Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32342d3234203d3e20323632353639.roa
File:                     34352e3136372e36302e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          29qr8bcTNadu7O+6e5coptxjKiNHBGGpockYYEq0Vh0=
Subject key identifier:   11:38:05:06:F8:47:4E:4E:52:28:CC:94:F2:52:CE:57:AC:DF:1C:8E
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       441F5C4A56F570AAFBA51D4FF990B242D77872E0
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 27 Jun 2024 14:29:33 +0000
ROA not before:           Thu 27 Jun 2024 14:24:33 +0000
ROA not after:            Thu 26 Jun 2025 14:29:33 +0000
asID:                     262569
IP address blocks:        45.167.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1f:5c:4a:56:f5:70:aa:fb:a5:1d:4f:f9:90:b2:42:d7:78:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Jun 27 14:24:33 2024 GMT
            Not After : Jun 26 14:29:33 2025 GMT
        Subject: CN=11380506F8474E4E5228CC94F252CE57ACDF1C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:f4:2f:92:25:72:ae:70:f7:b1:bf:0c:d1:
                    38:67:f7:1e:ec:a9:45:c9:c7:c9:9b:bb:01:e3:67:
                    70:19:7c:b7:5c:db:04:b2:42:37:a4:3b:88:b7:7b:
                    c6:11:ae:e8:fe:ea:8b:0d:4c:2c:92:96:e8:80:8d:
                    b3:6d:ba:1b:a2:7d:8c:f1:d4:c3:3e:32:a0:7e:16:
                    a2:bd:da:b8:e3:55:5a:86:91:27:8a:d1:da:96:54:
                    b7:62:65:2f:06:fd:bd:5e:f0:7f:a8:b3:5e:22:27:
                    07:8f:65:62:a7:f4:29:8e:1f:44:4b:8a:86:63:20:
                    bd:fc:96:9f:5f:f8:28:43:e8:2c:5f:ce:3e:e0:c6:
                    57:49:9b:01:dc:57:8a:3d:32:fc:4b:c8:6a:40:64:
                    62:47:da:cc:51:91:10:ba:af:9d:85:a2:2a:db:9f:
                    80:d1:6f:15:76:ab:a4:67:dd:8d:1f:78:b4:9d:f2:
                    e4:0b:7f:f2:41:89:22:62:7a:86:eb:0a:75:91:11:
                    63:a0:57:c7:c4:e2:79:8d:26:70:99:c2:56:23:66:
                    e9:67:71:55:d2:b6:16:8a:21:07:5a:d9:81:0a:92:
                    ca:7f:10:d0:81:9f:99:e5:3e:17:31:71:19:3e:c1:
                    27:2b:6d:03:7b:d1:04:57:32:25:2d:55:ef:18:d0:
                    e4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:05:06:F8:47:4E:4E:52:28:CC:94:F2:52:CE:57:AC:DF:1C:8E
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:33:f4:c2:9c:f1:0c:3a:a5:0a:39:de:1f:09:ea:5a:3d:4c:
         b5:6b:92:fa:57:d8:7b:5d:db:74:56:1d:82:91:f4:a0:42:ea:
         92:14:b7:54:90:cd:6d:89:fb:7c:73:1b:c2:f0:2b:05:02:73:
         b1:95:90:9f:0b:12:c0:31:6e:16:79:a1:72:2a:68:85:15:2b:
         7d:4e:b1:57:a3:1d:34:5d:39:bf:a8:f4:f3:d3:92:d5:80:75:
         cb:f9:77:cb:ea:dc:e6:3c:cf:93:ee:d3:2a:fb:cd:9f:33:1c:
         03:16:97:cc:0f:23:64:8e:e3:44:7a:08:d6:bd:63:30:b6:8e:
         d3:d2:ad:e7:cd:22:e7:34:f0:c5:72:34:ac:d6:c6:cc:c0:07:
         8b:1e:36:36:c0:b9:b3:9d:a5:23:55:c9:e2:2f:5b:be:5c:11:
         bb:d9:cb:b8:88:03:db:c2:63:a5:f1:c8:30:75:d8:7f:b6:00:
         2c:9b:cc:25:c6:e9:09:3f:24:4f:75:ca:07:fb:c5:37:18:02:
         24:33:9e:d8:e1:bb:3c:57:74:22:e9:f2:df:af:73:6a:8e:68:
         b9:7e:a3:20:fb:ed:1c:19:a5:72:94:cb:9d:a2:e0:aa:bd:7f:
         7d:aa:29:16:f1:e1:0c:56:11:6b:4d:14:25:9a:9d:5b:2c:01:
         73:a2:3c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org