Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa
File:                     34352e3232362e38342e302f32322d3234203d3e20323636393930.roa (raw, json)
Hash identifier:          UErFDNSFL8tNbVTHzS3vpgfA7fJUeVcnUP5USk1/ahk=
Subject key identifier:   79:DB:2E:7C:DC:D1:67:C1:11:07:AD:30:AB:1D:30:A7:8C:C6:01:EC
Certificate issuer:       /CN=DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE
Certificate serial:       1703453A9D9EDB4137B4D45D569050C3D2A8D123
Authority key identifier: DE:27:7B:F4:D8:B6:A3:CC:2A:B0:DA:19:5A:77:2F:7A:BA:D4:65:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa
Signing time:             Thu 04 Apr 2024 05:25:55 +0000
ROA not before:           Thu 04 Apr 2024 05:20:55 +0000
ROA not after:            Thu 03 Apr 2025 05:25:55 +0000
asID:                     266990
IP address blocks:        45.226.84.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:45:3a:9d:9e:db:41:37:b4:d4:5d:56:90:50:c3:d2:a8:d1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE
        Validity
            Not Before: Apr  4 05:20:55 2024 GMT
            Not After : Apr  3 05:25:55 2025 GMT
        Subject: CN=79DB2E7CDCD167C11107AD30AB1D30A78CC601EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:61:1f:85:13:e3:bd:dd:4e:11:be:1d:bc:
                    4c:f7:db:3e:56:87:c6:09:0e:40:fe:49:c2:3b:c7:
                    f2:6e:3d:58:3c:fa:35:43:78:03:99:ec:06:37:0c:
                    c5:d0:1a:66:e8:3d:07:9c:84:49:bc:2d:9b:8f:91:
                    b1:16:56:24:52:4a:ae:e1:cd:e0:da:78:dc:06:57:
                    34:52:9a:03:b7:ca:cd:80:65:9b:d6:e7:32:e7:dc:
                    d4:0d:48:5f:b7:b3:2a:3f:e3:84:33:e7:8d:33:6e:
                    95:7e:c8:86:d1:8e:e1:79:61:98:2b:ca:96:2b:8b:
                    4f:2d:42:d8:93:4a:a5:45:a0:0f:ca:df:20:ff:e1:
                    9e:f5:e8:21:f4:2b:92:ab:06:c7:4f:56:d0:9b:9a:
                    75:ba:a2:8a:61:50:fe:8a:19:49:74:6c:da:5d:2d:
                    dc:e3:57:01:34:d6:e6:0e:89:1c:76:03:d1:05:e7:
                    ed:b2:b8:39:d0:16:16:8f:49:aa:5f:28:8e:05:b2:
                    24:64:d8:3f:3b:f9:ed:be:1a:ba:4a:67:56:b5:e2:
                    8c:af:0d:84:a1:c5:f5:21:0b:70:ce:4a:68:1d:ff:
                    86:36:c2:41:73:81:9f:c3:e3:12:d9:20:03:68:3a:
                    8b:62:86:bb:ba:c0:ad:1d:4a:cb:03:a4:e0:ab:73:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DB:2E:7C:DC:D1:67:C1:11:07:AD:30:AB:1D:30:A7:8C:C6:01:EC
            X509v3 Authority Key Identifier:
                keyid:DE:27:7B:F4:D8:B6:A3:CC:2A:B0:DA:19:5A:77:2F:7A:BA:D4:65:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE277BF4D8B6A3CC2AB0DA195A772F7ABAD465EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/1/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:fc:ea:23:f4:9c:e6:ec:30:80:7b:09:39:78:06:b4:52:
         3a:43:83:0f:79:1c:c8:80:74:43:9b:4e:53:65:4e:4e:72:00:
         19:df:f7:d2:ed:77:55:6f:47:8e:9e:48:34:bf:f4:ac:ff:fa:
         9f:e9:e2:05:6d:c9:a3:e5:b7:2b:8e:5d:d2:42:d4:1f:bd:ce:
         34:2c:b2:93:56:6d:c9:00:d4:74:e9:13:87:e0:45:7f:b7:db:
         2d:da:56:6e:b6:20:7a:8a:55:0b:05:4d:e7:ae:7c:44:49:b6:
         b4:29:bc:ca:49:7b:d2:77:9e:bb:76:89:a5:0b:42:89:06:f3:
         99:f0:d4:53:19:b6:99:53:32:87:0a:18:12:c7:20:4d:48:07:
         c6:53:c0:15:95:68:13:a5:b5:52:ed:af:6b:2c:a9:45:23:47:
         d2:25:74:4c:e9:f4:d7:e2:ae:2c:3c:7f:e0:13:77:78:94:20:
         30:a2:06:7e:e6:de:82:f3:1a:17:a9:1b:a5:f6:df:7a:c8:f8:
         aa:fe:32:14:e9:55:f4:96:12:f1:bc:83:a7:dd:b7:21:ec:21:
         58:47:91:a8:9c:76:14:2b:3d:8b:df:d9:07:83:c2:3b:47:67:
         69:10:65:71:eb:87:6d:12:76:14:9f:0c:8a:a1:d2:cd:26:35:
         12:f5:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org