Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier:          Yma0luQV9oA5oZFyIoEABzUld6BSuarXI1OFj3v6TOs=
Subject key identifier:   82:FF:A3:51:46:EE:7E:EF:3A:71:A9:78:E1:F8:99:2F:27:3D:94:7E
Certificate issuer:       /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial:       2DD7E3F219D3AE196D20E177682C2269122818D7
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa
Signing time:             Thu 14 Dec 2023 13:31:31 +0000
ROA not before:           Thu 14 Dec 2023 13:26:31 +0000
ROA not after:            Thu 12 Dec 2024 13:31:31 +0000
asID:                     268035
IP address blocks:        45.168.14.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:e3:f2:19:d3:ae:19:6d:20:e1:77:68:2c:22:69:12:28:18:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
        Validity
            Not Before: Dec 14 13:26:31 2023 GMT
            Not After : Dec 12 13:31:31 2024 GMT
        Subject: CN=82FFA35146EE7EEF3A71A978E1F8992F273D947E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:4a:bc:5f:81:68:ec:31:43:eb:ea:22:3f:
                    55:68:88:de:2e:02:31:5a:b2:12:a8:ea:a2:8d:e3:
                    72:be:b5:4d:cf:7b:ab:4e:fb:aa:8b:10:48:43:5c:
                    55:ed:2b:03:22:37:c3:43:df:8d:d2:d6:74:08:b1:
                    15:29:4b:f9:6a:2d:2c:78:6b:08:db:92:bf:0c:bb:
                    01:f1:81:7e:1f:05:cd:62:e2:bc:da:6d:30:b7:6e:
                    62:74:45:5b:98:3a:c7:3a:73:7b:ed:36:3b:dd:95:
                    00:a9:4d:28:d4:b3:fa:78:8a:b7:97:3c:5e:f3:27:
                    ee:8a:91:0e:ce:32:f2:29:d0:d9:be:9a:46:33:a1:
                    db:0c:0e:ea:f0:26:d5:32:b4:a4:3a:b3:e7:d2:a9:
                    b0:bf:90:ff:78:ff:54:9a:c0:25:cf:84:ad:a9:cb:
                    6e:12:ac:be:97:84:ea:7f:9c:1c:02:47:17:73:4e:
                    dd:e6:1d:45:92:8e:77:46:1a:b4:d1:c2:8e:0d:c0:
                    75:9f:2a:a5:98:84:d8:ff:21:51:ea:39:f5:10:91:
                    28:a8:ab:79:5e:74:22:9f:19:aa:7c:85:97:44:16:
                    c4:3a:f2:af:b6:ab:f4:60:63:33:bb:cb:cc:d0:ff:
                    52:93:10:7e:2a:b1:0c:da:5c:1d:c5:2c:0c:83:10:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:A3:51:46:EE:7E:EF:3A:71:A9:78:E1:F8:99:2F:27:3D:94:7E
            X509v3 Authority Key Identifier:
                keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32332d3233203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:05:05:30:70:9f:60:ab:74:ca:a7:39:12:68:fb:61:dc:07:
         8b:53:81:0e:fc:3d:ac:6a:df:3a:70:12:a3:45:ac:7b:ab:c9:
         e3:45:6c:01:a0:0f:63:3a:56:4a:e7:0f:53:ee:20:ff:24:e3:
         a5:07:d5:f5:ab:5b:0e:b4:33:b5:a6:81:57:95:6e:26:82:1d:
         cc:01:f6:28:80:19:36:49:7b:f7:38:64:27:f6:e7:61:9d:14:
         39:11:ab:92:8b:e1:6b:9d:df:ff:16:02:cc:09:89:99:47:75:
         86:dc:f8:bd:eb:34:7b:03:25:95:2c:36:57:e4:35:18:66:67:
         e1:84:6d:e2:e6:f2:83:15:f1:95:fe:b2:3f:56:4b:0b:46:c8:
         be:5c:97:b6:97:6a:da:4f:68:bc:b2:4e:ee:00:a6:b7:99:eb:
         39:a0:a6:c2:75:18:54:35:bf:a7:32:ce:ba:75:7e:39:84:d4:
         18:5c:db:28:95:81:5f:e6:6a:9f:58:2e:23:d1:e4:74:2a:ff:
         8f:f4:7e:8e:a6:6f:2e:f0:7a:38:6b:46:d4:5f:77:02:dc:5f:
         fb:47:58:ae:25:f9:fd:a5:ec:39:8c:38:b7:0b:54:e6:d2:d6:
         1c:e7:16:a5:5b:8d:ce:37:23:25:8c:55:9a:fe:54:82:b6:63:
         7a:03:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 00:15:56 2024 by rpki-client on console-fra.rpki-client.org