Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/34352e3136342e34342e302f32322d3332203d3e20323638353937.roa
File:                     34352e3136342e34342e302f32322d3332203d3e20323638353937.roa (raw, json)
Hash identifier:          zJwDeUEqfVpLRVXpF4rtWTIqfYHUdmWmDKZnN3y4GBY=
Subject key identifier:   46:41:EC:36:7A:CD:70:7E:B4:E3:DA:D7:EC:70:A5:45:E5:1D:0D:6F
Certificate issuer:       /CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
Certificate serial:       2C2D2817D024A259A24B3ADE826489E629706FA6
Authority key identifier: 0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/34352e3136342e34342e302f32322d3332203d3e20323638353937.roa
Signing time:             Thu 01 Aug 2024 15:11:51 +0000
ROA not before:           Thu 01 Aug 2024 15:06:51 +0000
ROA not after:            Thu 31 Jul 2025 15:11:51 +0000
asID:                     268597
IP address blocks:        45.164.44.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2d:28:17:d0:24:a2:59:a2:4b:3a:de:82:64:89:e6:29:70:6f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B38A59F2FDDDE45684F6171EE1D68D2EE29F528
        Validity
            Not Before: Aug  1 15:06:51 2024 GMT
            Not After : Jul 31 15:11:51 2025 GMT
        Subject: CN=4641EC367ACD707EB4E3DAD7EC70A545E51D0D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:34:bd:dc:85:0b:a6:8d:0f:8e:56:12:b4:
                    82:38:d0:1f:ce:95:11:0d:88:0d:bf:5b:ea:d1:b7:
                    f1:a4:c9:ce:71:e7:ee:16:f9:57:7c:32:1a:a4:4b:
                    d3:ba:a5:fc:58:dc:40:23:76:da:6f:20:d1:02:0e:
                    16:b1:f3:99:01:ea:f5:81:89:cc:1b:88:00:c6:2d:
                    b9:51:0f:7b:67:0a:96:20:6e:9d:22:43:c3:9d:11:
                    44:4d:08:ce:3f:d8:9f:6e:a4:b4:50:7c:8d:ac:bd:
                    f9:4e:bd:22:94:83:83:b0:06:11:a0:97:71:24:8f:
                    aa:54:5d:cc:82:59:62:40:f2:a3:1c:01:ac:8b:e1:
                    45:f6:52:0d:32:d3:eb:d2:a1:69:69:c5:d7:e8:eb:
                    1a:c6:64:79:4a:24:f8:30:34:22:7e:ad:94:dd:d9:
                    77:f7:fd:65:ad:8f:c8:7e:8b:fa:62:9e:cb:6e:6e:
                    b3:2d:d7:18:3d:6c:51:1d:1f:d6:7d:90:ba:d7:20:
                    34:4b:c4:9f:94:66:83:2d:0a:4c:c5:cf:12:d0:e2:
                    46:c0:15:b6:b5:eb:dc:39:be:7a:44:0c:cf:dc:bd:
                    5e:3f:31:72:c2:b5:50:04:f1:8c:70:ab:e6:da:ec:
                    2f:be:71:77:16:7c:e0:58:34:d8:5e:10:6e:e6:47:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:41:EC:36:7A:CD:70:7E:B4:E3:DA:D7:EC:70:A5:45:E5:1D:0D:6F
            X509v3 Authority Key Identifier:
                keyid:0B:38:A5:9F:2F:DD:DE:45:68:4F:61:71:EE:1D:68:D2:EE:29:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B38A59F2FDDDE45684F6171EE1D68D2EE29F528.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/34352e3136342e34342e302f32322d3332203d3e20323638353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:ac:5c:76:53:93:8a:b8:d9:de:ac:4a:4b:34:77:96:d8:
         1e:68:21:ad:c8:cb:06:81:2a:61:09:a1:8e:bf:0d:88:44:cb:
         a9:8b:4b:89:66:34:20:91:ba:6f:6a:aa:b7:b5:ea:ba:93:75:
         4c:e9:63:24:b5:fe:e9:2c:d9:18:c5:41:34:b2:af:73:fc:f5:
         6b:bb:0a:11:c1:60:a6:45:b7:37:12:ad:4f:b0:41:b6:bf:70:
         6d:ff:b4:51:ce:1a:37:2a:cd:b5:d1:fb:79:64:cd:c4:92:13:
         47:f5:ef:82:88:64:34:d8:63:96:99:f6:29:ee:0e:7c:7b:92:
         45:9e:30:2d:0b:0d:d0:dd:3f:71:25:28:90:0a:80:21:8b:2b:
         1d:09:94:a5:52:a3:81:38:94:9e:51:f5:a2:d4:a5:0b:d3:97:
         bf:b4:34:be:6e:c7:cd:6e:f6:5f:84:e9:45:88:8d:a0:99:12:
         29:ed:90:04:75:f8:b0:99:56:1c:07:bc:a6:1f:16:68:62:2e:
         5b:bd:ea:0a:99:72:83:18:4a:b5:73:7f:eb:d5:c3:7d:a2:9e:
         f2:6f:38:b3:f0:d3:d5:64:35:ed:56:cd:ad:60:59:bb:e7:7c:
         dd:43:cb:e8:48:bd:b9:16:8e:fc:5e:b2:89:90:65:22:21:f7:
         49:4a:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 14:50:05 2024 by rpki-client on console-ams.rpki-client.org