Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa
File:                     34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa (raw, json)
Hash identifier:          6F3xadu4xcU39tYaQbVxVg3KLckTvcSm5yU7g+vgRU8=
Subject key identifier:   8E:07:23:F1:FA:93:C7:AB:FD:BC:D8:ED:3A:EB:3E:18:1F:21:B6:83
Certificate issuer:       /CN=C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D
Certificate serial:       040CB49A4A289DD0F1552ED11DADFE16D93B9795
Authority key identifier: C1:1E:FD:1F:1A:BD:FD:33:EA:5F:11:EE:A1:ED:23:00:84:2E:9A:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa
Signing time:             Mon 01 Jul 2024 02:14:31 +0000
ROA not before:           Mon 01 Jul 2024 02:09:31 +0000
ROA not after:            Mon 30 Jun 2025 02:14:31 +0000
asID:                     269463
IP address blocks:        45.187.108.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0c:b4:9a:4a:28:9d:d0:f1:55:2e:d1:1d:ad:fe:16:d9:3b:97:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D
        Validity
            Not Before: Jul  1 02:09:31 2024 GMT
            Not After : Jun 30 02:14:31 2025 GMT
        Subject: CN=8E0723F1FA93C7ABFDBCD8ED3AEB3E181F21B683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:fb:cb:95:23:a5:32:b6:5e:df:86:04:df:
                    4a:6c:bf:07:fe:50:4a:4c:09:5d:40:96:5d:30:c1:
                    e9:21:c9:84:0e:14:4c:0a:02:6f:c0:2d:8a:c2:0e:
                    12:06:24:28:49:1e:1c:18:70:1a:02:c8:a4:de:b9:
                    71:99:ae:d4:51:79:e4:a4:35:bc:7f:87:f6:23:9d:
                    c4:18:72:84:7f:23:f2:97:4d:08:ce:c7:49:48:40:
                    16:d9:a4:5c:48:29:69:de:6d:d3:7c:ed:2d:66:5d:
                    12:62:50:6e:d0:02:da:77:d3:f8:05:68:45:58:e0:
                    23:a5:84:3a:5f:f0:1b:23:aa:f0:83:dd:b7:14:9a:
                    82:8e:1f:11:dd:fc:d4:12:92:38:28:ce:f6:37:24:
                    73:d9:0a:a4:1b:2c:7a:4e:48:6d:f7:db:05:f2:1e:
                    19:6b:10:34:71:c9:71:0c:d6:0c:50:47:8b:6c:08:
                    5d:23:ca:22:90:73:b7:66:68:5a:3e:41:a1:31:2c:
                    53:71:44:42:f8:58:f1:05:f1:2b:c8:e8:d9:f9:e4:
                    a2:74:de:62:ae:7d:01:2c:b1:08:29:0b:66:cb:f0:
                    56:ec:d3:4f:52:b6:37:13:54:b9:b6:c8:e2:60:2a:
                    cd:b7:b5:ac:95:03:51:e6:5c:6a:30:60:f7:e3:fc:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:23:F1:FA:93:C7:AB:FD:BC:D8:ED:3A:EB:3E:18:1F:21:B6:83
            X509v3 Authority Key Identifier:
                keyid:C1:1E:FD:1F:1A:BD:FD:33:EA:5F:11:EE:A1:ED:23:00:84:2E:9A:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11EFD1F1ABDFD33EA5F11EEA1ED2300842E9A2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/34352e3138372e3130382e302f32322d3234203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:20:f4:9d:e0:7a:16:7a:70:c0:e2:4e:9f:06:70:e8:77:
         5a:8a:e3:3b:ae:7f:de:e6:bb:78:2d:b2:ac:13:66:0d:31:34:
         3b:27:b8:4e:a5:34:d9:96:aa:51:5c:23:73:ff:b8:45:f0:5e:
         27:e2:d0:62:c9:d4:1f:a4:c9:ea:81:43:7f:05:2c:87:65:2c:
         e1:3f:13:39:18:61:14:f8:55:7f:52:8c:5a:b1:62:c1:79:d3:
         57:55:7f:64:54:99:4a:5e:91:42:0f:15:34:40:d6:dd:6c:e2:
         d8:30:cb:21:d6:3e:18:f4:17:f5:a4:ce:33:4f:2a:7d:e0:dc:
         32:46:cb:c6:0b:ea:d7:32:b2:83:34:3b:69:f2:20:4d:c4:c4:
         ee:7e:bc:af:a3:63:b6:c5:40:ba:ff:57:2e:ee:12:c3:7c:fa:
         bd:4f:8f:c2:ef:74:8e:34:01:95:1d:8c:37:5d:2d:59:d3:b3:
         01:10:83:32:be:1d:21:d3:d6:8b:ac:91:31:df:64:20:df:66:
         85:e3:0c:3e:89:7d:89:a0:26:f4:9b:97:17:c4:c4:eb:39:3e:
         a7:a3:e6:be:e2:63:ed:e9:2c:76:a5:cc:24:5a:c1:b4:4f:bb:
         8f:61:9a:4d:38:78:e5:30:2a:81:9c:8c:7e:a3:b6:1a:ad:80:
         f4:56:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:25:23 2024 by rpki-client on console-ams.rpki-client.org