:9f:21:24:70:9e:fa:8d:27:82:66:7d:
                    e0:7c:58:9e:f4:21:88:71:d6:82:8d:bb:0b:ee:43:
                    6d:6e:ae:8f:d7:37:bf:e7:3c:93:99:4a:72:be:54:
                    a7:be:01:a7:98:2b:5e:f6:e1:b7:79:9f:58:4a:b8:
                    da:2a:2a:b1:8b:81:7c:9e:80:73:0f:fb:99:d0:e6:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9B:AB:E9:F7:AB:7D:C6:A0:7A:4C:1F:F2:17:75:57:A3:80:2C:1F
            X509v3 Authority Key Identifier:
                keyid:7E:A2:EA:6A:0D:3A:33:8D:4F:A4:84:0C:54:2D:4E:91:64:C8:26:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EA2EA6A0D3A338D4FA4840C542D4E9164C82629.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3332203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:ca:5b:43:50:5c:b7:de:57:3d:49:c5:ad:ba:4d:59:35:
         8c:99:bf:9f:2f:58:f7:cc:a9:8f:74:46:6a:a7:f3:d0:4e:83:
         4c:9f:7c:33:66:92:fa:a3:d6:08:79:54:56:b5:00:df:e1:b8:
         39:8e:fd:a3:6a:a5:64:69:7d:70:d2:bc:34:10:eb:23:f3:fc:
         fa:6e:ba:39:ec:4d:e8:d4:8b:03:17:18:26:b6:d6:b4:7c:15:
         40:77:8c:c8:f5:04:7e:f2:e8:cf:a1:24:ed:5e:85:7a:f1:4a:
         f9:cd:27:82:77:34:18:32:f0:1d:8a:9b:f4:91:50:d7:f0:0f:
         bf:72:30:f5:dc:01:8a:98:ae:ec:03:bd:09:17:71:98:d3:85:
         4e:a5:db:d5:ab:66:43:01:b0:a0:66:30:a6:10:2c:38:75:d0:
         46:9a:cf:0d:ad:cb:7a:e2:c9:76:d3:dd:25:e5:95:47:0a:83:
         2a:35:88:d2:36:e5:28:22:37:b1:0d:45:9e:32:2f:83:79:51:
         6e:a0:73:b4:53:0a:98:24:27:a5:56:7e:a5:8d:ea:75:f9:b5:
         d2:0a:62:15:c2:58:72:2a:80:ad:8e:c9:d8:42:69:99:dc:9d:
         6f:bd:24:00:ec:1d:69:e2:8a:03:fe:b2:13:3f:80:b8:d3:7d:
         c0:5b:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 19:58:11 2024 by rpki-client on console-fra.rpki-client.org