Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
File:                     34352e3232352e36342e302f32322d3234203d3e20323632383437.roa (raw, json)
Hash identifier:          f7RWxd9yYmMz3ZEvrm0BBwsNSRkUs05R+BzlXmiqmH4=
Subject key identifier:   84:D4:9F:46:9A:B6:C7:F3:0E:43:3A:A5:DB:83:E9:0A:DC:D3:22:AD
Certificate issuer:       /CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
Certificate serial:       5B227EBE06BB6EB460B56FFCEE6E5B858A266AF1
Authority key identifier: 1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
Signing time:             Thu 04 Apr 2024 16:12:35 +0000
ROA not before:           Thu 04 Apr 2024 16:07:35 +0000
ROA not after:            Thu 03 Apr 2025 16:12:35 +0000
asID:                     262847
IP address blocks:        45.225.64.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:22:7e:be:06:bb:6e:b4:60:b5:6f:fc:ee:6e:5b:85:8a:26:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E2E6ED960A6A353DC84BE7F178278337B3007FC
        Validity
            Not Before: Apr  4 16:07:35 2024 GMT
            Not After : Apr  3 16:12:35 2025 GMT
        Subject: CN=84D49F469AB6C7F30E433AA5DB83E90ADCD322AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:37:68:8e:7e:14:ba:1f:2e:86:27:73:8c:
                    ee:dc:6a:dd:1b:89:9e:88:a9:92:dc:9e:50:52:2e:
                    88:74:ff:f4:dc:b9:8f:70:1f:fc:79:d2:ba:55:a5:
                    d1:f3:46:a1:ad:1c:09:c0:b9:95:c6:bf:a0:50:41:
                    12:b5:90:86:73:31:54:bc:cb:83:a4:bc:7b:df:fd:
                    86:91:1b:27:81:c3:75:23:c6:4e:53:ea:d9:a3:20:
                    24:5d:74:df:ad:0e:48:ae:8b:4f:af:dd:60:75:28:
                    c5:43:9b:46:65:3c:8a:59:f3:fc:02:5b:31:dc:ab:
                    95:49:6f:2a:6c:ce:7e:e1:b9:f2:f6:8e:f1:00:2c:
                    cb:ca:bd:e3:d1:bf:6f:cd:1a:e5:cd:ca:b0:ab:32:
                    38:b7:bf:71:a8:0e:ae:8f:2e:71:3d:2e:f9:a4:3d:
                    15:36:a1:95:b4:e8:98:43:a1:1b:0c:14:88:e7:e0:
                    d4:4b:9b:29:18:17:4d:ce:e1:de:b0:ae:f8:cd:b2:
                    2e:b4:74:82:10:76:c1:a1:c7:44:0c:b6:c6:b4:9d:
                    99:09:1a:fa:48:34:15:8c:1f:df:87:36:d1:cd:ed:
                    93:07:b0:bc:69:64:e7:64:f1:34:f3:ca:10:f2:8f:
                    07:78:0c:27:86:3c:e6:42:ac:3a:61:90:ff:35:72:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D4:9F:46:9A:B6:C7:F3:0E:43:3A:A5:DB:83:E9:0A:DC:D3:22:AD
            X509v3 Authority Key Identifier:
                keyid:1E:2E:6E:D9:60:A6:A3:53:DC:84:BE:7F:17:82:78:33:7B:30:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/1E2E6ED960A6A353DC84BE7F178278337B3007FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E2E6ED960A6A353DC84BE7F178278337B3007FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/2/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:37:2c:7d:a6:73:7c:85:db:16:56:bc:70:84:05:c6:d9:
         43:38:18:be:28:14:d5:80:bb:8b:9b:16:7a:18:df:db:26:d0:
         34:41:45:d8:2e:14:db:8a:67:c8:ac:b8:23:d3:fa:e6:b8:1e:
         0c:82:bc:65:f5:3e:5f:42:ae:fb:e6:2a:7b:7f:19:4d:a3:87:
         ba:00:94:d9:85:3e:05:8a:32:ab:1e:c8:d7:db:ba:73:41:1d:
         61:d3:b4:7b:b8:25:8a:ee:fb:1d:d0:fd:a6:da:da:aa:5d:b3:
         fa:42:3e:da:88:72:ff:39:0f:17:b8:a0:41:57:6f:ac:b2:85:
         44:6c:34:76:13:25:e5:dd:28:ba:7e:58:e7:59:31:24:e0:16:
         e7:17:28:6b:bc:c1:cf:7c:e2:74:5f:63:bd:66:12:7c:88:4a:
         b0:e0:7b:9e:59:02:36:af:c6:86:f5:42:e8:9a:b1:54:48:9e:
         d4:bc:89:cd:77:8a:89:9b:a6:1b:a1:a6:2f:f8:9d:73:ba:d4:
         4a:47:f8:fd:19:a4:5c:a5:43:97:cf:68:cd:ce:c8:fa:4a:24:
         f1:00:0c:cf:fa:a8:ae:94:08:32:6c:41:1a:f1:45:ed:a1:1f:
         87:36:15:ee:e0:65:d4:e7:2a:99:c3:d9:30:64:97:ed:f7:f3:
         8a:2f:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 22:15:47 2024 by rpki-client on console-fra.rpki-client.org