Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa
File:                     34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa (raw, json)
Hash identifier:          YrK2a27fSBuWEMJD0suk1ogSQI69yFtIsi/ICxIE1vQ=
Subject key identifier:   5F:D0:97:A7:4F:88:D0:82:86:DA:0E:29:70:3C:87:2E:CB:54:0E:97
Certificate issuer:       /CN=21846FD68091A2016CCF764693C6904AC8FF62A9
Certificate serial:       692A625C2705D0BEFB8775E0A5B56DB9D9FC5303
Authority key identifier: 21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa
Signing time:             Mon 29 Jul 2024 17:34:19 +0000
ROA not before:           Mon 29 Jul 2024 17:29:19 +0000
ROA not after:            Mon 28 Jul 2025 17:34:19 +0000
asID:                     266948
IP address blocks:        45.225.192.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:62:5c:27:05:d0:be:fb:87:75:e0:a5:b5:6d:b9:d9:fc:53:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21846FD68091A2016CCF764693C6904AC8FF62A9
        Validity
            Not Before: Jul 29 17:29:19 2024 GMT
            Not After : Jul 28 17:34:19 2025 GMT
        Subject: CN=5FD097A74F88D08286DA0E29703C872ECB540E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:fc:47:78:2a:80:ca:ab:59:76:2f:e6:57:
                    1d:ab:26:27:98:76:ec:ce:fe:e3:e1:84:91:1f:c6:
                    48:ba:9a:ba:67:01:c6:73:14:1e:80:87:10:24:be:
                    46:3d:08:c9:e4:dc:c4:26:f8:d4:b3:f4:33:08:5a:
                    ce:d5:fe:28:9a:5b:12:15:85:21:2f:75:a9:61:ce:
                    33:5e:65:7d:ef:66:48:06:87:00:86:0d:1b:61:57:
                    79:d1:0c:98:f1:f4:67:bf:d6:34:63:f2:d2:90:52:
                    0b:35:b3:a1:3e:ba:fa:40:8c:c1:ff:87:e5:24:34:
                    d9:13:2f:7e:f7:c5:33:be:bc:1c:0e:ff:22:b3:8c:
                    bf:55:ef:e5:1f:26:99:3a:31:4d:d4:bb:6e:42:6a:
                    51:f1:42:6f:4f:80:c8:be:44:88:a6:09:e9:04:64:
                    15:98:cc:8e:b5:91:09:a7:7f:dd:f2:a4:3e:8b:14:
                    80:12:fa:91:6f:12:b5:13:0b:fb:96:fe:c7:bc:9b:
                    44:ce:ae:08:c7:8f:f4:28:df:2d:b3:b5:e9:17:c2:
                    3b:41:8e:33:da:37:30:8d:1a:1b:df:39:79:bd:66:
                    52:a6:b8:a7:df:55:9e:1f:2d:7d:b3:36:24:36:20:
                    20:22:ed:05:ad:0d:d9:e0:9c:af:31:4c:9f:ec:38:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:97:A7:4F:88:D0:82:86:DA:0E:29:70:3C:87:2E:CB:54:0E:97
            X509v3 Authority Key Identifier:
                keyid:21:84:6F:D6:80:91:A2:01:6C:CF:76:46:93:C6:90:4A:C8:FF:62:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/21846FD68091A2016CCF764693C6904AC8FF62A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21846FD68091A2016CCF764693C6904AC8FF62A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/34352e3232352e3139322e302f32332d3233203d3e20323636393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:b0:a6:80:ca:91:0e:8e:de:49:b2:ce:d8:18:6d:ea:dc:
         5a:7f:13:25:12:8d:d6:c9:fc:58:62:1a:fd:79:3a:f6:0f:1a:
         2f:b7:1e:f5:3f:ef:b9:6a:7a:f1:ac:cf:fe:b6:c0:49:fa:b6:
         1c:85:e9:3a:67:0f:a3:5f:75:db:f3:e6:f8:1a:bb:24:34:de:
         5e:c5:90:bd:ed:56:a5:f6:10:98:bd:c2:3c:79:bf:1e:89:23:
         e6:ab:73:ea:15:52:de:e7:1e:d7:79:ff:06:58:af:10:fc:b4:
         5d:1d:5b:94:17:8a:4d:3d:33:3f:13:eb:a5:0d:bf:03:70:f5:
         14:2c:9b:9c:73:23:5d:8e:b8:75:bc:4f:0d:82:e2:d6:4c:45:
         83:c5:9c:28:c6:fe:82:3d:2d:d3:94:1f:91:31:97:56:6a:c2:
         5f:af:9d:91:2e:57:de:81:af:c3:7a:b7:94:5b:44:c8:63:c4:
         2e:cc:a5:c3:5c:52:df:86:c4:d5:c0:a4:5c:88:65:5d:89:72:
         fe:ae:ab:62:47:ec:7f:7b:21:d7:b5:a1:c8:49:e9:6a:67:9c:
         b0:f7:94:c6:a7:96:7b:86:c2:01:5e:24:68:ff:d0:ae:04:3d:
         a6:c5:20:cb:49:08:31:60:55:ad:d9:99:51:84:9a:00:b5:cf:
         94:d4:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 07:38:25 2024 by rpki-client on console-fra.rpki-client.org