Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32322d3332203d3e20323637363238.roa
File:                     34352e37312e3138382e302f32322d3332203d3e20323637363238.roa (raw, json)
Hash identifier:          ZwL3G16Ic3Gue7Ysie3y0vf9S0H1U0Qj8Xa3PecgKsc=
Subject key identifier:   B0:D4:E5:7A:A2:A8:F1:61:FF:45:D3:34:F8:A8:31:C1:A6:4E:FA:6A
Certificate issuer:       /CN=8117E06ADD38D45F0F656C1EDF6A16C02C8434DF
Certificate serial:       58BF1F48D91EF97A2249957914AFB2F410A03876
Authority key identifier: 81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32322d3332203d3e20323637363238.roa
Signing time:             Thu 25 Jul 2024 16:29:50 +0000
ROA not before:           Thu 25 Jul 2024 16:24:50 +0000
ROA not after:            Thu 24 Jul 2025 16:29:50 +0000
asID:                     267628
IP address blocks:        45.71.188.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bf:1f:48:d9:1e:f9:7a:22:49:95:79:14:af:b2:f4:10:a0:38:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8117E06ADD38D45F0F656C1EDF6A16C02C8434DF
        Validity
            Not Before: Jul 25 16:24:50 2024 GMT
            Not After : Jul 24 16:29:50 2025 GMT
        Subject: CN=B0D4E57AA2A8F161FF45D334F8A831C1A64EFA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:0f:b7:9b:ab:70:f4:e2:4d:30:b5:6a:09:
                    bf:12:f5:2b:ee:e5:a2:e2:3f:fc:f0:f1:67:c8:8c:
                    6a:8b:10:b2:5d:4e:af:00:a7:11:f0:f7:51:33:20:
                    d9:d2:d8:7a:07:d4:03:4a:a6:2b:c2:5f:af:45:22:
                    75:ec:0e:2f:8f:12:f6:b1:e2:d9:c1:a4:29:08:3e:
                    bc:db:ca:92:e7:6e:8f:08:5e:3f:53:b1:15:b0:a9:
                    11:2a:52:45:07:59:85:0c:8a:c9:2a:20:b3:6f:a4:
                    b3:35:d4:a8:79:6e:f6:e9:e2:c8:4e:c2:51:87:98:
                    dc:3b:25:4b:4e:87:2e:51:67:a1:09:83:d8:e7:79:
                    d8:43:39:af:67:25:80:f7:f4:5a:9a:a5:b1:f2:d5:
                    9c:58:f4:0e:25:18:11:01:03:28:e9:c2:dc:d6:c7:
                    0f:47:a8:8c:1f:1c:dd:fc:e3:8d:a4:bf:5e:f1:7f:
                    fc:a9:1b:92:df:37:2c:f9:01:e5:c4:65:da:52:c7:
                    89:18:92:de:c2:0c:5a:02:6f:f6:c3:be:28:33:c9:
                    90:e5:22:bc:26:b6:0c:c9:3e:b7:2e:68:fb:85:ad:
                    07:95:73:29:95:31:4d:41:45:bd:9f:0b:b3:90:8f:
                    ff:38:56:36:67:96:3f:c8:6d:8a:25:7a:92:7c:76:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D4:E5:7A:A2:A8:F1:61:FF:45:D3:34:F8:A8:31:C1:A6:4E:FA:6A
            X509v3 Authority Key Identifier:
                keyid:81:17:E0:6A:DD:38:D4:5F:0F:65:6C:1E:DF:6A:16:C0:2C:84:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8117E06ADD38D45F0F656C1EDF6A16C02C8434DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/34352e37312e3138382e302f32322d3332203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:ce:40:d1:6d:a0:a4:ad:1b:29:2d:be:a4:27:b7:5c:91:
         82:08:e2:22:11:2e:d7:3c:ba:ab:67:14:f2:07:39:bc:c5:72:
         8d:3a:7e:cf:75:2f:5e:58:d7:32:93:14:4c:c1:18:0f:cb:41:
         22:fe:6f:00:39:64:cf:0f:7b:ea:32:53:03:87:ac:a6:a7:48:
         98:1c:5b:db:06:1a:6d:72:09:b8:b7:ea:e4:a5:e0:83:3c:ca:
         71:91:d0:21:4b:86:c6:f5:6b:3e:90:2a:e8:42:19:87:c4:bd:
         c7:4c:b4:c9:b2:b6:a0:a4:f0:65:36:c7:f3:08:05:7c:e6:e2:
         26:d2:c3:6b:f6:64:27:4c:fa:58:cd:1e:15:63:e6:0c:e5:dc:
         f9:92:13:b1:9d:33:bc:fb:10:a9:69:fd:bb:bd:2a:83:e7:10:
         6b:8e:0f:4d:e8:39:0c:24:99:0e:9d:48:42:d1:a2:75:ec:36:
         ab:eb:45:96:76:91:e0:e8:ab:24:44:70:7d:0c:e1:18:a5:d6:
         59:21:b6:e6:4f:d9:23:9c:23:94:3a:78:37:ba:25:a2:e6:12:
         ea:e2:d5:5b:59:e6:ac:dc:96:18:23:fe:47:36:76:ef:54:50:
         47:d7:c8:bc:4d:a4:37:e6:67:98:52:38:c0:d8:f2:db:8c:41:
         9e:66:87:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 03:17:49 2024 by rpki-client on console-fra.rpki-client.org