Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa
File:                     34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa (raw, json)
Hash identifier:          AP25r2aqN4+sE5YFkLQstcF6juQnHMvX/JV6ndrWwNk=
Subject key identifier:   2F:48:28:51:56:6E:69:2D:EE:3E:3E:1D:11:FD:19:B7:3F:AC:AB:97
Certificate issuer:       /CN=8BDFC531CBB34B13539161393F5B006FA083108E
Certificate serial:       60E7A51C1C72EBA72375FD7265177F8C38D5500B
Authority key identifier: 8B:DF:C5:31:CB:B3:4B:13:53:91:61:39:3F:5B:00:6F:A0:83:10:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDFC531CBB34B13539161393F5B006FA083108E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa
Signing time:             Wed 20 Sep 2023 20:41:29 +0000
ROA not before:           Wed 20 Sep 2023 20:36:29 +0000
ROA not after:            Wed 18 Sep 2024 20:41:29 +0000
asID:                     262872
IP address blocks:        45.171.230.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:a5:1c:1c:72:eb:a7:23:75:fd:72:65:17:7f:8c:38:d5:50:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BDFC531CBB34B13539161393F5B006FA083108E
        Validity
            Not Before: Sep 20 20:36:29 2023 GMT
            Not After : Sep 18 20:41:29 2024 GMT
        Subject: CN=2F482851566E692DEE3E3E1D11FD19B73FACAB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3b:eb:d4:e0:07:8e:9b:ea:41:dc:5f:ad:1b:
                    c6:3f:20:42:d9:45:a6:35:06:03:49:89:1e:6c:31:
                    85:18:62:85:ed:2f:b8:55:dd:cf:10:e7:b1:47:20:
                    a4:e7:b2:1a:fc:20:5c:f5:f6:80:42:b9:e9:ed:4f:
                    89:c4:2d:d8:73:71:67:69:a1:90:fd:9a:70:32:fb:
                    36:ce:cb:ee:2e:9f:26:74:f6:3c:65:f8:7c:33:85:
                    49:45:31:45:d8:07:4d:79:5c:48:d5:a6:b9:0c:82:
                    fa:5e:e5:0f:cf:f9:7d:4e:fb:0f:93:96:5a:4c:73:
                    9d:d3:a6:af:6a:58:27:0c:ad:0f:4a:a3:15:1e:e4:
                    3c:bd:19:74:cc:d3:6e:68:44:c7:3e:99:3d:bb:b5:
                    6c:bb:f5:4e:ba:f2:88:0d:48:fa:c1:1f:63:d1:47:
                    d1:0b:62:2c:fc:69:27:ea:c2:b7:03:ff:93:52:c0:
                    40:b5:fb:50:f8:5a:ab:77:2e:d5:18:26:48:2c:b1:
                    86:5d:4f:21:48:16:40:bc:12:5e:d9:4c:28:c5:78:
                    71:c8:ee:d3:87:21:93:c5:46:aa:d1:3b:81:fb:ea:
                    15:b1:8e:ed:16:6e:7d:44:d8:6d:30:65:58:96:43:
                    55:e2:d8:a1:4d:84:22:73:7d:bc:83:63:dc:b9:64:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:28:51:56:6E:69:2D:EE:3E:3E:1D:11:FD:19:B7:3F:AC:AB:97
            X509v3 Authority Key Identifier:
                keyid:8B:DF:C5:31:CB:B3:4B:13:53:91:61:39:3F:5B:00:6F:A0:83:10:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/8BDFC531CBB34B13539161393F5B006FA083108E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BDFC531CBB34B13539161393F5B006FA083108E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233302e302f32342d3234203d3e20323632383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:76:3e:c7:a6:7c:1f:e8:8e:a7:fd:dd:92:ed:83:63:45:43:
         a2:60:4e:44:c7:b7:3a:3a:2d:91:8c:58:7f:18:03:4e:4b:09:
         8a:f8:77:44:81:e3:55:90:4f:43:2d:80:39:dd:51:82:c9:05:
         ac:c7:14:43:1d:78:8d:3b:7c:31:1e:78:3d:19:c3:d3:c6:ff:
         00:69:e7:87:7b:d0:46:43:eb:38:84:ae:81:5e:6e:88:6a:b5:
         7b:87:51:49:7b:fa:b3:a5:cf:bd:5c:d4:6e:55:f3:20:c8:8f:
         57:80:40:b6:b9:15:1b:0a:d1:11:72:d2:4c:09:46:f0:19:88:
         09:ae:e9:aa:b3:47:21:7e:25:07:b8:d1:87:75:a2:d0:b6:f3:
         b5:36:9b:99:1d:d7:d3:e5:42:60:7d:fb:48:0b:c5:e2:aa:0c:
         9c:79:0e:9c:19:e3:fc:df:d7:2f:c1:fa:15:98:73:27:fa:86:
         39:2c:46:45:c8:98:23:c4:20:fb:c9:13:91:12:20:07:6f:c4:
         71:52:ce:ad:e8:79:21:2b:99:88:79:b3:98:06:57:da:7c:b5:
         14:bd:b9:89:5a:39:62:dc:2d:db:eb:e0:55:90:45:33:9b:22:
         b2:64:be:8a:02:c2:5d:da:f3:0a:83:e0:93:86:86:76:b3:fe:
         9c:03:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 08:34:56 2023 by rpki-client on console-ams.rpki-client.org