Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/1/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa
File:                     34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa (raw, json)
Hash identifier:          49JKmqhCPdeRR9FXeXYseHcLctr2fVr09yrCyYavdCY=
Subject key identifier:   05:5A:5E:5C:E4:64:C0:42:BC:C6:98:60:EE:11:42:2A:90:2A:D9:08
Certificate issuer:       /CN=83A996264976A35AE67618E3BBD48463A79B5F05
Certificate serial:       1657CA584D7A42F152586FB29C08E8CB6E55ACD0
Authority key identifier: 83:A9:96:26:49:76:A3:5A:E6:76:18:E3:BB:D4:84:63:A7:9B:5F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A996264976A35AE67618E3BBD48463A79B5F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/1/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa
Signing time:             Mon 07 Oct 2024 17:02:53 +0000
ROA not before:           Mon 07 Oct 2024 16:57:53 +0000
ROA not after:            Mon 06 Oct 2025 17:02:53 +0000
asID:                     268773
IP address blocks:        45.172.112.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:57:ca:58:4d:7a:42:f1:52:58:6f:b2:9c:08:e8:cb:6e:55:ac:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83A996264976A35AE67618E3BBD48463A79B5F05
        Validity
            Not Before: Oct  7 16:57:53 2024 GMT
            Not After : Oct  6 17:02:53 2025 GMT
        Subject: CN=055A5E5CE464C042BCC69860EE11422A902AD908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:48:be:e7:97:16:ba:37:66:b2:7d:0e:47:
                    4a:3c:94:b3:81:6a:83:b0:55:ea:80:7a:59:91:b4:
                    7e:56:f8:d8:d9:7c:bb:40:e2:91:af:69:5b:31:3d:
                    30:94:66:ec:d6:c7:83:58:60:95:4c:6d:69:75:32:
                    b0:30:04:b0:6d:78:ad:90:65:55:16:25:c8:96:19:
                    62:6d:77:ae:0e:4c:d4:25:93:c9:8d:79:01:0a:5c:
                    7d:8c:6d:bc:b7:9a:ad:d7:99:a4:71:f1:b1:a2:28:
                    bd:7b:54:1d:33:11:59:be:8e:d7:5a:49:7b:ff:37:
                    82:35:21:25:63:59:78:19:b0:88:e5:29:b2:75:34:
                    55:a9:d9:a2:4e:b4:ac:2d:a0:86:e1:df:5c:9c:58:
                    f3:f6:2e:88:32:17:25:49:36:a4:90:07:b1:65:3a:
                    8f:6a:a9:01:74:a1:23:9f:fd:e2:41:99:ed:ee:e9:
                    58:cf:00:5d:83:0e:a9:8d:8f:c9:eb:76:7c:39:2d:
                    79:f3:e2:8b:26:a1:9d:9c:1d:6b:cc:2a:6e:0f:0d:
                    fb:a3:c0:86:24:83:ea:08:cf:6d:a0:0f:40:9b:e8:
                    84:a0:26:37:91:db:ed:75:e5:d6:12:fa:ca:8b:b5:
                    0a:85:c5:3d:a6:6c:38:b0:3b:d6:94:ee:37:5f:cd:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5A:5E:5C:E4:64:C0:42:BC:C6:98:60:EE:11:42:2A:90:2A:D9:08
            X509v3 Authority Key Identifier:
                keyid:83:A9:96:26:49:76:A3:5A:E6:76:18:E3:BB:D4:84:63:A7:9B:5F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/1/83A996264976A35AE67618E3BBD48463A79B5F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83A996264976A35AE67618E3BBD48463A79B5F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkiWctgzKm8NS64TB2CWLhkCDQSbyGTpjYnbT3NpqeqD/1/34352e3137322e3131322e302f32322d3234203d3e20323638373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:40:3c:e8:76:22:17:99:45:c0:d9:f5:14:6e:9e:31:33:
         42:9b:9e:be:f3:2b:27:a8:53:c8:37:05:8e:09:5b:f1:59:be:
         73:1f:cf:a5:36:7a:11:ee:c5:0e:d4:5e:81:a3:f7:ac:12:95:
         97:1d:86:dd:f6:b2:d1:b5:a5:bc:55:89:de:4e:89:46:e6:d2:
         6e:5e:f4:4a:91:55:4f:f1:82:28:af:8c:13:48:70:2b:11:7c:
         2c:42:d0:ab:a8:7d:a6:8b:83:ee:a2:95:5b:4a:73:6a:a1:47:
         c1:76:31:3f:84:98:68:97:7d:a8:e0:2f:a7:7f:f7:f6:ec:28:
         f9:65:52:10:66:56:2d:ae:a1:20:c8:ee:ee:8e:0f:a1:42:82:
         0a:57:7d:72:f2:35:72:f3:a7:39:ee:31:d5:e5:1b:f1:3a:64:
         ae:b4:37:7f:36:d7:a2:91:18:69:1e:cc:18:81:4c:68:69:67:
         6a:3c:8b:9b:15:1f:56:86:e6:92:1a:c9:67:c6:42:5d:62:4a:
         5d:af:3a:21:29:fd:92:13:03:31:df:ea:99:5e:c5:09:8d:2c:
         73:19:32:c3:94:cf:c3:26:84:dd:4f:14:bc:e6:40:8d:74:ae:
         06:c3:58:45:7a:54:d4:35:8f:ae:02:e2:ac:71:2c:80:7c:9f:
         8e:9d:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:23:24 2024 by rpki-client on console-ams.rpki-client.org