Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
File:                     34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa (raw, json)
Hash identifier:          eBEICeaeT3i/LvK+e/O7JZlhxylLfyyvT5bhn6Qofik=
Subject key identifier:   53:4C:04:76:49:AD:55:C8:4A:C9:AA:3D:5E:7B:14:4B:02:1B:4F:DE
Certificate issuer:       /CN=1B37940BBD99BD0D8ED48C883153F4D81D586516
Certificate serial:       1DDA9D583C2B60DA6BE3ED18AF24E1B0E2153FD9
Authority key identifier: 1B:37:94:0B:BD:99:BD:0D:8E:D4:8C:88:31:53:F4:D8:1D:58:65:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa
Signing time:             Wed 03 Apr 2024 23:01:43 +0000
ROA not before:           Wed 03 Apr 2024 22:56:43 +0000
ROA not after:            Wed 02 Apr 2025 23:01:43 +0000
asID:                     269329
IP address blocks:        45.184.128.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:da:9d:58:3c:2b:60:da:6b:e3:ed:18:af:24:e1:b0:e2:15:3f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B37940BBD99BD0D8ED48C883153F4D81D586516
        Validity
            Not Before: Apr  3 22:56:43 2024 GMT
            Not After : Apr  2 23:01:43 2025 GMT
        Subject: CN=534C047649AD55C84AC9AA3D5E7B144B021B4FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9d:b1:25:0e:cf:65:2c:7e:6f:86:6f:16:31:
                    90:6f:64:10:4e:6f:55:d7:77:f8:09:d5:2b:e3:93:
                    ea:4a:72:fd:e1:df:46:a8:dd:08:5f:c3:60:36:6d:
                    dd:44:2f:f9:7e:03:27:49:2f:8f:5f:fc:9a:d6:07:
                    99:42:1e:a7:27:ec:95:4a:c1:6d:41:c6:a7:2a:0c:
                    9b:8b:2d:f0:65:ca:50:09:e3:4d:42:5e:e7:dd:1e:
                    c6:1f:c4:bb:19:ea:90:6f:e3:dd:84:03:13:21:20:
                    d3:7a:56:5a:ba:9d:c4:52:93:c0:72:52:1d:ae:b6:
                    ff:6e:a3:8e:2b:45:89:d6:a6:65:b9:04:69:91:9a:
                    dd:c5:07:8a:54:a3:12:97:6c:eb:f2:e6:1b:ee:52:
                    33:f0:32:eb:c7:1e:bb:3d:c1:32:5f:88:2c:52:4b:
                    d8:8a:ee:2f:f3:8e:94:4a:d9:22:7b:80:37:35:99:
                    48:98:48:b5:17:ff:94:84:9d:81:39:c7:c3:e6:cf:
                    6d:38:77:81:b0:4d:da:30:06:6b:2b:d6:24:0c:d6:
                    5f:e2:10:b3:59:e1:27:b7:a1:82:cd:ad:f3:6c:49:
                    51:15:9f:97:88:13:ec:35:06:59:c1:9b:79:06:2c:
                    66:60:ec:d7:d7:d9:86:29:02:03:70:36:81:44:33:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4C:04:76:49:AD:55:C8:4A:C9:AA:3D:5E:7B:14:4B:02:1B:4F:DE
            X509v3 Authority Key Identifier:
                keyid:1B:37:94:0B:BD:99:BD:0D:8E:D4:8C:88:31:53:F4:D8:1D:58:65:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B37940BBD99BD0D8ED48C883153F4D81D586516.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/qV76aRC5ze31WWdeE66hfAGVhsqs1DXJsMKcPXAByPe/1/34352e3138342e3132382e302f32322d3332203d3e20323639333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:4a:41:cd:dc:28:ae:47:15:0b:53:47:08:07:65:bb:a1:
         f5:6a:3d:bc:e0:e2:d3:2c:e9:7e:b4:36:a3:27:1c:99:e4:54:
         78:c6:4a:7f:28:8e:69:f7:e3:01:45:69:64:0b:31:3e:47:1c:
         45:f3:be:39:b9:3b:7b:c4:c0:72:c1:ed:ef:58:78:c3:cd:89:
         0f:c2:1f:50:51:de:e8:f0:c2:f3:37:48:8f:88:c8:7b:06:f9:
         90:4d:a6:4e:28:bc:b9:86:19:17:b7:b5:28:97:0b:38:9c:1b:
         fc:84:1f:96:b3:4c:a4:ea:72:35:3f:08:ce:cf:8c:0e:7e:47:
         76:23:22:5c:02:49:b5:93:62:5a:5c:1e:84:d9:62:96:b7:48:
         f7:b1:31:9a:5f:02:20:48:61:bc:39:4a:bb:2c:a2:cc:a4:07:
         ff:86:3d:cc:03:31:26:d1:0f:6f:c9:97:da:4a:a4:c1:e0:68:
         24:8b:61:f4:3a:68:8f:1e:5e:ee:33:e4:b0:08:d7:d0:04:65:
         77:a1:6d:5f:60:47:e0:ea:98:53:70:b1:09:e4:f0:9a:bb:3c:
         c0:7d:56:6d:d1:41:f7:28:69:f6:5f:6c:f8:1a:ba:27:bd:20:
         57:38:fd:a2:a4:04:c7:eb:bd:91:e6:fc:8b:b1:a3:75:5e:8c:
         97:74:b1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 10:22:47 2024 by rpki-client on console-fra.rpki-client.org