Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa
File:                     34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa (raw, json)
Hash identifier:          yuB1G5ktYZ1yCTOTNPrVQGqtBs9UXp0WNJ+qlvtcP/w=
Subject key identifier:   C0:62:EF:1F:07:77:E2:6E:A7:4E:B9:5F:16:F4:F4:6C:F0:4A:74:83
Certificate issuer:       /CN=B445A2940634EDC971D4185E883796F1FFA053D1
Certificate serial:       376752326E5A67CEFCC8940C51E971BDDB5B540A
Authority key identifier: B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa
Signing time:             Thu 04 Apr 2024 13:20:11 +0000
ROA not before:           Thu 04 Apr 2024 13:15:11 +0000
ROA not after:            Thu 03 Apr 2025 13:20:11 +0000
asID:                     268364
IP address blocks:        45.238.242.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:67:52:32:6e:5a:67:ce:fc:c8:94:0c:51:e9:71:bd:db:5b:54:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B445A2940634EDC971D4185E883796F1FFA053D1
        Validity
            Not Before: Apr  4 13:15:11 2024 GMT
            Not After : Apr  3 13:20:11 2025 GMT
        Subject: CN=C062EF1F0777E26EA74EB95F16F4F46CF04A7483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d1:1e:82:72:5e:00:19:39:21:12:24:c1:2f:
                    a1:82:77:2d:d0:1f:2d:f9:9b:81:18:bf:a1:71:2e:
                    cd:a6:ea:34:07:95:a0:16:8b:b8:5f:77:38:db:d0:
                    bf:cd:3f:79:d6:e2:94:d7:3c:95:a4:51:bd:a3:57:
                    a2:3c:dc:0d:77:ce:4d:b8:c2:e5:4a:5e:36:0f:c7:
                    c0:50:07:be:51:c3:a4:ec:31:15:0e:ad:12:87:31:
                    02:96:a5:a4:3e:1d:fc:59:f5:03:0f:7a:98:a8:eb:
                    11:21:43:b3:95:bc:77:e6:f5:1b:cc:fb:77:74:2d:
                    1f:d4:69:d9:cf:93:25:94:fb:2b:5e:c5:3d:01:33:
                    b1:29:a4:3a:ca:f4:a1:67:20:aa:38:ac:9f:21:70:
                    27:01:73:9d:34:f4:30:64:a6:98:6e:9a:71:9b:d9:
                    c1:3d:d0:64:2d:d1:dd:ff:46:9b:2f:af:e6:be:31:
                    c7:71:fe:df:c3:33:48:11:b0:64:f7:03:3b:77:e7:
                    52:dd:05:3b:ae:b6:28:d8:1d:22:68:57:d5:c8:d0:
                    b0:0f:a1:b6:a7:a8:9d:4a:cc:e3:8b:07:24:ee:15:
                    09:13:0a:78:3c:fd:42:15:1a:85:8c:ec:07:84:58:
                    97:b1:0e:d6:79:13:a1:c0:c3:b5:e6:34:65:17:16:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:62:EF:1F:07:77:E2:6E:A7:4E:B9:5F:16:F4:F4:6C:F0:4A:74:83
            X509v3 Authority Key Identifier:
                keyid:B4:45:A2:94:06:34:ED:C9:71:D4:18:5E:88:37:96:F1:FF:A0:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/B445A2940634EDC971D4185E883796F1FFA053D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B445A2940634EDC971D4185E883796F1FFA053D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/1/34352e3233382e3234322e302f32342d3234203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:52:e8:10:ea:b4:a2:05:54:3e:92:33:be:95:16:8b:c9:
         b0:66:13:95:4b:42:37:b4:94:77:80:b4:aa:bd:2a:51:ed:cc:
         13:28:90:c8:3f:16:e0:02:d7:55:a0:a2:d3:91:a8:89:85:e4:
         5e:bf:c7:71:16:15:4a:ec:97:95:77:bb:b1:86:0e:d0:dc:8d:
         e5:de:7d:2e:05:f6:c8:f6:26:31:c5:a5:1e:f3:cc:25:b7:65:
         47:85:fa:f9:a5:9f:cf:d5:81:5e:78:8e:25:43:1e:b8:bb:84:
         2a:e0:79:0f:f1:1e:97:5c:1b:1b:74:ba:78:40:d4:b5:b1:3e:
         53:ac:57:fc:1c:97:37:5f:92:2e:79:9c:ce:0f:88:51:a1:2c:
         a9:f7:74:71:42:96:51:59:e5:bf:7f:84:5e:a2:50:88:d9:2e:
         b3:e8:50:40:a1:0e:98:3e:77:33:79:0c:a1:7c:fb:0f:1c:4b:
         76:22:ab:81:64:58:1f:7d:4b:57:9c:51:a6:77:e4:fe:53:92:
         6d:80:2f:ed:cc:53:40:89:70:96:c0:b7:07:33:05:11:6f:af:
         df:b2:cf:e7:d7:91:b2:8a:99:bc:6c:5d:19:22:9b:38:11:0a:
         eb:2b:d2:91:17:60:d0:84:5f:84:05:59:85:15:62:87:dd:c8:
         07:3a:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:43:38 2024 by rpki-client on console-fra.rpki-client.org