Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa
File:                     34352e3136382e39302e302f32342d3234203d3e20323638303536.roa (raw, json)
Hash identifier:          9uMC0krKxaJcJZ2O/lz+9ClhWE4/ciAUaW8K4JhEyiE=
Subject key identifier:   F9:10:C9:D4:E4:43:C8:9A:F4:E4:8B:18:0C:F0:BB:D0:AC:03:9C:97
Certificate issuer:       /CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Certificate serial:       51BD9FD3479A3E6B1B301AD196D97E740738ECD3
Authority key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa
Signing time:             Thu 04 Apr 2024 03:41:14 +0000
ROA not before:           Thu 04 Apr 2024 03:36:14 +0000
ROA not after:            Thu 03 Apr 2025 03:41:14 +0000
asID:                     268056
IP address blocks:        45.168.90.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bd:9f:d3:47:9a:3e:6b:1b:30:1a:d1:96:d9:7e:74:07:38:ec:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
        Validity
            Not Before: Apr  4 03:36:14 2024 GMT
            Not After : Apr  3 03:41:14 2025 GMT
        Subject: CN=F910C9D4E443C89AF4E48B180CF0BBD0AC039C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:69:24:10:58:8a:db:05:12:8a:f3:53:37:
                    d6:9e:26:92:45:04:13:9f:b0:7f:1f:d6:fd:39:47:
                    93:dc:9a:f3:e8:67:0c:bd:ce:bc:41:c3:34:0a:16:
                    35:d5:da:2d:dd:22:1b:6c:40:7b:a7:cc:26:ea:a9:
                    a1:52:3c:43:b1:31:a0:4b:ba:8f:35:37:7f:d9:a1:
                    ae:5c:71:e5:87:ae:ba:e3:39:8f:15:53:04:9d:b2:
                    04:5c:09:45:33:da:b6:78:dc:b1:61:01:69:0c:1c:
                    c1:1f:a3:13:c8:c5:e0:bc:f9:25:16:c3:fc:a8:77:
                    c4:c5:01:31:f9:9a:f5:bd:2d:4f:73:bc:a2:92:26:
                    2c:65:a5:bf:59:ff:fb:60:7f:94:b0:da:d9:25:e2:
                    5f:69:43:bb:e8:26:bc:39:4d:d4:e9:c4:ad:c3:85:
                    ea:4d:25:91:c5:93:e7:a9:4b:c0:b5:6f:74:0c:53:
                    1a:be:f1:75:22:55:3f:ac:15:97:b4:50:61:98:37:
                    bc:d5:82:ed:a4:9c:bd:bc:1f:2c:8a:5f:9d:55:a9:
                    23:a2:b2:29:46:31:73:58:e8:7c:11:f3:24:be:21:
                    d9:1c:5d:a2:ec:cd:d6:b8:e7:a3:6b:65:66:b1:52:
                    af:d1:7d:c4:7d:be:0f:a1:69:a8:99:3c:c2:33:6b:
                    c0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:10:C9:D4:E4:43:C8:9A:F4:E4:8B:18:0C:F0:BB:D0:AC:03:9C:97
            X509v3 Authority Key Identifier:
                keyid:AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32342d3234203d3e20323638303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:8c:9b:e6:d1:8f:f9:f7:bc:0e:0b:b9:d1:00:9c:4f:c1:61:
         59:bb:83:d3:93:fb:a2:6f:e5:bc:47:b6:50:85:3f:c9:5c:39:
         54:94:31:aa:8b:ed:3c:9c:57:b9:30:36:45:c9:98:b9:97:4f:
         80:4f:b6:ca:38:a8:9a:fd:b5:b3:91:db:65:bf:1f:49:d3:f5:
         b4:6b:cd:22:84:f5:45:02:2e:24:a6:69:bb:da:7c:dd:60:a1:
         1e:4c:18:ab:54:db:a7:50:80:db:e3:33:e4:2b:90:74:bd:c4:
         94:a5:66:4b:ca:1d:26:03:4a:d9:1c:7e:5f:93:bd:4e:ec:a1:
         60:24:2a:df:15:5a:71:a7:5e:b6:22:61:55:ba:72:7c:99:92:
         80:7e:e6:1a:9a:0c:d4:50:a6:93:25:85:2f:c1:a5:69:ea:7c:
         6c:b9:2a:b2:8f:07:48:13:cc:31:79:2b:01:58:88:27:73:05:
         39:1c:ee:10:3e:d9:e5:35:73:10:24:24:8f:0a:6c:04:63:2a:
         ba:1b:e6:df:93:a0:5b:d8:c3:29:64:62:04:aa:ab:bb:bc:44:
         c3:95:94:2e:df:2e:ee:15:15:c7:38:c9:7b:8e:82:99:c7:72:
         23:96:77:6d:00:f0:15:29:73:31:06:a5:6d:58:8a:68:33:7e:
         81:e0:e4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 06:56:01 2024 by rpki-client on console-ams.rpki-client.org