Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa
File:                     34352e3136362e34382e302f32322d3332203d3e20323637393532.roa (raw, json)
Hash identifier:          WX7EnmQwIvIXuOIh1m+Helad++veg3onLyyj6RGXAL0=
Subject key identifier:   A3:41:63:64:70:FB:B7:37:AA:49:79:0C:39:2B:EA:FA:2A:32:63:A8
Certificate issuer:       /CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
Certificate serial:       2B2A57029517DF7922D3A5F2D0886823509E0964
Authority key identifier: 29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa
Signing time:             Wed 05 Jun 2024 13:22:18 +0000
ROA not before:           Wed 05 Jun 2024 13:17:18 +0000
ROA not after:            Wed 04 Jun 2025 13:22:18 +0000
asID:                     267952
IP address blocks:        45.166.48.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2a:57:02:95:17:df:79:22:d3:a5:f2:d0:88:68:23:50:9e:09:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2963428E665498CFA92700EDEAD7F24E4FCD089C
        Validity
            Not Before: Jun  5 13:17:18 2024 GMT
            Not After : Jun  4 13:22:18 2025 GMT
        Subject: CN=A341636470FBB737AA49790C392BEAFA2A3263A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:2f:06:a6:23:a8:be:4b:7f:63:b9:32:33:
                    38:73:5f:21:68:30:cf:8f:31:02:b7:aa:f1:91:a8:
                    c0:62:8e:8a:74:6c:9a:af:c7:2e:64:3c:05:10:a2:
                    05:1b:3d:af:cf:5b:d5:2f:c1:ca:c6:40:c5:bc:fe:
                    4b:66:17:24:be:a4:92:9f:fe:a6:08:af:06:c9:12:
                    bc:d3:1b:c8:3b:b1:27:3e:6a:a0:75:40:47:31:1d:
                    75:c3:da:15:90:47:22:c9:a3:21:a4:5f:96:04:44:
                    7f:e4:47:cb:f3:96:55:ea:0d:5b:27:b1:da:69:48:
                    b4:0e:3a:28:c1:ea:b7:a3:c1:a8:ec:94:05:5e:a9:
                    e4:10:01:cf:58:d2:43:18:27:f7:63:c1:93:74:01:
                    ad:48:2e:8c:1d:9c:2a:a8:73:bc:15:73:b9:c9:b0:
                    09:d1:e1:80:b9:45:cf:fb:87:23:50:dc:81:8c:49:
                    8f:ab:1f:f6:a8:b3:3c:1f:4d:f4:92:64:0e:53:cb:
                    75:d5:4c:de:4e:72:a1:e1:91:29:d7:4a:44:d5:c2:
                    e4:da:c4:d4:75:1d:a5:de:8a:1b:1f:d7:cd:e8:5f:
                    ef:c9:86:25:42:63:37:89:1a:f5:1d:c8:00:c8:15:
                    23:a5:90:12:38:bc:a5:4e:1c:b5:fa:f4:38:0b:c2:
                    31:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:41:63:64:70:FB:B7:37:AA:49:79:0C:39:2B:EA:FA:2A:32:63:A8
            X509v3 Authority Key Identifier:
                keyid:29:63:42:8E:66:54:98:CF:A9:27:00:ED:EA:D7:F2:4E:4F:CD:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/2963428E665498CFA92700EDEAD7F24E4FCD089C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2963428E665498CFA92700EDEAD7F24E4FCD089C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/34352e3136362e34382e302f32322d3332203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:27:cf:7d:b3:21:37:ad:86:a9:5e:d1:e7:93:aa:a3:4b:6f:
         e9:80:d8:ab:44:6a:51:85:65:5a:7f:d8:eb:b2:39:87:a1:e2:
         db:5e:95:04:e4:a1:f0:3a:e1:63:86:45:ab:0e:a4:e4:43:ad:
         a4:09:ec:e7:64:9a:4f:ca:d8:6f:4c:f3:17:9e:b5:cc:28:f2:
         49:91:b0:73:8c:fd:84:d8:93:5a:3d:ab:9f:06:4f:c8:05:a4:
         6b:d7:4b:f7:e4:14:6b:0b:4c:14:12:b4:19:86:01:bc:39:3d:
         fe:fc:2a:78:67:00:6b:df:43:3f:21:e2:ee:06:40:6a:01:91:
         a0:4d:c7:f4:50:02:05:22:05:81:2b:b5:d1:9a:de:50:4e:8e:
         af:76:20:b6:0b:1d:c4:8f:8a:db:8e:78:29:d4:35:cf:1d:ce:
         78:43:83:9a:cd:3a:73:79:6f:76:82:2a:c8:e8:40:29:95:64:
         66:dd:1b:7f:34:c4:ba:6d:76:9e:ed:eb:81:8e:8b:9e:11:b4:
         2d:ae:61:f2:56:6a:cc:ce:e3:64:ab:fa:7e:32:ba:56:1c:77:
         40:29:48:f1:5e:40:f2:c2:06:63:3b:63:92:ed:e7:be:97:89:
         ae:fc:0d:08:fd:0d:55:09:b2:75:ca:42:9a:c8:3f:af:a1:b4:
         8d:03:2c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 18:10:21 2024 by rpki-client on console-fra.rpki-client.org