Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3238203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3238203d3e20323638333634.roa (raw, json)
Hash identifier:          LCQEude20e5hYQuce9J/mYp/Qbg5aWjnF0tDcco2LtM=
Subject key identifier:   C6:E0:5B:FA:E2:FA:F3:18:08:B0:83:15:A8:DB:9F:8C:11:33:37:42
Certificate issuer:       /CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
Certificate serial:       3B6218EDCEAA601B8ED64E307E6E802231A5E324
Authority key identifier: 9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3238203d3e20323638333634.roa
Signing time:             Thu 04 Jul 2024 17:45:32 +0000
ROA not before:           Thu 04 Jul 2024 17:40:32 +0000
ROA not after:            Thu 03 Jul 2025 17:45:32 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 28

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:62:18:ed:ce:aa:60:1b:8e:d6:4e:30:7e:6e:80:22:31:a5:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B0CF4B403A02AA915DEB2A821B760D4F7AD1555
        Validity
            Not Before: Jul  4 17:40:32 2024 GMT
            Not After : Jul  3 17:45:32 2025 GMT
        Subject: CN=C6E05BFAE2FAF31808B08315A8DB9F8C11333742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:e2:75:fc:3d:cd:61:fe:56:fd:69:23:01:
                    b3:88:79:d3:40:0b:02:2f:63:1d:4f:59:1d:54:d9:
                    26:f6:6d:f9:17:87:1e:f2:af:5f:4a:2e:3f:ac:24:
                    87:d0:92:69:cf:92:c5:fd:9d:66:ef:e2:c5:2c:e7:
                    e7:bf:7a:c7:a4:ca:76:63:72:68:d3:65:84:99:a7:
                    12:52:77:d5:d0:03:52:d8:ba:39:bd:b3:23:89:5c:
                    b9:12:51:36:35:61:5d:da:f7:33:02:7d:94:6f:43:
                    f1:3b:52:d9:94:39:e2:59:b9:41:d3:5a:6f:8e:80:
                    c6:4c:f8:a1:fb:9d:37:4f:70:28:64:48:3d:c7:6a:
                    02:c6:da:69:c8:f4:4e:b1:fe:43:0d:28:e1:75:01:
                    36:a9:ef:2b:de:db:dd:5d:0c:8d:94:1b:12:fd:da:
                    20:37:2d:0f:fa:03:bd:dd:7e:f9:2b:be:84:51:2c:
                    d0:2f:91:ce:63:c3:f5:7c:10:da:2b:42:a7:c8:68:
                    f1:73:f1:99:b1:56:96:e5:cf:ec:2c:c7:51:03:cc:
                    e0:f2:15:90:e9:b1:16:b6:24:4a:a4:55:52:60:00:
                    0f:35:e5:f4:b9:8e:10:78:cb:bd:57:7d:78:ba:ff:
                    48:d6:c2:ea:77:7e:52:8c:56:b6:f9:d8:93:97:8d:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E0:5B:FA:E2:FA:F3:18:08:B0:83:15:A8:DB:9F:8C:11:33:37:42
            X509v3 Authority Key Identifier:
                keyid:9B:0C:F4:B4:03:A0:2A:A9:15:DE:B2:A8:21:B7:60:D4:F7:AD:15:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B0CF4B403A02AA915DEB2A821B760D4F7AD1555.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234302e302f32322d3238203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:2e:79:a7:40:e4:39:92:07:06:2c:26:29:1a:b6:f4:a1:
         84:5f:7a:69:dd:69:24:2c:98:9d:31:d1:b2:3f:b7:b9:21:a3:
         a9:08:2f:35:0e:1f:56:33:5c:30:0c:39:40:45:9c:f9:72:64:
         5d:4a:00:5a:46:a1:6b:9a:d7:01:7a:65:6a:d6:fa:03:db:c4:
         bc:a9:84:10:42:d8:16:9f:79:6f:ec:3f:e8:fc:da:62:a4:84:
         9b:23:1f:71:3a:93:77:84:fe:13:99:b1:e6:3d:88:c7:81:58:
         8d:ab:52:8e:98:04:e5:5e:20:41:9e:be:c6:d8:52:0c:c4:56:
         2e:98:93:4b:10:60:3b:99:be:e7:4d:19:21:c9:6f:95:91:5d:
         8a:77:f4:10:b4:18:37:63:59:2d:4e:f2:9d:1f:a9:be:97:32:
         f9:cb:96:f6:25:2e:62:31:30:21:fa:e4:a6:88:16:3b:2e:46:
         f3:fc:a7:a0:13:4d:00:2a:bc:d3:4e:da:b5:f7:58:15:78:2c:
         7e:9a:a9:05:72:1e:9b:da:81:ae:46:8a:69:04:24:2b:30:1c:
         bf:a8:f4:11:4f:82:9e:f3:b3:62:4c:f8:e8:c0:50:45:39:aa:
         9b:64:d2:c3:97:19:33:86:e7:5a:c9:68:d0:2a:1d:1a:1e:3a:
         02:d5:3d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 16:01:27 2024 by rpki-client on console-ams.rpki-client.org