Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa
File:                     34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa (raw, json)
Hash identifier:          xICUCfhvCfHx0WPQO/+N4NtNghqpLvoWm83KRqZ6egE=
Subject key identifier:   36:9E:AE:52:26:CD:F6:E8:FE:EF:47:0F:9C:97:A4:B7:79:3D:56:7B
Certificate issuer:       /CN=A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6
Certificate serial:       067D1E98B50EFF76D3DA0CACAF9521E66A6143DF
Authority key identifier: A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa
Signing time:             Thu 04 Apr 2024 00:42:55 +0000
ROA not before:           Thu 04 Apr 2024 00:37:55 +0000
ROA not after:            Thu 03 Apr 2025 00:42:55 +0000
asID:                     268166
IP address blocks:        45.170.180.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7d:1e:98:b5:0e:ff:76:d3:da:0c:ac:af:95:21:e6:6a:61:43:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6
        Validity
            Not Before: Apr  4 00:37:55 2024 GMT
            Not After : Apr  3 00:42:55 2025 GMT
        Subject: CN=369EAE5226CDF6E8FEEF470F9C97A4B7793D567B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:9b:31:c4:60:54:91:6e:54:ca:9a:d8:15:
                    ce:f3:75:99:30:0b:24:79:ed:55:82:6c:03:4e:a0:
                    f7:8d:c5:2a:6b:5a:53:c9:bf:a7:7e:61:a3:d3:7b:
                    65:12:58:70:4a:fa:3c:09:b7:33:7f:ad:69:d5:b0:
                    c0:f9:fa:21:fc:b8:d9:69:c2:cd:af:27:45:11:f8:
                    88:0a:cf:d7:a1:6c:12:1a:a8:25:7b:03:94:bb:ef:
                    10:b6:a8:b4:88:a9:95:18:25:3f:a0:cc:dd:58:5a:
                    c2:07:26:81:74:9d:ab:b8:79:7f:42:8f:72:75:33:
                    63:78:bd:40:02:8c:a9:eb:a4:8e:eb:77:72:46:27:
                    71:17:91:41:a5:96:53:04:9d:80:d8:36:80:bc:6a:
                    ac:0a:7a:f6:f2:99:88:2b:7f:68:49:b9:91:25:79:
                    b7:20:42:34:bd:54:25:02:2c:e3:f7:f6:69:bb:29:
                    99:61:8e:6c:df:b2:4a:68:10:0c:ec:07:5f:ee:da:
                    83:1e:a8:b1:a6:dc:df:a1:e3:75:aa:41:cd:6f:6f:
                    9a:20:55:c4:c3:57:12:ca:cd:41:7f:57:f6:68:1e:
                    94:61:58:b0:5d:82:6d:ba:8d:55:af:3c:97:5c:e6:
                    fb:67:f6:5b:6d:3c:95:63:19:cb:5e:2f:8c:c3:8f:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:AE:52:26:CD:F6:E8:FE:EF:47:0F:9C:97:A4:B7:79:3D:56:7B
            X509v3 Authority Key Identifier:
                keyid:A5:F5:DB:F9:5A:DD:EC:D0:94:90:4E:D7:FC:75:F9:D7:D5:99:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5F5DBF95ADDECD094904ED7FC75F9D7D5994CD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/1/34352e3137302e3138302e302f32322d3232203d3e20323638313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:5b:dc:4e:7e:0d:13:f9:bc:31:ab:b5:fc:98:95:95:92:12:
         b1:15:8c:1f:09:a6:2a:1a:dc:87:fe:32:f8:c9:00:7c:81:73:
         32:ff:94:18:f6:e4:71:18:b9:1d:fb:f1:80:59:02:56:a1:ee:
         43:c1:66:5b:12:bf:79:2d:fd:b5:a3:ea:1d:5f:f1:a7:48:35:
         55:1d:43:9b:ec:f7:04:34:e7:9f:cb:be:a8:c9:16:dc:5b:cf:
         14:7c:1a:1b:2b:d5:b3:7d:00:e3:5b:ec:1b:7a:e3:f7:c3:5b:
         bd:70:a2:13:f1:d7:ea:8b:75:66:a5:02:38:1b:a6:6e:2f:92:
         71:ab:bd:21:c0:af:d7:c6:a4:0a:d1:94:8c:36:4c:f5:88:91:
         ad:d7:62:27:25:fb:17:20:f7:1f:50:39:dd:a0:fc:6c:7c:02:
         10:b3:9f:69:7a:0e:b9:ad:1b:4e:25:50:ce:c4:87:a6:9c:6f:
         fe:26:a8:e3:d0:c6:cc:ce:62:2d:a4:18:a6:2e:80:69:2f:48:
         d8:62:06:7c:d3:42:08:66:b8:1a:d7:08:0a:d1:2f:39:1b:73:
         98:55:1c:af:cd:76:6b:1c:1e:73:00:fb:ce:af:2f:17:69:4e:
         e4:99:e3:2f:01:5a:8d:0c:79:a0:2f:fa:10:a3:40:3d:52:eb:
         bf:25:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org