Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
File:                     34352e3233362e35312e302f32342d3234203d3e20323638323035.roa (raw, json)
Hash identifier:          mN60ljNCv0nqIOI/i1KXXVGUWj7ru34JmHIpy1NNX3M=
Subject key identifier:   EC:85:7C:62:62:50:6B:0B:07:2E:5C:51:15:26:00:CD:42:3B:1B:9C
Certificate issuer:       /CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
Certificate serial:       4A6AC1E84D4FEA56F14556098E7B0F23B58B2EA3
Authority key identifier: C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa
Signing time:             Tue 09 Apr 2024 16:49:57 +0000
ROA not before:           Tue 09 Apr 2024 16:44:57 +0000
ROA not after:            Tue 08 Apr 2025 16:49:57 +0000
asID:                     268205
IP address blocks:        45.236.51.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6a:c1:e8:4d:4f:ea:56:f1:45:56:09:8e:7b:0f:23:b5:8b:2e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04
        Validity
            Not Before: Apr  9 16:44:57 2024 GMT
            Not After : Apr  8 16:49:57 2025 GMT
        Subject: CN=EC857C6262506B0B072E5C51152600CD423B1B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:d7:33:96:22:ff:10:be:98:b5:9b:08:a5:
                    5e:1b:85:fb:4b:e8:a7:f3:69:9b:48:25:84:a2:12:
                    7a:6d:aa:a1:2e:5f:58:66:fa:41:a4:dd:61:49:b7:
                    b5:7d:25:44:ff:78:3e:04:51:5c:95:ec:73:32:51:
                    fc:93:02:97:4a:ea:a0:e1:83:7e:08:75:35:61:44:
                    1c:03:f7:e5:c0:60:f8:d7:6b:bf:15:f1:86:ca:45:
                    45:8f:2c:cb:ed:1c:fa:6d:2f:dc:e4:0e:bc:69:d6:
                    42:1c:15:13:68:f0:7b:0e:43:47:b4:0b:54:3c:4b:
                    5d:17:b0:56:dc:91:0a:ec:7f:21:16:7c:09:c8:bc:
                    90:5d:e6:bf:0d:3b:3b:2f:38:36:b1:d4:9a:56:69:
                    a5:b0:20:68:ce:99:5d:d2:b6:6c:0e:e5:66:fc:e3:
                    d8:30:d2:7a:d2:5d:80:25:c0:da:c7:2b:4e:3b:eb:
                    f2:24:17:4c:c2:82:07:59:e3:1a:38:1d:1c:ca:47:
                    57:19:10:93:bc:e9:6a:7f:52:89:32:54:6b:02:bc:
                    43:a8:79:1d:15:6a:94:05:d8:63:ff:72:c2:b4:4d:
                    21:62:61:67:ab:22:df:08:2c:9d:aa:90:73:49:c2:
                    d0:e6:30:9f:b6:7d:e5:62:c4:fa:5a:61:2d:44:6f:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:85:7C:62:62:50:6B:0B:07:2E:5C:51:15:26:00:CD:42:3B:1B:9C
            X509v3 Authority Key Identifier:
                keyid:C4:07:32:FB:FD:6E:93:EC:34:C8:BF:5F:47:B4:FD:75:3E:5C:4B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C40732FBFD6E93EC34C8BF5F47B4FD753E5C4B04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDJZXLYPd1DLzDpze4fbSyFV2S1Li9t4VeqaYkJJ7T4G/0/34352e3233362e35312e302f32342d3234203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:4c:a9:62:cf:63:18:c8:f6:91:a6:44:34:ec:6c:f1:b9:
         d4:f0:ce:62:b3:5a:1b:6a:27:16:94:2a:da:47:79:f8:b7:5c:
         5e:08:fe:fa:0d:ac:7c:f4:93:c0:0f:4c:22:2a:ce:89:c5:ba:
         40:4b:41:82:5a:fe:03:5d:34:df:ce:58:68:27:d0:2d:37:e5:
         1a:54:6e:d9:87:11:18:80:1a:71:c9:82:84:2a:6d:b8:38:c1:
         ac:ce:9a:fa:5c:4d:b2:6c:1c:c0:e4:78:ce:43:23:e1:d8:5a:
         7f:c1:2b:4c:0e:4c:b1:e7:c3:6f:ef:c3:39:14:09:0b:f1:7f:
         03:2c:8e:13:5e:2f:09:97:a3:87:55:f7:5a:f6:76:a7:36:46:
         f0:86:5c:e5:b0:f3:63:db:8d:a0:ff:21:75:26:83:2e:45:b2:
         5f:63:89:6e:1b:5c:ce:91:5b:0c:05:02:f7:b4:0c:26:1c:41:
         3e:aa:b5:f7:3b:40:ae:ea:30:c9:f4:a3:70:b1:3f:5a:b7:02:
         34:b7:68:81:f5:99:32:5b:fb:a4:e4:eb:90:b4:d9:e0:5e:9d:
         25:5b:a4:f5:fb:21:66:07:1c:55:f1:dd:d6:17:e9:7f:aa:b5:
         b1:ab:c2:2c:d4:63:ea:59:e5:01:8d:4f:9a:d0:c7:54:ba:3c:
         41:88:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 05:11:44 2024 by rpki-client on console-ams.rpki-client.org