Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203136353039.roa
File:                     34352e3136392e3138322e302f32332d3234203d3e203136353039.roa (raw, json)
Hash identifier:          k0sU/tKelR+TKvBeApVwNd2G46dWFBJpvjow3XmKP0E=
Subject key identifier:   2A:A2:B9:07:5C:72:80:6C:65:DA:AA:30:99:BE:D0:72:89:14:E6:88
Certificate issuer:       /CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
Certificate serial:       29F4362E995813F9ACEEFC6641D00EC81839FEE0
Authority key identifier: FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203136353039.roa
Signing time:             Wed 24 Jul 2024 20:29:51 +0000
ROA not before:           Wed 24 Jul 2024 20:24:51 +0000
ROA not after:            Wed 23 Jul 2025 20:29:51 +0000
asID:                     16509
IP address blocks:        45.169.182.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:36:2e:99:58:13:f9:ac:ee:fc:66:41:d0:0e:c8:18:39:fe:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13
        Validity
            Not Before: Jul 24 20:24:51 2024 GMT
            Not After : Jul 23 20:29:51 2025 GMT
        Subject: CN=2AA2B9075C72806C65DAAA3099BED0728914E688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:49:82:8e:5a:43:ed:3f:06:f7:87:0d:76:c8:
                    6e:55:8c:6a:e5:d8:74:1f:22:71:a5:c7:25:d1:20:
                    ce:0c:66:a7:a0:b2:a7:b7:1c:4c:fd:62:a4:b4:81:
                    13:b2:af:10:e9:23:5e:a3:3f:c4:e8:1e:68:82:26:
                    13:cd:d1:6e:0b:e1:c7:6c:2b:ec:96:f1:ef:d4:97:
                    f8:0c:20:1d:95:43:4a:e5:d6:5e:fb:98:b2:63:b7:
                    e8:cc:cd:c9:65:4d:72:bd:f0:b5:d4:fd:b9:e4:5e:
                    0b:be:3c:88:37:4f:9f:ff:90:dc:e1:c3:13:4e:df:
                    69:c3:13:5f:fb:a1:dd:78:55:c2:22:db:88:56:61:
                    89:c5:30:2a:24:d7:ec:08:bb:97:df:ed:69:dc:3a:
                    21:e9:d7:bb:61:7c:70:5e:05:03:39:17:f2:6c:13:
                    fc:13:0c:d2:d2:4a:83:f8:d3:25:af:be:c0:28:07:
                    9a:f9:ce:a2:b5:a1:23:28:86:cd:a9:b9:cd:c8:24:
                    db:fe:f4:22:2d:30:65:7b:34:51:6d:94:e5:be:e5:
                    da:28:68:7d:b5:5b:8d:e1:14:f2:11:d3:be:43:64:
                    7f:04:d8:8d:de:48:7f:37:b0:cb:20:de:df:fd:ab:
                    73:51:e9:7a:85:0d:66:53:2d:d2:91:4f:aa:e4:69:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A2:B9:07:5C:72:80:6C:65:DA:AA:30:99:BE:D0:72:89:14:E6:88
            X509v3 Authority Key Identifier:
                keyid:FE:EE:EC:E2:FC:07:BB:F4:B5:B0:C7:98:6D:0F:95:4D:70:4B:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEEECE2FC07BBF4B5B0C7986D0F954D704BFA13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H853gXrYupnbPYQ6fSoX6BVixhZWDNGKTv6RMzAzx153/0/34352e3136392e3138322e302f32332d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:e6:de:a3:2b:d5:e3:f1:41:d3:10:a2:b4:f0:4f:83:ed:
         52:28:e6:3a:3a:5c:6f:e4:f7:92:bd:fb:14:9d:3a:3c:a4:f0:
         b9:a1:54:cc:69:ed:66:d1:e6:a0:2e:a2:34:dc:14:13:1a:00:
         8e:b8:fb:4d:37:b3:db:66:dc:54:75:65:34:fb:5f:82:0a:09:
         9c:22:f7:59:39:c8:99:a3:fb:24:59:01:4a:a3:9a:0c:c3:c5:
         4d:b0:a4:65:b1:80:c1:d3:35:05:88:ad:4c:be:1c:58:73:30:
         82:f7:ce:41:6c:e5:4c:4e:b0:49:96:11:c5:13:d5:39:88:b6:
         e6:82:10:bc:89:ad:0a:09:95:97:63:de:9f:61:b7:a7:5c:a4:
         09:4f:6f:8d:90:45:91:22:25:44:16:98:42:f9:15:1c:33:af:
         3c:5c:0c:f3:b6:1f:bf:35:b9:05:58:19:2d:3e:44:d0:6d:93:
         63:28:c4:5d:93:80:3b:ac:db:30:78:a6:19:c4:5b:81:73:40:
         28:11:cc:89:f1:d8:a1:fb:e6:ea:06:05:2e:14:f3:ff:97:80:
         a5:90:5d:55:f2:89:da:85:ff:72:6c:0b:ae:03:d7:e9:5e:80:
         58:92:94:c3:78:d5:fd:d8:c1:60:60:ea:ce:d5:1a:2a:90:05:
         67:cf:9b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:56:53 2024 by rpki-client on console-fra.rpki-client.org