Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/34352e3137342e38302e302f32322d3234203d3e20323638383837.roa
File:                     34352e3137342e38302e302f32322d3234203d3e20323638383837.roa (raw, json)
Hash identifier:          aaXZT91F1f8zPV+T9SPKKV7+dAxCR95LRa3OEGIi/ek=
Subject key identifier:   E5:FF:1D:84:B2:08:8D:4D:B2:F0:96:B4:16:3F:B7:56:46:8C:05:56
Certificate issuer:       /CN=9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E
Certificate serial:       6C0F69CD34309E17E49B124178B2EA0836358357
Authority key identifier: 99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/34352e3137342e38302e302f32322d3234203d3e20323638383837.roa
Signing time:             Thu 04 Apr 2024 19:43:52 +0000
ROA not before:           Thu 04 Apr 2024 19:38:52 +0000
ROA not after:            Thu 03 Apr 2025 19:43:52 +0000
asID:                     268887
IP address blocks:        45.174.80.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:69:cd:34:30:9e:17:e4:9b:12:41:78:b2:ea:08:36:35:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E
        Validity
            Not Before: Apr  4 19:38:52 2024 GMT
            Not After : Apr  3 19:43:52 2025 GMT
        Subject: CN=E5FF1D84B2088D4DB2F096B4163FB756468C0556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:1b:d5:29:f1:c3:93:92:28:e9:03:fd:42:
                    0d:f3:4f:c3:39:4c:3b:d5:4f:78:6b:59:66:cc:e2:
                    1b:32:3d:5a:60:0e:b9:22:66:c1:01:a8:1a:97:28:
                    46:1b:a8:fc:c2:42:a6:51:01:fa:04:5b:8a:16:4d:
                    a8:1d:8b:18:af:3f:5d:59:a8:4a:c7:24:e0:a0:10:
                    54:bd:e4:83:ba:96:8f:8a:d7:af:6e:e1:7b:45:1f:
                    4d:52:42:19:6b:e2:92:44:62:1d:73:15:06:da:08:
                    4b:8c:79:3e:bd:a9:0b:0e:cc:4b:eb:aa:83:3b:7f:
                    a5:2f:46:11:8e:98:a3:f2:fa:d1:9c:e8:23:a8:d7:
                    b2:4b:4f:62:61:e4:55:ac:fb:b5:19:27:6f:43:f5:
                    61:2c:90:c0:fb:a9:86:f5:08:77:b1:70:ab:f6:61:
                    9b:49:14:64:41:8d:73:17:c6:6f:a6:48:4c:99:c6:
                    de:37:bb:a5:bd:a9:21:12:9b:12:fa:6c:e7:5b:ce:
                    2d:97:93:2c:ef:2d:a8:40:6a:f9:1a:ab:f8:a7:4e:
                    a3:47:1a:b3:42:29:d6:f2:a1:8c:78:5e:e7:60:fc:
                    48:b5:bb:3f:f9:1a:6c:06:9a:19:2b:d1:a1:53:3b:
                    d9:0e:84:00:9d:df:be:b5:55:20:c2:e9:d9:a0:fc:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:1D:84:B2:08:8D:4D:B2:F0:96:B4:16:3F:B7:56:46:8C:05:56
            X509v3 Authority Key Identifier:
                keyid:99:26:DA:4D:EE:27:83:7F:B8:0C:7A:7D:43:11:F5:53:7F:A2:AB:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9926DA4DEE27837FB80C7A7D4311F5537FA2AB7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVidFvAqRqNAmomijAfxfzzpEttv7sQ33JYDBx8X8xep/1/34352e3137342e38302e302f32322d3234203d3e20323638383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:c8:a4:80:56:32:eb:06:22:cd:f4:2f:7e:e0:28:07:d1:59:
         d5:ef:a6:e1:ff:e6:e0:b8:d9:02:64:8d:58:ee:c0:60:90:84:
         78:ca:a9:00:81:a7:c1:b5:65:29:58:7a:ee:c4:fe:8b:76:99:
         96:99:2a:d4:33:64:8a:df:d8:2d:df:c6:ad:85:e4:1c:cb:8a:
         95:76:76:2f:5c:de:96:f5:c9:3e:24:c4:6f:1e:9f:0f:9b:c8:
         72:48:0f:d5:99:a8:47:f6:6a:0b:97:ff:86:cb:93:47:fc:06:
         2a:16:20:0c:f0:5f:4b:75:fd:d9:4a:1e:72:89:db:79:ef:86:
         21:6e:ca:e5:5a:02:06:41:43:fa:0a:d1:82:cb:97:9e:c4:d8:
         4a:7b:b2:04:1c:c0:11:1d:9b:bd:f9:75:a6:de:b2:b1:bf:1b:
         14:cc:5a:83:18:c9:69:98:91:02:f7:37:fc:4a:6f:34:c6:8c:
         fd:ff:86:52:1a:24:6f:8c:fa:0b:d7:64:61:cf:a1:1c:c6:2e:
         2c:46:83:0e:27:f8:a1:bd:40:97:d1:c1:2f:85:8c:c7:bd:dc:
         9e:8e:88:e3:03:c7:11:f9:fd:90:bc:2e:54:38:e1:2e:2d:6d:
         c6:e4:17:41:bd:0f:2f:94:d5:0a:bc:73:7b:11:2c:7b:00:c1:
         fa:38:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:53 2024 by rpki-client on console-ams.rpki-client.org