Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/1/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa
File:                     34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa (raw, json)
Hash identifier:          emkQUwnJlnwiuPCzX52C3OgkVSHmolsvKorlS9PlPb4=
Subject key identifier:   AF:6C:22:17:97:D5:75:B7:95:40:D1:4E:B3:8E:BD:D3:D9:34:3C:C5
Certificate issuer:       /CN=7F81D5346F77B2A9405B4244AA6F0FF1952E50F6
Certificate serial:       3B02CEF52E3F16E13583B421844A37CB983DC690
Authority key identifier: 7F:81:D5:34:6F:77:B2:A9:40:5B:42:44:AA:6F:0F:F1:95:2E:50:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F81D5346F77B2A9405B4244AA6F0FF1952E50F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/1/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa
Signing time:             Thu 04 Apr 2024 23:29:21 +0000
ROA not before:           Thu 04 Apr 2024 23:24:21 +0000
ROA not after:            Thu 03 Apr 2025 23:29:21 +0000
asID:                     269206
IP address blocks:        45.181.252.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:02:ce:f5:2e:3f:16:e1:35:83:b4:21:84:4a:37:cb:98:3d:c6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F81D5346F77B2A9405B4244AA6F0FF1952E50F6
        Validity
            Not Before: Apr  4 23:24:21 2024 GMT
            Not After : Apr  3 23:29:21 2025 GMT
        Subject: CN=AF6C221797D575B79540D14EB38EBDD3D9343CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:0e:0f:84:57:21:b1:df:83:fb:0f:c9:9f:
                    4d:9d:32:3a:ee:dc:a3:5b:ec:0c:ff:f2:b1:70:89:
                    8c:db:0b:ab:cc:03:53:9f:d5:6f:ac:24:51:ff:a4:
                    7c:54:e0:a6:40:f7:f7:ea:5f:b0:95:85:52:11:7e:
                    75:32:e9:5c:d4:b5:65:69:63:db:d7:c1:0d:28:95:
                    1a:44:e7:d9:ae:67:19:79:fa:36:1d:0d:e1:e2:d3:
                    5a:4b:d7:e3:c6:65:8c:b2:bf:c4:0c:01:83:6c:1b:
                    54:dc:b5:8d:b9:09:a6:4d:19:51:70:6e:8a:33:f1:
                    84:72:5e:6d:7f:44:6e:27:f9:2d:b0:86:87:3a:c9:
                    ba:6e:ba:6d:e2:2c:91:14:5f:f8:67:5d:45:e6:ea:
                    f7:80:af:6d:74:bb:71:2e:eb:9d:2e:83:af:87:49:
                    5e:2e:e6:5f:9e:fe:38:8a:6f:38:61:a1:36:e9:9c:
                    47:2f:d2:0a:af:2c:4f:21:2d:cb:87:c2:ca:23:2c:
                    34:82:e4:50:5b:78:18:c7:aa:7f:96:ce:0d:98:ed:
                    91:7e:58:4e:27:ec:f9:92:79:75:5d:22:cf:a0:8f:
                    9d:81:44:77:48:08:08:22:3a:e0:72:aa:be:3e:bb:
                    e6:88:fd:91:4d:e2:30:1d:db:1e:a5:5e:9b:32:11:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6C:22:17:97:D5:75:B7:95:40:D1:4E:B3:8E:BD:D3:D9:34:3C:C5
            X509v3 Authority Key Identifier:
                keyid:7F:81:D5:34:6F:77:B2:A9:40:5B:42:44:AA:6F:0F:F1:95:2E:50:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/1/7F81D5346F77B2A9405B4244AA6F0FF1952E50F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F81D5346F77B2A9405B4244AA6F0FF1952E50F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/gcL3UEnqEBK9dBCJy2gP1zWXgM6J7zcxivCjwSzp3cj/1/34352e3138312e3235322e302f32322d3234203d3e20323639323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:09:7c:57:55:f7:75:98:31:eb:cd:a8:2e:78:11:6a:00:85:
         cf:22:b2:ca:85:b9:8f:1e:16:9d:85:d1:c5:0f:fa:12:5d:7a:
         c8:4f:08:24:76:4d:20:f4:3f:a5:81:64:aa:44:1d:7b:90:30:
         b0:6f:3a:b2:0b:99:1b:e6:dd:28:10:2b:b7:1b:98:df:a1:8a:
         57:b1:ce:0e:bc:82:5c:2c:c5:77:f8:e7:b5:4a:1b:bd:1e:2d:
         f7:d5:0d:1a:b6:6c:d7:45:95:2b:2d:35:ca:38:ca:2a:de:4c:
         e3:1b:3e:00:d0:e4:05:c6:31:ef:68:d9:c4:ba:19:e0:9a:0f:
         54:73:35:85:3f:4e:e1:20:76:44:4d:34:e6:c7:0a:22:9b:d3:
         91:83:8b:f4:92:88:88:e3:8b:28:8c:5a:6b:f0:fc:59:d0:63:
         fd:86:88:b7:22:15:1e:a3:bb:e8:9b:62:11:95:7b:45:d6:d2:
         ee:ba:7a:f3:4c:df:6f:73:12:6a:0f:49:3d:82:f4:d1:02:93:
         94:88:33:22:21:30:98:84:05:6f:95:af:f7:96:f1:8f:ab:2c:
         25:dd:e2:4d:93:f5:56:b2:ba:4f:e7:39:96:4f:fa:c5:ef:98:
         b7:58:94:50:58:c4:56:13:cd:e4:e1:e7:85:3b:4f:f2:6e:89:
         20:78:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 16:21:48 2024 by rpki-client on console-ams.rpki-client.org