Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
File:                     34352e3233362e31302e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier:          72D2sKjedPnAV3cOWM+BeZCuuO2EwhQnStC+Xj+YKGM=
Subject key identifier:   D5:AD:D0:6A:C7:85:DD:7D:2B:27:83:3E:A9:A9:A8:76:0B:4F:9B:E6
Certificate issuer:       /CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Certificate serial:       42A274136520D04D82C1C162E308606F58B7A758
Authority key identifier: BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa
Signing time:             Fri 30 Aug 2024 19:52:44 +0000
ROA not before:           Fri 30 Aug 2024 19:47:44 +0000
ROA not after:            Fri 29 Aug 2025 19:52:44 +0000
asID:                     268213
IP address blocks:        45.236.10.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a2:74:13:65:20:d0:4d:82:c1:c1:62:e3:08:60:6f:58:b7:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
        Validity
            Not Before: Aug 30 19:47:44 2024 GMT
            Not After : Aug 29 19:52:44 2025 GMT
        Subject: CN=D5ADD06AC785DD7D2B27833EA9A9A8760B4F9BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:ed:79:71:75:84:ba:09:9b:5a:c4:67:70:
                    7e:23:b5:20:ca:18:c3:81:9f:6e:b1:03:20:97:ec:
                    e0:26:84:a5:c3:e2:8c:4a:8e:0e:73:ff:00:77:75:
                    b6:8d:e1:c4:21:b9:b9:32:b1:af:42:60:cd:01:aa:
                    54:bd:7e:f8:61:db:54:49:ed:1b:22:43:d2:38:7d:
                    8e:52:93:88:4e:ec:23:04:75:17:e1:1f:32:45:21:
                    c6:c7:24:2c:6f:07:13:39:53:80:f5:00:ab:c4:8d:
                    d2:24:5a:09:56:25:e6:32:72:b3:fc:a3:e8:9f:2d:
                    7c:fc:16:0f:1f:98:a5:05:5b:9a:df:81:af:a6:e1:
                    28:0e:61:7b:04:2c:b6:b8:9f:b9:1d:3e:d1:9f:0d:
                    57:1c:fe:c5:51:aa:e6:a3:21:09:c1:89:bf:67:9a:
                    37:ed:9d:6f:56:73:1f:03:94:5a:17:32:0b:9f:3b:
                    81:ff:bb:9b:5c:9d:21:9a:70:34:92:c1:c8:ba:b1:
                    e4:0b:c4:d7:da:9d:7b:12:17:af:a6:36:82:3a:d8:
                    02:b9:f5:12:57:b2:39:f9:e7:5f:7c:aa:d2:09:70:
                    60:57:bb:df:84:66:34:12:6f:5e:bc:1b:7d:17:ba:
                    48:72:0f:94:54:86:58:cc:e2:05:4d:a9:cc:43:5b:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:D0:6A:C7:85:DD:7D:2B:27:83:3E:A9:A9:A8:76:0B:4F:9B:E6
            X509v3 Authority Key Identifier:
                keyid:BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e31302e302f32342d3234203d3e20323638323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:8e:83:9b:42:a5:5c:8a:a0:8f:58:ed:d3:51:e0:eb:d0:
         bd:55:6e:07:23:ba:f7:f5:84:a0:02:e8:9a:30:24:6e:e2:b0:
         bd:a1:3b:47:1a:1f:9b:f0:52:1a:fe:a9:65:d5:33:3f:5c:21:
         e6:89:2f:89:9b:48:ff:b9:e9:8f:36:2a:9b:ed:ec:26:4f:ac:
         13:c1:6b:78:65:de:ad:98:fb:60:eb:8f:55:87:65:a4:74:65:
         d5:cb:c4:a6:cd:dd:9a:f8:79:40:df:46:49:95:f3:6d:c1:44:
         70:9f:55:0f:25:12:ee:14:d2:3a:d8:17:74:f1:04:7e:e0:3e:
         9a:57:7a:17:57:45:3f:f0:6e:76:6c:00:0c:b8:7b:22:ac:f2:
         68:b8:47:75:95:03:51:14:52:50:9d:51:fc:18:fc:89:5b:ae:
         dc:6f:b8:59:16:d3:8a:7d:a2:92:6e:e6:9e:20:df:be:3e:aa:
         5f:69:de:42:50:02:81:59:8d:9a:0a:12:bc:a1:e9:a8:65:69:
         5a:a1:03:8e:2c:6d:18:7d:9b:b7:55:61:13:5c:9b:93:43:09:
         4e:0f:9e:9d:9f:a0:98:fb:c3:93:b0:9b:12:26:57:1c:73:b3:
         ef:3a:88:20:d5:1c:9f:5f:7c:8f:0b:a5:df:1c:31:75:07:3f:
         e4:f3:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 11:04:07 2024 by rpki-client on console-ams.rpki-client.org