Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231372e302f32342d3234203d3e20323639323034.roa
File:                     34352e3138312e3231372e302f32342d3234203d3e20323639323034.roa (raw, json)
Hash identifier:          XTXHRCoPJpKC4abfvS/CjnhsDU8E/nFzkMT6yhKQHZE=
Subject key identifier:   E6:9C:E6:6C:53:FC:EF:6F:2A:A4:F4:E2:C0:7E:34:C7:B2:0E:A9:C2
Certificate issuer:       /CN=6A8DD0D910DC10523A6AD7372DD40A15D0165369
Certificate serial:       4C8FB9B3DED5DAA8C157EB4DBE483662DC6657F2
Authority key identifier: 6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231372e302f32342d3234203d3e20323639323034.roa
Signing time:             Wed 30 Oct 2024 10:02:47 +0000
ROA not before:           Wed 30 Oct 2024 09:57:47 +0000
ROA not after:            Wed 29 Oct 2025 10:02:47 +0000
asID:                     269204
IP address blocks:        45.181.217.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:b9:b3:de:d5:da:a8:c1:57:eb:4d:be:48:36:62:dc:66:57:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8DD0D910DC10523A6AD7372DD40A15D0165369
        Validity
            Not Before: Oct 30 09:57:47 2024 GMT
            Not After : Oct 29 10:02:47 2025 GMT
        Subject: CN=E69CE66C53FCEF6F2AA4F4E2C07E34C7B20EA9C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:41:be:cf:16:3a:52:80:13:86:9d:0e:48:
                    6c:58:9b:24:44:e9:36:2a:af:55:8f:54:86:d2:dd:
                    a9:fb:29:7f:f7:bc:ee:23:5d:19:6e:fb:83:80:4c:
                    e4:d7:60:e4:79:c5:98:75:14:2d:96:a7:ef:41:b3:
                    64:fd:aa:3b:a2:30:17:64:8b:f7:52:e9:cd:b7:93:
                    e0:14:d6:65:e2:a2:99:22:9a:74:59:53:ac:e5:c0:
                    4e:38:9d:d7:dc:0d:a2:2e:f6:87:60:d5:06:46:cd:
                    8a:c3:cc:e5:14:53:f7:0f:2a:e4:0b:b5:5e:0e:d6:
                    d8:7b:1e:74:cd:a9:cd:59:61:d2:bd:c1:21:e9:6f:
                    6f:3c:eb:90:36:1d:72:34:7e:85:5c:8d:5c:f5:46:
                    d5:e3:8b:7c:4a:4b:b6:e6:10:c4:0d:bb:ab:97:5f:
                    02:51:54:d9:e8:cf:df:7b:0c:89:1d:2a:13:73:a7:
                    2d:7a:f5:ba:f1:c7:a6:84:7a:c1:62:ff:88:c8:5a:
                    ec:fa:36:b7:29:06:5d:12:92:20:35:d2:c6:64:5a:
                    39:9f:cf:9d:ed:b9:bc:98:d5:ef:bb:e2:cc:dd:dc:
                    23:81:58:64:d2:44:c9:66:86:9d:8f:a1:66:0a:4a:
                    c6:df:61:03:0a:0f:3d:4c:e7:da:5b:6a:43:3f:63:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:E6:6C:53:FC:EF:6F:2A:A4:F4:E2:C0:7E:34:C7:B2:0E:A9:C2
            X509v3 Authority Key Identifier:
                keyid:6A:8D:D0:D9:10:DC:10:52:3A:6A:D7:37:2D:D4:0A:15:D0:16:53:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/6A8DD0D910DC10523A6AD7372DD40A15D0165369.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8DD0D910DC10523A6AD7372DD40A15D0165369.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDxnFZ7YzYZxEt54aULWdTCzE8bW6jiNymDSJazPJb42/0/34352e3138312e3231372e302f32342d3234203d3e20323639323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:74:01:b4:e8:33:a2:6f:a7:e4:74:4d:40:37:48:9b:81:5b:
         57:1b:ef:a9:12:d9:de:5c:da:1a:dc:25:05:1f:2f:4d:22:68:
         51:c8:6a:31:f0:b5:a1:4b:74:d9:8b:5d:d7:10:d3:17:43:3a:
         51:71:e9:84:4b:c9:a7:a9:f2:4a:b2:dd:e6:37:0b:c2:90:e4:
         f8:b7:11:72:13:a0:ee:09:54:65:86:9d:7a:3b:da:10:8d:2e:
         7c:ef:18:59:1a:ab:6c:bb:72:16:eb:57:53:c3:9c:e1:8f:ad:
         b1:61:3a:05:1f:40:be:8f:d1:ed:60:ad:b7:8e:15:3d:59:c7:
         a2:cf:6f:83:bf:c8:d0:ec:f7:53:06:1b:93:69:f6:68:08:ed:
         9f:c0:73:d0:f5:89:c1:3e:1c:03:10:09:a2:db:f9:35:43:58:
         6f:0f:38:23:23:c3:fe:55:e8:4f:83:95:d8:d1:e9:5d:0e:c1:
         0a:f8:56:3d:aa:2d:32:2a:1c:cc:25:a0:7b:df:00:75:c2:b1:
         8d:88:0f:6a:fc:3a:08:60:29:b1:8b:42:47:c3:80:71:86:a5:
         60:21:06:14:35:10:38:d3:35:8e:6b:2c:73:67:6a:bd:94:44:
         7b:9e:c8:51:e9:56:8f:7e:64:df:ba:0d:34:46:5c:71:e6:87:
         92:80:1a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 06:42:29 2024 by rpki-client on console-fra.rpki-client.org