Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa
File:                     34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa (raw, json)
Hash identifier:          Ix65feAy3b7k7KSqPLERpDk5o00ZD+hTXbygehXjKQ4=
Subject key identifier:   7F:FC:77:D8:2F:24:57:3D:E9:9D:AF:5F:49:37:6A:C1:7E:95:97:14
Certificate issuer:       /CN=48B65496F1100A4BEC2A103360694784DE4E87AA
Certificate serial:       2270D829FF5DDB35233F300B9E83F92CA1C9149C
Authority key identifier: 48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa
Signing time:             Wed 03 Apr 2024 19:00:12 +0000
ROA not before:           Wed 03 Apr 2024 18:55:12 +0000
ROA not after:            Thu 03 Apr 2025 19:00:12 +0000
asID:                     268564
IP address blocks:        45.162.212.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:70:d8:29:ff:5d:db:35:23:3f:30:0b:9e:83:f9:2c:a1:c9:14:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B65496F1100A4BEC2A103360694784DE4E87AA
        Validity
            Not Before: Apr  3 18:55:12 2024 GMT
            Not After : Apr  3 19:00:12 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:06:24:dc:30:15:f2:ce:13:47:85:d9:53:92:
                    0e:8c:71:e4:f0:b6:4c:57:48:3f:6c:b7:a3:cb:e9:
                    22:05:c2:15:cf:9a:8e:66:13:4b:6a:13:0c:42:00:
                    55:41:cb:dc:13:43:97:af:69:37:10:4f:94:84:0e:
                    03:9b:44:92:01:93:5f:a3:8a:0c:c7:10:65:73:c4:
                    eb:27:db:f5:4c:12:7e:67:61:89:82:3e:c6:45:e6:
                    bd:8d:cb:70:63:4e:c6:ff:e0:56:54:d7:11:a4:0d:
                    8c:46:b1:82:18:56:c2:c6:ce:80:8a:55:a5:b7:83:
                    4c:06:4c:1f:e8:2c:07:6d:4a:3e:4d:58:4f:eb:27:
                    5d:0a:be:01:e8:f3:4d:dd:73:ba:83:72:35:15:88:
                    4e:58:8a:7e:0f:3b:ea:8f:93:cb:89:c9:cc:43:7f:
                    18:60:1e:dc:be:68:a3:ca:8f:bc:01:28:65:b4:9c:
                    8d:56:72:25:82:ee:3a:7a:e9:cf:9d:c0:89:5a:35:
                    68:7b:ef:bc:ad:b3:14:fb:e9:ee:75:16:61:95:0e:
                    e3:d4:28:4d:2b:6c:b6:d1:6a:0f:69:5f:bd:4c:3e:
                    ed:64:fe:20:c7:45:dd:c4:40:90:67:c1:ec:f9:c4:
                    20:28:e1:cb:d4:67:cf:7a:c9:cd:16:2c:9c:09:6a:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:77:D8:2F:24:57:3D:E9:9D:AF:5F:49:37:6A:C1:7E:95:97:14
            X509v3 Authority Key Identifier:
                keyid:48:B6:54:96:F1:10:0A:4B:EC:2A:10:33:60:69:47:84:DE:4E:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/48B65496F1100A4BEC2A103360694784DE4E87AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B65496F1100A4BEC2A103360694784DE4E87AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/1/34352e3136322e3231322e302f32322d3232203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:72:5c:d2:a8:05:bd:87:22:37:54:8c:a1:75:ac:aa:84:
         3e:59:3e:74:54:b3:af:aa:8c:14:a5:d8:7d:d4:48:78:dc:fb:
         83:9a:09:54:44:86:5a:fd:91:58:2b:8f:ea:a6:93:01:e9:23:
         4e:e8:6e:7b:5d:53:91:0f:05:8f:0d:ae:d6:3e:15:41:3f:c7:
         20:a5:df:32:bc:b2:07:e3:34:09:2b:86:f8:0f:ca:ad:8d:f3:
         60:28:11:32:ed:3d:eb:b2:98:01:ee:6b:09:33:75:14:e3:8d:
         f2:79:1c:80:1e:de:a2:1f:fe:1c:22:9e:42:83:93:7e:39:df:
         4c:e7:93:a5:63:29:75:18:d4:ee:99:2e:e2:16:38:c6:14:05:
         20:b2:22:5f:0f:1d:9d:15:22:60:af:cb:06:71:d6:7d:25:fc:
         8f:d7:88:59:6a:c1:48:60:22:bf:b4:dd:74:c5:17:3a:44:e2:
         e0:b7:0c:1d:ec:cf:e4:31:2c:9a:31:86:53:7c:f7:c1:71:d1:
         e3:61:cd:b6:52:18:85:49:a7:8b:5c:10:41:f9:97:bc:5b:3e:
         3f:86:14:9a:82:a6:9a:a0:54:8c:d4:6d:78:3b:a4:bf:53:f2:
         22:5d:00:72:c7:e9:3d:3d:bc:53:4f:20:e5:7b:ff:d8:c5:b4:
         51:f9:ca:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org