Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          PNQDrBJU2ZWLMaj83lFOpeGmXK6VTOBglW+zGsCN83k=
Subject key identifier:   31:5F:59:81:64:58:DE:AF:36:BF:D1:DA:CA:9F:70:74:C4:86:05:A9
Certificate issuer:       /CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
Certificate serial:       5D8FAC15F30422856F1A656E0B8C7A7233A579CB
Authority key identifier: C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
Signing time:             Thu 04 Apr 2024 11:24:50 +0000
ROA not before:           Thu 04 Apr 2024 11:19:50 +0000
ROA not after:            Thu 03 Apr 2025 11:24:50 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8f:ac:15:f3:04:22:85:6f:1a:65:6e:0b:8c:7a:72:33:a5:79:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
        Validity
            Not Before: Apr  4 11:19:50 2024 GMT
            Not After : Apr  3 11:24:50 2025 GMT
        Subject: CN=315F59816458DEAF36BFD1DACA9F7074C48605A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:87:f3:ca:65:3d:bd:5c:f0:2e:d4:d8:d2:
                    80:db:dd:4b:dd:52:6e:48:5d:9f:0a:c3:c1:90:49:
                    b4:f4:3a:ab:04:bb:f6:45:40:f8:9b:57:f8:98:76:
                    96:aa:9e:07:b4:be:77:0b:05:3c:b6:b8:5a:53:a7:
                    f9:26:ef:75:11:72:62:85:99:ad:1b:be:85:5c:a6:
                    8d:27:d5:2f:c2:b9:51:cb:3e:ff:4a:86:ba:91:1a:
                    1a:69:cb:67:47:a8:c5:2d:6a:91:9a:e3:ab:a6:ef:
                    80:86:2b:cf:c7:d5:8f:94:de:cc:33:83:e8:67:47:
                    40:c8:ca:36:b2:b7:6a:b7:38:20:db:4c:e4:ec:06:
                    d9:0a:1e:a1:1f:8a:4d:7f:d2:65:38:64:d9:ab:7c:
                    00:05:e7:77:22:d6:4c:63:17:86:1a:d3:4b:bd:91:
                    64:4f:71:62:08:8e:82:d6:c5:52:58:eb:4e:e7:ea:
                    7e:22:40:e9:74:07:34:bc:df:f5:3b:65:33:da:e4:
                    3f:aa:4b:3d:9b:2f:95:76:83:f0:23:d6:65:88:3a:
                    de:89:c5:7f:72:e4:c7:22:c4:19:e9:af:71:9b:04:
                    5d:1a:29:39:cd:d7:1d:05:42:08:98:9c:7d:17:ab:
                    80:e3:40:24:ad:8f:c7:6a:cc:ae:e3:af:89:00:e3:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5F:59:81:64:58:DE:AF:36:BF:D1:DA:CA:9F:70:74:C4:86:05:A9
            X509v3 Authority Key Identifier:
                keyid:C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:a9:82:d9:54:1a:67:3c:e1:3c:c0:31:9c:c1:5f:1b:97:
         61:84:7a:48:ec:14:15:b5:46:b9:91:ad:f0:9b:a1:1b:ad:3f:
         11:23:d9:98:dc:6f:9c:59:8e:52:f8:eb:17:5c:29:db:7c:a9:
         f2:fc:8d:8f:f5:d4:f7:bb:2a:0a:55:69:2c:6b:cc:98:3d:d6:
         75:a6:66:9c:18:b7:70:e9:34:dc:78:fc:99:3c:24:9e:66:db:
         92:fe:a6:99:7b:6c:b6:39:12:6e:ef:d3:42:43:f6:aa:4e:e9:
         0f:4c:0c:76:d1:94:ca:ad:e1:e9:d5:b7:c2:0d:3a:1d:52:2e:
         61:41:21:53:80:a7:31:3f:4b:df:38:34:4c:cf:07:44:c5:5e:
         38:59:0f:d5:c5:27:5f:af:6a:18:80:29:88:8b:7f:c1:cd:4b:
         59:83:c4:c6:38:11:03:07:cc:a0:77:d5:d9:a5:6a:5a:5c:ee:
         5a:14:b3:03:f2:13:b2:3b:67:a7:32:af:44:ad:3e:65:30:7a:
         dd:84:96:bf:42:f6:9a:ed:4c:ed:a8:99:12:22:05:c5:90:14:
         ef:ed:4b:47:56:7e:3c:8e:1c:e3:27:b6:21:44:92:57:05:b1:
         02:1e:03:a3:8f:a4:e5:57:35:d2:f4:a7:2f:d0:19:56:d8:f3:
         b2:71:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org