Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
File:                     34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (raw, json)
Hash identifier:          V/78F/ZlX12kaXKGJBTka1wTowqmH4fREPMvdZ4gdos=
Subject key identifier:   CB:1F:7C:76:76:BE:FD:2A:94:B3:CC:8C:2A:70:4C:C7:4B:1C:64:9D
Certificate issuer:       /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial:       5A4F36BDFB2F90A577621A515159CB086491C575
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
Signing time:             Thu 27 Jun 2024 14:08:31 +0000
ROA not before:           Thu 27 Jun 2024 14:03:31 +0000
ROA not after:            Thu 26 Jun 2025 14:08:31 +0000
asID:                     268207
IP address blocks:        45.235.52.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:36:bd:fb:2f:90:a5:77:62:1a:51:51:59:cb:08:64:91:c5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
        Validity
            Not Before: Jun 27 14:03:31 2024 GMT
            Not After : Jun 26 14:08:31 2025 GMT
        Subject: CN=CB1F7C7676BEFD2A94B3CC8C2A704CC74B1C649D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:26:17:d1:2d:5b:79:91:56:a3:fa:4f:18:
                    ba:4d:12:7a:1d:14:6e:c8:0b:67:a3:cc:cb:9c:b5:
                    45:1e:54:f5:7f:41:0d:c8:25:d1:1b:5d:12:b2:bd:
                    26:1b:ca:62:86:0a:f4:80:e5:bc:86:91:5b:69:2f:
                    81:c5:e2:76:ac:cd:62:58:09:4c:48:7f:25:f7:b4:
                    c5:2a:af:11:fd:93:77:2e:26:29:99:e1:59:58:f9:
                    69:ac:83:68:7e:03:5d:58:b4:a6:e0:b5:5f:a7:4d:
                    24:97:ac:35:9d:fb:e3:4d:29:14:45:7c:a4:41:9a:
                    4e:c7:02:89:19:9d:ef:d6:3b:e7:d8:59:9e:63:bd:
                    f5:ac:8d:3e:06:89:65:2e:cb:9f:58:01:67:cd:a0:
                    39:d6:dd:8c:50:b6:27:79:8b:dc:b1:bd:58:4f:21:
                    c0:0d:cc:0f:33:ca:06:9c:2b:50:3d:18:31:42:00:
                    04:e2:ac:5a:a8:dc:2b:ee:16:97:cd:c7:57:fa:0d:
                    1d:a9:43:a2:0b:ae:78:a4:e7:21:64:d0:82:30:88:
                    8d:92:8b:28:e7:d4:16:d1:d5:cc:75:48:32:de:55:
                    01:a6:95:73:ed:2f:fe:8c:57:f8:81:1d:88:8b:61:
                    d7:f1:af:5a:f5:c7:7b:56:7d:b8:aa:73:aa:5d:28:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:7C:76:76:BE:FD:2A:94:B3:CC:8C:2A:70:4C:C7:4B:1C:64:9D
            X509v3 Authority Key Identifier:
                keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:6c:cc:bb:31:b3:5a:9e:2e:14:3b:c1:ce:b4:d6:d9:ff:f0:
         1d:2b:36:c8:02:b6:45:7b:c1:a8:c4:fe:a9:44:75:2f:82:61:
         32:12:02:86:c7:a8:84:b3:e3:94:d1:c5:14:43:cf:c8:7c:c6:
         33:63:fd:ba:c4:0d:f9:82:8a:f0:ff:ba:f4:ff:84:42:00:d1:
         bb:87:e6:3b:e5:65:2b:35:b8:51:43:6b:5c:4b:ca:bb:3b:15:
         d5:89:a2:80:b0:f1:8f:f0:b3:43:96:bb:96:0c:36:35:ed:7a:
         4e:a5:00:58:73:73:de:60:81:7b:41:7b:42:b7:c0:c1:fc:64:
         5e:5c:9a:a5:74:b4:e3:8b:cd:47:26:3d:89:b3:75:a0:2f:26:
         20:4f:75:1f:d2:20:fd:78:1b:06:9e:21:0d:84:01:ed:a3:0d:
         d5:fd:f3:e6:52:fe:6a:f3:05:e2:a1:ea:f7:3a:e7:e9:a9:08:
         9d:de:82:ee:43:30:c4:ea:87:10:be:f4:41:ea:f9:1b:9f:bd:
         af:f3:e0:9d:b5:4e:a0:8a:e5:49:22:b2:15:8b:2c:ad:0b:c4:
         6c:f2:92:ef:46:f9:db:87:7c:da:72:00:62:04:34:9e:c6:09:
         d5:d9:f4:fd:40:8f:22:d7:84:de:79:17:70:73:8d:19:d7:14:
         0a:70:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 17:24:44 2024 by rpki-client on console-fra.rpki-client.org