Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36332e302f32342d3234203d3e20323632353639.roa
File:                     34352e3136372e36332e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier:          uAnGChy6JCGZfcxuUtI4FK4bFR6/bGodblxgjSGgf1I=
Subject key identifier:   61:7C:C4:38:AF:29:62:95:00:C4:B4:B7:55:80:A4:1A:03:D6:75:2B
Certificate issuer:       /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial:       34E6625C90A3F59A070DE4C894F77F45BF0FEF21
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36332e302f32342d3234203d3e20323632353639.roa
Signing time:             Thu 27 Jun 2024 14:30:05 +0000
ROA not before:           Thu 27 Jun 2024 14:25:05 +0000
ROA not after:            Thu 26 Jun 2025 14:30:05 +0000
asID:                     262569
IP address blocks:        45.167.63.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e6:62:5c:90:a3:f5:9a:07:0d:e4:c8:94:f7:7f:45:bf:0f:ef:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
        Validity
            Not Before: Jun 27 14:25:05 2024 GMT
            Not After : Jun 26 14:30:05 2025 GMT
        Subject: CN=617CC438AF29629500C4B4B75580A41A03D6752B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:4a:fa:be:23:7d:74:d9:bd:29:2f:01:f3:
                    26:92:87:37:b6:4d:7f:c8:68:2d:57:57:fe:b6:36:
                    08:11:dd:03:bc:7f:6b:8b:7c:36:61:7a:18:60:d1:
                    47:a2:d0:d7:45:1a:86:50:4e:c8:ee:30:82:32:e1:
                    ce:6a:36:81:ed:a9:87:df:0a:61:5b:25:b9:bc:c7:
                    d9:78:c3:3a:90:d6:87:ff:3c:24:89:42:83:3f:f6:
                    0b:af:ba:64:00:ba:66:38:b2:ba:18:2c:6e:f3:dd:
                    01:e8:f0:c2:7c:90:52:40:b5:1c:75:2c:2c:db:50:
                    51:db:54:a1:08:78:e6:d4:f4:9e:d1:3f:51:49:ec:
                    df:52:33:78:ef:5d:70:00:46:6e:4a:13:1b:99:28:
                    a6:c0:51:67:7b:67:25:d9:b9:9c:cb:b6:30:57:6c:
                    33:09:25:46:21:42:c1:98:82:36:0c:2e:1b:79:c1:
                    bc:38:48:bc:20:29:0c:06:a0:f4:4d:a0:ec:24:50:
                    e5:13:8a:48:7a:df:21:1a:0c:52:d9:01:16:f7:7e:
                    7c:1c:e0:65:14:f2:43:d0:66:75:9d:e8:99:6f:62:
                    55:e7:08:67:3d:6c:20:99:9a:e9:4f:0c:de:8f:ac:
                    38:da:96:ad:65:f5:a0:2a:b2:63:4b:9e:27:6c:b3:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:C4:38:AF:29:62:95:00:C4:B4:B7:55:80:A4:1A:03:D6:75:2B
            X509v3 Authority Key Identifier:
                keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36332e302f32342d3234203d3e20323632353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:80:15:d9:b8:f3:00:fa:54:4e:60:0a:97:a0:d2:d9:5c:78:
         79:5f:ed:ac:16:46:d5:9e:92:f0:02:71:c3:46:93:93:f9:09:
         de:3a:42:5b:5e:ba:de:de:31:d7:4d:07:91:23:95:40:7f:ee:
         1d:58:42:c6:95:e0:6d:cd:ab:92:06:63:7e:e8:15:e6:26:11:
         39:74:ea:91:0b:9b:b6:5b:c3:b9:a3:9e:a7:ac:f6:d7:71:8a:
         e3:ff:c8:45:fd:04:b2:f2:ba:aa:e0:ef:71:5f:37:90:47:e5:
         a3:c4:40:87:45:75:0a:6d:2c:b7:83:9d:cc:3a:c8:4e:20:c9:
         ed:a6:b9:22:9f:57:e4:68:8b:a1:a3:c4:26:8e:d0:4f:94:80:
         ef:5a:e4:d9:6f:d2:df:bc:2a:a6:9a:27:89:38:96:8c:0e:81:
         96:51:3f:5a:ae:49:2c:b9:7e:80:2e:4a:cd:e2:ed:bd:61:b2:
         f8:3e:9b:06:ae:11:59:84:71:08:c2:98:c1:ef:fe:12:0e:8a:
         c3:90:e7:2e:48:dc:1b:23:7f:d4:19:92:97:d6:9d:d6:b3:14:
         f6:a2:c1:82:b3:ef:d7:b6:87:3a:6d:c1:81:db:69:73:50:f8:
         8f:4c:dd:7c:02:0a:22:a7:c3:e9:c4:e1:75:e5:a6:d4:73:d3:
         37:61:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:21:38 2024 by rpki-client on console-fra.rpki-client.org