Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32332d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          jQwr8kWPOZshKDqGH8e+xF/1FnHn3VyE5SUcaB6wUJs=
Subject key identifier:   BF:4D:2C:C0:1A:D8:4B:BA:33:76:B9:BD:1F:D8:A2:69:EE:81:45:5D
Certificate issuer:       /CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Certificate serial:       072E6F09AF74CE6C09E21EF28CDC135F30C93D9C
Authority key identifier: 79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
Signing time:             Tue 19 Nov 2024 18:58:43 +0000
ROA not before:           Tue 19 Nov 2024 18:53:43 +0000
ROA not after:            Tue 18 Nov 2025 18:58:43 +0000
asID:                     269359
IP address blocks:        45.230.84.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2e:6f:09:af:74:ce:6c:09:e2:1e:f2:8c:dc:13:5f:30:c9:3d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
        Validity
            Not Before: Nov 19 18:53:43 2024 GMT
            Not After : Nov 18 18:58:43 2025 GMT
        Subject: CN=BF4D2CC01AD84BBA3376B9BD1FD8A269EE81455D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:8a:4b:75:3e:89:69:69:80:fe:da:32:47:
                    e1:7e:c3:16:70:f0:8f:25:68:ad:be:92:a5:4d:cd:
                    03:bd:b2:9d:a5:cd:b1:31:0c:8a:37:38:0e:28:27:
                    21:6a:2d:55:f5:9b:c1:26:d8:5a:51:07:2c:72:96:
                    2d:ee:fe:26:5f:99:74:ab:7c:1c:fa:34:55:3e:8f:
                    e9:a2:10:f4:b1:ba:0a:7c:0e:a1:ae:82:8f:be:d7:
                    60:50:0c:af:59:8f:b9:2c:e6:88:02:5f:3a:8f:60:
                    b3:dd:0c:b0:7d:51:29:27:98:ed:eb:40:76:46:79:
                    cc:62:60:af:fd:34:23:84:00:81:59:72:51:5c:34:
                    66:ad:df:66:63:5f:17:36:a0:ce:b7:cc:2e:74:70:
                    b1:36:d9:5f:41:e8:d6:62:cd:3d:54:22:c3:0a:b5:
                    6d:36:43:e8:e1:ae:e6:63:47:ac:49:96:45:e4:02:
                    20:f1:fe:b8:8a:11:4f:2c:19:ac:b4:4c:ca:fd:77:
                    38:11:5b:c2:aa:37:b6:5b:53:3f:d8:19:15:41:12:
                    d2:e3:29:a2:02:c7:23:72:2e:45:3a:c5:20:da:46:
                    54:26:04:47:63:45:2b:5c:c5:63:ef:0b:9e:55:50:
                    b7:da:73:4f:92:a6:63:eb:e6:de:f6:13:58:9d:4a:
                    a9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:2C:C0:1A:D8:4B:BA:33:76:B9:BD:1F:D8:A2:69:EE:81:45:5D
            X509v3 Authority Key Identifier:
                keyid:79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:6b:d2:df:54:ca:73:f4:5f:10:b6:65:d2:59:78:3e:68:d9:
         c4:af:76:2b:e0:1c:b7:2e:ca:42:8c:fc:29:b2:d0:f4:27:aa:
         9e:8f:40:d6:2c:e2:cc:23:4a:2c:ba:84:d5:f2:3a:4e:12:df:
         c4:50:31:a8:38:90:b4:e9:49:69:1e:dd:bf:2e:86:13:20:4d:
         4a:89:e4:64:57:1f:7d:4a:cc:eb:50:ef:11:61:bf:59:fa:a8:
         24:57:ea:dc:2a:f3:95:8e:76:78:34:d3:88:da:04:a3:af:3b:
         f8:3d:d5:07:1c:aa:a3:0b:cb:24:43:cb:03:34:96:f6:b3:a0:
         90:c7:03:ae:f7:25:5b:3f:e0:da:ab:27:a4:f1:4f:32:b9:ce:
         b0:e0:93:e0:35:7a:a5:4a:0c:ca:5c:34:bb:6d:92:51:12:1b:
         2d:55:0a:bb:52:73:9e:ba:a5:d1:8f:c7:86:9a:d6:12:1d:9e:
         00:0c:b4:0e:24:89:fe:ca:0c:5f:fa:fe:e6:d6:90:cd:32:ea:
         49:ad:13:da:7a:7e:9f:dc:08:d0:07:4b:30:af:a5:49:59:52:
         42:20:cc:f9:e8:62:38:5d:1c:93:a4:b0:ea:33:0a:3c:88:ef:
         3e:d5:44:26:50:d5:af:c5:e9:40:41:7c:21:84:0a:b5:57:fb:
         cd:82:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:05:19 2024 by rpki-client on console-fra.rpki-client.org