Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa
File:                     34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa (raw, json)
Hash identifier:          NamwCdiWeRMUHmD91NL8njCKr97nVNbl2MArAIwgmqg=
Subject key identifier:   C2:F6:2A:17:75:81:CD:77:35:26:17:F5:D9:F6:64:75:E1:49:E1:F2
Certificate issuer:       /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial:       2231690F4E2030E554BD1DA7F7C80B4B32223165
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa
Signing time:             Mon 29 Jul 2024 15:52:44 +0000
ROA not before:           Mon 29 Jul 2024 15:47:44 +0000
ROA not after:            Mon 28 Jul 2025 15:52:44 +0000
asID:                     269096
IP address blocks:        45.185.122.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:31:69:0f:4e:20:30:e5:54:bd:1d:a7:f7:c8:0b:4b:32:22:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
        Validity
            Not Before: Jul 29 15:47:44 2024 GMT
            Not After : Jul 28 15:52:44 2025 GMT
        Subject: CN=C2F62A177581CD77352617F5D9F66475E149E1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:58:a8:00:e8:1c:07:45:14:2e:cb:f3:9f:
                    dc:3e:b1:fe:d2:46:f5:a3:bb:9b:09:83:4f:08:56:
                    75:3e:fd:5c:06:58:e8:a9:96:ea:a7:bb:3e:34:0e:
                    dd:de:e1:b7:86:ac:c0:b5:5f:8e:2c:a2:e8:b2:18:
                    a7:24:95:9a:dc:98:39:dd:f4:bc:bb:e5:c3:66:e8:
                    70:95:54:dc:13:6c:72:e2:60:c7:d6:49:04:b5:73:
                    36:92:2a:6e:4c:8a:91:0c:61:6a:e7:0d:62:9a:15:
                    ba:63:f3:0b:0c:48:3c:44:4d:bf:a9:e5:60:7c:54:
                    0d:10:86:d2:29:2a:5b:5c:e0:1a:74:81:fa:e8:42:
                    f5:89:b6:76:80:f5:75:dd:46:b3:66:44:0d:30:31:
                    35:f3:09:56:cf:14:cd:ef:4f:b9:eb:e7:88:2a:30:
                    76:18:08:5a:59:2d:97:39:8f:3a:f8:de:b2:fe:a0:
                    f5:17:f1:36:2d:6b:85:d6:63:cf:96:8c:6c:59:36:
                    cd:46:28:57:5e:b4:e0:9e:68:8c:94:9f:42:b9:b8:
                    84:ed:7a:9c:08:f8:c2:35:24:9d:09:ac:bc:a1:e5:
                    aa:c8:4d:c7:17:77:20:df:8c:eb:e2:45:9d:80:78:
                    2c:46:93:41:34:e1:4e:cd:50:c2:a5:ea:6f:2b:64:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F6:2A:17:75:81:CD:77:35:26:17:F5:D9:F6:64:75:E1:49:E1:F2
            X509v3 Authority Key Identifier:
                keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132322e302f32332d3233203d3e20323639303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:38:e6:5c:e4:74:22:cd:26:bb:f6:34:73:5c:1e:9f:72:5c:
         49:91:73:9a:5d:ba:0d:ee:78:29:b8:db:58:b6:88:19:ec:c9:
         be:42:a5:9b:58:d8:f3:8e:6d:45:a3:ea:fe:44:4e:64:f3:f7:
         12:37:e9:0a:c1:59:6b:61:3d:28:c7:0f:3d:d8:48:08:7e:8a:
         1f:c6:d2:a9:7a:9a:18:d0:16:87:e0:6d:74:fe:51:58:db:ef:
         3a:d7:8f:79:69:69:d7:89:9a:2a:19:d7:1e:c7:1a:35:bc:71:
         1c:88:97:b1:f4:8f:ba:5a:09:9b:f4:e2:2d:b6:b9:57:db:45:
         cf:b8:ab:02:cc:8e:6b:a7:1d:f9:c1:68:f1:88:1f:bc:2b:0a:
         8c:c4:37:9f:85:cb:73:18:22:f2:b0:c2:94:81:e4:4b:3f:e3:
         da:75:fe:df:5f:e7:2c:56:40:38:70:37:0d:d4:3d:1f:9a:06:
         12:b9:94:29:3a:e0:80:eb:6f:7b:02:93:09:58:e8:31:43:45:
         13:e4:0e:be:08:b9:be:1c:b8:d2:60:d9:5c:81:cc:01:6a:20:
         61:a3:80:2a:71:c1:20:64:2b:6a:78:1b:05:2f:f9:e3:a6:2e:
         93:8c:70:f4:3d:ed:82:36:d4:b4:88:ba:5e:43:44:fd:cb:5f:
         73:27:34:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:12 2024 by rpki-client on console-fra.rpki-client.org