Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa
File:                     34352e3137382e38302e302f32342d3234203d3e20323731363237.roa (raw, json)
Hash identifier:          cck8yYUddhTftkVxRp1/rqT4/TRz6uwdKsR4nYksCG0=
Subject key identifier:   24:22:A2:A3:4B:D5:24:D0:5E:12:76:8D:7C:FF:92:8E:45:04:33:B6
Certificate issuer:       /CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
Certificate serial:       482499E01FEA5178A9BE4EE743E6D49607E18128
Authority key identifier: AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa
Signing time:             Mon 18 Nov 2024 18:34:44 +0000
ROA not before:           Mon 18 Nov 2024 18:29:44 +0000
ROA not after:            Mon 17 Nov 2025 18:34:44 +0000
asID:                     271627
IP address blocks:        45.178.80.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:24:99:e0:1f:ea:51:78:a9:be:4e:e7:43:e6:d4:96:07:e1:81:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD217163EB1953839A16E6F7DDA1F424A306D0AC
        Validity
            Not Before: Nov 18 18:29:44 2024 GMT
            Not After : Nov 17 18:34:44 2025 GMT
        Subject: CN=2422A2A34BD524D05E12768D7CFF928E450433B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:f4:29:8d:23:1f:ef:1a:d8:08:22:b5:6a:
                    52:b3:0d:40:49:38:a8:76:fd:00:e7:a1:e3:32:04:
                    43:99:dc:33:51:91:5d:d2:46:d3:1a:cd:95:b8:49:
                    2b:6d:ba:db:ef:99:34:83:15:f8:d8:7e:49:ca:02:
                    e0:eb:e5:ad:c6:d2:95:5a:f6:1d:8c:5a:12:a7:ab:
                    ec:5e:69:53:a2:00:4f:42:0f:f7:e3:74:b6:0b:e8:
                    0e:43:ee:c5:e6:3e:ad:31:a6:04:0f:55:21:ab:f0:
                    82:20:6f:c0:cc:e8:3b:c3:a7:60:56:a0:7c:5f:5f:
                    5e:85:18:b6:62:56:2f:51:5a:4a:fb:ce:10:01:1d:
                    54:fb:98:dc:e2:d7:c4:73:a6:e9:e8:3e:c0:46:bf:
                    88:d1:b0:b0:13:9c:5b:13:3b:51:14:48:e8:20:69:
                    49:ff:ed:76:60:2b:9f:e1:0c:8a:5e:24:b1:83:36:
                    30:7e:28:6c:64:07:a2:a8:61:29:c4:6b:61:06:fe:
                    e3:1d:a6:a0:f3:a5:d1:57:4c:c3:5c:51:4c:e1:f9:
                    e4:3d:25:76:25:0c:11:c9:e4:83:5f:4b:68:12:be:
                    99:92:1b:52:9a:e4:7c:e4:78:b9:e7:03:aa:0e:80:
                    a1:d8:96:28:97:e6:54:6c:4d:76:ce:b6:fa:63:98:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:22:A2:A3:4B:D5:24:D0:5E:12:76:8D:7C:FF:92:8E:45:04:33:B6
            X509v3 Authority Key Identifier:
                keyid:AD:21:71:63:EB:19:53:83:9A:16:E6:F7:DD:A1:F4:24:A3:06:D0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/AD217163EB1953839A16E6F7DDA1F424A306D0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD217163EB1953839A16E6F7DDA1F424A306D0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GG3tSW9PnFmw8HFVZaasSY9JernHbonf65Djeq7oA4pG/0/34352e3137382e38302e302f32342d3234203d3e20323731363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:24:aa:53:cb:ca:88:fb:56:71:2d:68:31:b3:bf:ff:5d:
         22:e8:b0:d0:ef:98:0c:74:ae:90:98:04:b8:b0:30:cf:ac:7c:
         44:ab:b8:11:f0:ac:1f:23:df:b0:86:2b:d5:5f:b5:99:55:aa:
         03:6d:20:76:cd:a8:95:76:2d:b8:29:9a:fe:d9:b2:07:9d:35:
         9b:42:e1:71:45:d6:6f:bf:13:ab:4c:b6:1b:2f:be:67:d5:2a:
         18:f1:4e:17:53:36:a8:20:df:d3:c0:98:f0:f0:d7:77:20:4a:
         78:22:1e:02:58:9a:f6:2b:9c:49:83:2b:4f:41:9c:3c:8a:84:
         f8:c7:44:0f:e3:8c:24:1b:a8:4f:58:35:27:25:7a:a1:4b:19:
         da:be:b2:d9:9a:28:54:1e:80:b2:3e:f3:9b:ac:7b:0c:59:41:
         67:6f:23:2b:df:ae:5c:a7:0a:69:c6:57:82:5e:a1:fd:c8:2c:
         45:ad:2a:06:e8:df:ac:4b:73:5f:16:02:22:1b:5b:44:2a:be:
         b9:a7:43:31:54:fc:a0:1f:ee:ea:a2:a7:ba:41:aa:5d:6f:f8:
         7b:df:13:45:ab:8b:81:35:ec:f8:9d:21:af:f8:2b:7b:c9:e5:
         44:1f:4e:7f:dd:81:af:15:36:7b:a1:8d:a5:88:99:47:f1:7d:
         da:3b:e1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:55 2024 by rpki-client on console-fra.rpki-client.org