Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323638343731.roa
File:                     34352e3136302e3139332e302f32342d3234203d3e20323638343731.roa (raw, json)
Hash identifier:          T4ZyiYsZtl8+pVwp5OAnzCBxW4+2mC3uZOnI1H/VFaw=
Subject key identifier:   8E:88:AC:88:75:56:88:28:C9:D1:CD:61:CD:6A:79:3A:53:E1:AD:B7
Certificate issuer:       /CN=3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4
Certificate serial:       399CA47A968A29F21838C51620DD0DBA15D5DAD3
Authority key identifier: 3C:11:FB:D4:37:AE:F0:FF:AD:58:F5:B8:97:F0:AD:37:BE:3D:DA:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323638343731.roa
Signing time:             Tue 04 Jun 2024 16:29:09 +0000
ROA not before:           Tue 04 Jun 2024 16:24:09 +0000
ROA not after:            Tue 03 Jun 2025 16:29:09 +0000
asID:                     268471
IP address blocks:        45.160.193.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9c:a4:7a:96:8a:29:f2:18:38:c5:16:20:dd:0d:ba:15:d5:da:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4
        Validity
            Not Before: Jun  4 16:24:09 2024 GMT
            Not After : Jun  3 16:29:09 2025 GMT
        Subject: CN=8E88AC8875568828C9D1CD61CD6A793A53E1ADB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:a5:fd:20:eb:02:0d:28:d7:41:47:a8:03:
                    d0:3e:28:0a:8b:7b:eb:48:1f:85:f9:17:e2:ae:b6:
                    8f:c0:25:72:31:d7:65:b4:1e:6a:04:0a:57:ff:c0:
                    68:69:78:5b:0f:11:76:fa:a2:a8:59:35:ff:8f:b7:
                    36:44:87:22:af:21:f5:cf:ec:7f:83:b2:4f:04:3a:
                    f7:84:03:dd:24:cd:cf:85:19:ab:55:78:50:21:ec:
                    f3:ef:d4:a7:71:37:48:aa:63:53:43:d8:25:c1:90:
                    96:10:71:ce:c9:be:32:de:f8:00:ae:93:4b:b6:f1:
                    d0:cb:15:f8:d8:05:1c:b7:0d:ce:fe:3a:97:78:24:
                    fe:d0:55:50:43:f1:b9:c1:9c:26:fa:a9:9f:89:5a:
                    db:6e:aa:99:79:08:03:06:89:52:de:26:04:2b:a6:
                    ff:64:f4:ca:96:78:4a:9e:5d:b0:58:d4:3a:8b:cf:
                    49:78:ee:bf:1a:a7:a8:d7:ad:02:64:e2:4a:f4:f2:
                    9c:0f:b0:d9:60:cf:b6:07:dd:ca:02:46:d4:59:93:
                    ef:49:99:1a:b0:7f:d9:43:a3:d1:da:e3:05:01:b9:
                    33:d4:c9:fa:a4:38:b3:1f:df:d6:51:79:e2:6a:d0:
                    a7:8e:8c:b7:57:9c:8c:f9:23:69:3b:48:02:66:88:
                    79:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:AC:88:75:56:88:28:C9:D1:CD:61:CD:6A:79:3A:53:E1:AD:B7
            X509v3 Authority Key Identifier:
                keyid:3C:11:FB:D4:37:AE:F0:FF:AD:58:F5:B8:97:F0:AD:37:BE:3D:DA:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C11FBD437AEF0FFAD58F5B897F0AD37BE3DDAD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/34352e3136302e3139332e302f32342d3234203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:af:c7:68:cd:f8:a6:5f:21:d2:f4:af:00:25:a6:8a:b1:33:
         7b:f9:7d:08:c3:cb:e8:70:14:a6:4b:fc:9d:99:55:96:de:b2:
         24:68:8f:6d:d3:35:6e:54:20:cd:27:46:d8:9e:b8:ca:8e:5c:
         48:8a:c9:2b:2a:57:3f:5a:78:d3:a7:e9:27:94:a4:e2:7e:ec:
         0e:3b:e6:dd:42:f1:76:ea:70:5a:f1:85:0a:e1:7f:14:cd:7e:
         13:8e:f8:2d:1c:5a:42:52:02:30:99:93:b9:11:9d:bf:46:a9:
         a0:df:99:47:b2:ab:6f:c6:3b:82:5c:eb:c8:8d:b5:8b:0a:f9:
         86:7b:0e:e3:52:28:d7:3f:44:0a:60:26:8d:92:08:56:de:d6:
         ea:10:1b:49:da:67:76:77:8e:79:77:ad:9f:ce:b0:5d:7c:11:
         98:02:f7:db:0b:61:e8:11:89:20:b6:f6:ae:10:38:54:78:60:
         c6:03:2d:7e:37:af:87:49:ae:f6:02:1b:1b:6c:10:64:33:30:
         ff:f6:52:37:b7:35:70:20:05:ab:28:a4:3a:95:34:a3:73:5b:
         7b:d2:28:dc:51:dd:5a:1c:b7:df:ac:97:4c:b9:d6:e7:65:ad:
         d0:06:27:cf:34:95:00:fb:8d:37:3b:be:ee:09:80:97:b6:0c:
         0c:21:6c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 18:44:41 2024 by rpki-client on console-fra.rpki-client.org