Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32332d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          1ugqAU6qG+WUBfMZk4Vm7QWMvpVOKbm+fPCvlKcK0pQ=
Subject key identifier:   8B:BF:81:17:60:29:31:DA:82:04:30:CF:C6:D1:F9:4F:4F:B4:C5:D0
Certificate issuer:       /CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
Certificate serial:       1F30A461BEE06A62BDB2C4E29342DB93353D5D10
Authority key identifier: C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
Signing time:             Thu 04 Apr 2024 11:24:51 +0000
ROA not before:           Thu 04 Apr 2024 11:19:51 +0000
ROA not after:            Thu 03 Apr 2025 11:24:51 +0000
asID:                     269359
IP address blocks:        45.230.84.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:a4:61:be:e0:6a:62:bd:b2:c4:e2:93:42:db:93:35:3d:5d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A7CA467EE94B94A1D063A15D315BD19A77A977
        Validity
            Not Before: Apr  4 11:19:51 2024 GMT
            Not After : Apr  3 11:24:51 2025 GMT
        Subject: CN=8BBF8117602931DA820430CFC6D1F94F4FB4C5D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:da:58:d5:32:8c:c0:c7:29:cf:90:9f:9d:
                    f5:ad:62:64:d6:52:db:8d:0b:99:d4:16:e4:a7:07:
                    cb:b2:2e:e2:12:45:92:0e:2f:9f:b4:05:e8:89:5f:
                    3a:3e:d4:1d:f3:6e:33:27:6f:3b:5c:34:92:3a:00:
                    b9:e6:51:8a:be:b9:77:5c:f8:66:56:f0:45:a5:58:
                    08:74:b9:88:8a:ad:35:f4:e5:9e:0c:75:ca:5c:07:
                    dc:05:f5:dd:38:b4:6f:a7:da:dc:83:8a:95:e2:14:
                    7a:d0:b1:42:96:4f:92:a7:64:d1:92:db:be:92:a5:
                    98:05:83:bb:4e:e3:35:b4:b0:82:6d:3e:c3:b6:39:
                    68:aa:4b:b0:2b:20:b6:3b:a2:d7:66:97:6a:1e:4d:
                    e2:9f:21:c9:0c:7f:8b:e8:d1:23:df:71:a2:09:3f:
                    de:6b:cf:39:42:c3:35:e6:83:33:69:aa:30:3d:7e:
                    76:f2:c3:aa:50:de:f2:cd:2c:dc:f4:29:46:7b:90:
                    81:29:21:d6:b5:96:9a:a6:bf:a8:29:9d:4b:68:6b:
                    68:58:f8:ac:35:cb:de:f1:ba:4f:37:36:08:cc:3d:
                    7f:d6:64:d9:ca:86:c4:52:c3:d0:53:0a:22:7b:1b:
                    f1:13:49:ab:5e:4b:9c:23:33:b2:47:87:0f:6a:32:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BF:81:17:60:29:31:DA:82:04:30:CF:C6:D1:F9:4F:4F:B4:C5:D0
            X509v3 Authority Key Identifier:
                keyid:C0:A7:CA:46:7E:E9:4B:94:A1:D0:63:A1:5D:31:5B:D1:9A:77:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0A7CA467EE94B94A1D063A15D315BD19A77A977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/1/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:72:2d:51:65:1b:d2:72:c0:99:2b:00:44:61:4f:3e:a6:9f:
         6e:50:53:a2:99:b4:41:91:ea:dd:39:36:6c:49:c7:bc:f8:c5:
         d1:08:3d:66:87:e6:4f:a1:13:2a:03:7b:5b:f6:f4:7c:38:ab:
         68:b9:3e:ee:34:0c:c6:bd:dd:70:e1:94:53:97:e9:b1:cd:36:
         9d:62:8f:5a:53:74:d2:41:9f:b0:70:e2:d7:18:01:73:91:01:
         ec:37:6e:08:d1:66:9f:a1:04:78:36:8f:2e:0a:54:38:7e:e0:
         d6:33:7a:95:57:24:9c:51:cd:39:68:a6:a2:b7:20:57:58:b5:
         cf:77:06:93:c9:52:50:be:af:7e:aa:cd:3c:82:21:e6:9e:e8:
         e6:0e:57:7b:17:26:05:0d:7c:46:51:62:e2:00:96:d0:b3:27:
         16:95:6c:5c:a6:97:80:cd:cb:9f:38:63:52:48:bb:8c:e3:b2:
         6d:59:c4:66:d8:16:32:72:9d:f8:ad:1d:4d:d7:0b:be:d1:58:
         76:05:73:82:e3:ff:1c:87:45:fc:27:9c:96:b5:9b:42:ec:85:
         01:06:90:36:e6:40:49:32:2f:62:6a:09:d9:39:f0:91:96:55:
         51:82:a1:4c:37:fb:46:ab:c1:a9:f3:bd:50:14:78:fd:bb:70:
         42:a3:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:07 2024 by rpki-client on console-ams.rpki-client.org