Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3232203d3e20323638333634.roa
File:                     34352e3233382e3234302e302f32322d3232203d3e20323638333634.roa (raw, json)
Hash identifier:          k2WO7UlBWHO+vbCal14EqCvvf7/GI5ax3IdQYLPn0c0=
Subject key identifier:   33:D6:6D:00:E9:38:FF:3A:1D:93:9B:03:77:E6:6F:9F:08:43:C5:C3
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       2218CA4525B96773AD27DF93532134D4CDBB6965
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3232203d3e20323638333634.roa
Signing time:             Thu 04 Apr 2024 13:20:11 +0000
ROA not before:           Thu 04 Apr 2024 13:15:11 +0000
ROA not after:            Thu 03 Apr 2025 13:20:11 +0000
asID:                     268364
IP address blocks:        45.238.240.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:18:ca:45:25:b9:67:73:ad:27:df:93:53:21:34:d4:cd:bb:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Apr  4 13:15:11 2024 GMT
            Not After : Apr  3 13:20:11 2025 GMT
        Subject: CN=33D66D00E938FF3A1D939B0377E66F9F0843C5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:ec:cb:5e:f4:91:b1:8f:38:f4:db:42:82:
                    e4:06:a5:33:93:98:d9:b4:6c:55:9c:e7:34:dc:15:
                    9a:28:f1:37:a1:02:95:81:dd:7b:0b:78:b5:cc:b9:
                    9c:93:95:d2:06:0e:4e:46:64:88:aa:d1:c1:45:bf:
                    83:66:9a:8b:c9:5b:2d:09:49:7b:5c:7e:1d:fd:1d:
                    55:8a:d3:0f:36:02:7d:6a:5f:48:6d:e5:04:e6:c1:
                    d5:02:1b:ac:fa:9b:75:5d:09:95:ba:60:e6:5f:a3:
                    a9:38:61:e2:b8:a6:c9:d9:de:bf:dc:56:50:84:8d:
                    f8:a9:f7:ba:91:6d:2f:38:39:13:00:a6:a0:8f:7f:
                    44:6c:48:dc:de:bb:5d:cc:63:2b:90:73:b4:0a:18:
                    41:7a:fb:01:54:f6:c0:4d:f0:0e:07:5a:b7:ee:dc:
                    9b:8d:bf:4f:c7:7a:14:5d:c9:c2:2b:41:2f:6d:b5:
                    ea:3f:b9:aa:89:83:b4:cd:81:b5:33:b1:08:c8:8a:
                    84:aa:0f:1e:98:ac:2c:8b:88:a6:c0:9f:09:ae:f7:
                    1d:5b:f6:a2:31:1a:61:95:97:79:99:5d:a1:a2:61:
                    1a:e4:28:65:e9:3d:72:9a:69:cf:4b:d8:78:88:cb:
                    84:2d:6b:c0:57:9c:cb:61:14:68:f6:57:ed:4e:dd:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D6:6D:00:E9:38:FF:3A:1D:93:9B:03:77:E6:6F:9F:08:43:C5:C3
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234302e302f32322d3232203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:3c:12:68:41:34:13:62:ca:9e:71:f9:c3:01:9e:2e:78:18:
         27:52:52:d4:68:18:80:48:65:29:8b:37:28:26:9c:73:78:fc:
         a2:c6:9c:d8:27:d9:b4:54:4b:33:10:0b:e3:f2:30:b7:71:9d:
         7d:ba:a8:2f:7c:6b:89:69:b3:8c:3e:e4:6c:f9:f0:91:4b:a6:
         c8:eb:40:d2:13:d2:6e:e0:48:8f:9b:7a:d0:36:57:51:a5:a6:
         84:8a:80:b2:81:ff:6e:8b:8b:87:d2:94:50:4a:07:d2:9c:2d:
         f0:2e:d7:b9:84:1c:05:af:a2:31:b6:07:bf:8b:f8:b4:5d:4f:
         24:6f:33:46:d8:40:69:94:db:4a:9b:0d:5f:b4:86:51:b2:cc:
         83:26:a7:08:2b:4a:6c:17:c2:75:14:4c:1b:83:0d:8c:48:11:
         11:04:06:0c:cd:49:16:94:06:fc:d9:78:a7:07:29:14:5d:2c:
         52:e1:7f:1a:b7:8f:19:34:8d:18:54:82:36:ab:e7:d1:fd:8e:
         cd:27:e0:07:3e:d4:6c:bb:8e:97:92:24:c6:3d:42:89:bd:ef:
         70:2c:ec:d9:c0:24:99:20:89:bc:4a:2b:eb:d0:d9:c3:f3:29:
         43:b3:dd:c2:57:61:f4:fc:69:6f:0d:4d:8c:dd:38:9c:2a:16:
         69:6c:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:43:38 2024 by rpki-client on console-fra.rpki-client.org