Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32322d3232203d3e20323636393438.roa
File:                     34352e3232352e3139322e302f32322d3232203d3e20323636393438.roa (raw, json)
Hash identifier:          pnUPzfZKjQAhD8D2E9l7tphTHLVKsBQHq8eG1zJjD0I=
Subject key identifier:   2E:C6:C7:24:7E:A4:38:07:57:75:A6:13:B6:12:E7:35:0E:41:48:D1
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       047D2311551088447574B443222E4F8B09D7CAC0
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32322d3232203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:19 +0000
ROA not before:           Mon 29 Jul 2024 17:29:19 +0000
ROA not after:            Mon 28 Jul 2025 17:34:19 +0000
asID:                     266948
IP address blocks:        45.225.192.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:23:11:55:10:88:44:75:74:b4:43:22:2e:4f:8b:09:d7:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:19 2024 GMT
            Not After : Jul 28 17:34:19 2025 GMT
        Subject: CN=2EC6C7247EA438075775A613B612E7350E4148D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:c2:8d:d9:79:34:92:45:10:b7:8b:ce:fa:
                    5a:32:38:ab:9a:6a:e8:14:da:33:41:c4:a0:88:97:
                    95:b4:e8:6d:d9:d7:be:7c:40:ad:63:27:54:97:f1:
                    d1:01:bf:96:c3:1e:66:d8:5a:d3:4a:6f:05:4e:8f:
                    6c:77:af:2c:fb:ee:2a:45:09:9b:28:09:23:80:77:
                    6d:d9:c6:83:c2:e9:1e:b6:f5:92:5b:d7:5f:2a:79:
                    42:3c:89:fb:54:a5:a5:30:82:6e:c0:82:fd:a6:69:
                    21:05:be:e5:0e:44:32:d0:91:0a:e4:51:26:f0:8a:
                    b7:22:68:91:ff:50:05:ce:1e:0f:a6:1e:4d:3e:76:
                    2d:49:89:34:74:99:52:67:75:b2:93:83:32:70:88:
                    18:a8:ad:e5:9e:94:ff:10:e6:d6:e1:29:65:e1:79:
                    e2:df:5d:4f:a6:65:24:9d:d7:84:86:1c:48:b5:83:
                    3a:68:48:1e:1d:bc:95:b9:df:7f:d1:11:e4:7a:48:
                    be:0a:67:b4:74:c1:eb:98:8f:f7:41:e1:50:db:6d:
                    a1:27:4f:42:80:26:88:fe:f4:8a:ac:1c:da:44:09:
                    de:64:f3:cf:fb:fc:6e:9d:a1:ce:2a:0c:cf:c0:07:
                    29:c5:6e:3c:b5:7c:25:1f:db:60:39:20:eb:7f:0b:
                    51:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C6:C7:24:7E:A4:38:07:57:75:A6:13:B6:12:E7:35:0E:41:48:D1
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32322d3232203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:d0:57:41:b1:95:c6:4e:f0:c3:3b:b8:e2:4f:69:4b:c9:
         ed:59:fd:77:41:79:2f:2c:ee:43:e1:d6:13:90:ca:82:98:f6:
         60:21:90:2a:f9:0c:d6:eb:ca:5e:be:39:73:79:54:6b:88:62:
         d6:9d:92:22:b3:54:16:09:85:19:45:f8:29:00:ae:9e:14:96:
         b5:d2:37:2f:de:7f:73:b8:06:66:9c:eb:8f:9b:68:99:29:c7:
         ac:8c:24:66:19:4b:fa:f7:fc:5b:b7:e1:f2:bc:03:16:f7:d1:
         1e:ca:ac:91:f9:7d:2d:51:0c:11:c8:9c:a9:91:3d:43:51:e7:
         f7:1a:45:44:ad:d7:ca:aa:c0:9b:67:fe:cb:7a:5c:13:76:ac:
         a1:53:55:f8:dc:75:c4:a5:d6:5e:4a:bb:61:d6:1d:b1:de:39:
         e2:ec:5c:4a:14:f2:bf:78:5d:2f:80:9e:20:9c:11:d9:54:0a:
         e2:d8:96:61:48:1a:e0:61:1e:28:63:3d:4c:84:3a:60:0b:ad:
         95:21:66:6d:e1:35:83:b1:28:8e:cf:00:45:c7:46:ac:92:55:
         59:d8:8b:ec:75:7b:2c:48:82:58:6b:b7:bd:de:92:32:cc:dd:
         b1:4a:c3:c8:7c:90:89:6d:05:fe:af:69:74:50:4f:f6:dc:52:
         f7:b4:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 09:26:23 2024 by rpki-client on console-ams.rpki-client.org