Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32342d3234203d3e20323733343030.roa
File:                     34352e3137322e3137342e302f32342d3234203d3e20323733343030.roa (raw, json)
Hash identifier:          S6GjYumv/vTJgFrzwhFYP/+szkBUaVc4siH19hCGC/Q=
Subject key identifier:   E3:A2:CB:95:51:42:3C:0A:E1:C6:B2:C5:41:DB:64:94:46:E6:7C:F8
Certificate issuer:       /CN=58BFD58B56019A8D8D70578235BD8FA5BDB8F825
Certificate serial:       7DAB03412A59978781D9DF137BF844CE3A2545D0
Authority key identifier: 58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32342d3234203d3e20323733343030.roa
Signing time:             Thu 27 Jun 2024 12:11:05 +0000
ROA not before:           Thu 27 Jun 2024 12:06:05 +0000
ROA not after:            Thu 26 Jun 2025 12:11:05 +0000
asID:                     273400
IP address blocks:        45.172.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ab:03:41:2a:59:97:87:81:d9:df:13:7b:f8:44:ce:3a:25:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BFD58B56019A8D8D70578235BD8FA5BDB8F825
        Validity
            Not Before: Jun 27 12:06:05 2024 GMT
            Not After : Jun 26 12:11:05 2025 GMT
        Subject: CN=E3A2CB9551423C0AE1C6B2C541DB649446E67CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:40:ba:2d:9a:6f:85:97:c6:a8:6d:27:33:
                    48:ca:fa:2f:47:e5:a6:5a:d7:f2:be:4e:c1:79:94:
                    35:ce:1c:87:f1:fa:97:a3:32:fd:21:f4:0e:7e:06:
                    c1:01:f6:78:7a:ff:59:be:cc:30:eb:84:c2:31:7e:
                    ad:98:58:0e:82:1d:e9:a5:db:26:f4:66:77:6b:c1:
                    9a:25:55:cd:f4:61:c7:f9:a6:f4:69:9f:7f:bb:a7:
                    b5:81:d1:52:4a:08:10:9b:b9:09:05:72:be:33:e8:
                    88:c0:20:88:a4:43:d6:d6:9d:47:be:de:ad:1b:e3:
                    17:d6:9e:5c:6c:db:0b:05:62:da:62:72:e5:62:86:
                    3c:65:27:48:d8:3b:d9:9b:ad:8c:d9:11:8e:c4:67:
                    6a:a1:16:b9:d4:ce:a4:28:20:be:a0:30:14:91:a6:
                    98:70:1f:3c:b3:22:78:44:05:2f:c0:e9:b8:da:12:
                    5a:74:16:d1:b5:42:85:10:c1:fd:ab:e0:6c:29:f6:
                    89:79:1e:fa:6b:69:ea:8b:1e:19:e7:5b:55:fd:e1:
                    71:c8:ea:0e:8d:64:04:a5:39:5b:64:50:85:7d:12:
                    e8:a4:fa:3f:87:e1:0c:22:60:46:4b:86:66:7c:39:
                    e6:76:43:09:c2:4b:8b:94:b2:0b:29:49:e5:9e:c8:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A2:CB:95:51:42:3C:0A:E1:C6:B2:C5:41:DB:64:94:46:E6:7C:F8
            X509v3 Authority Key Identifier:
                keyid:58:BF:D5:8B:56:01:9A:8D:8D:70:57:82:35:BD:8F:A5:BD:B8:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58BFD58B56019A8D8D70578235BD8FA5BDB8F825.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bd7mmKj1NtLVCaQALxUsEFChyuBLogdirhQq3jGKQq1/0/34352e3137322e3137342e302f32342d3234203d3e20323733343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:65:75:f5:5e:b9:e2:00:4b:21:f0:80:16:8e:d6:53:1d:
         c4:4f:87:37:15:f0:48:70:64:c5:40:73:42:d3:67:bc:f3:87:
         b3:2c:e9:49:54:3f:f1:cb:d5:fd:53:fb:59:b8:0a:05:6f:52:
         d6:00:35:81:f1:c3:02:33:67:a6:4e:9d:55:6a:3a:b7:14:20:
         ff:43:c1:e7:ae:9d:f2:97:d4:ce:37:b0:8a:29:03:2b:e7:99:
         ac:4b:a4:7c:65:86:ad:8d:60:f5:21:2e:e3:11:f9:c6:5a:72:
         55:66:3a:0a:47:8a:dd:3d:25:1c:f9:15:e4:60:a7:aa:5b:4d:
         8d:ee:a9:e3:b5:9b:99:43:9b:88:4a:1b:96:55:cc:23:9d:da:
         c3:04:b3:6c:03:f8:78:e8:7c:14:d0:b9:15:48:9e:52:0a:71:
         73:bc:7b:93:2f:2a:98:5b:53:ef:7d:ca:d3:9c:1f:d2:8b:f0:
         7b:9a:70:ee:59:6a:71:c4:1e:d7:54:86:d7:2a:2e:9d:7c:8f:
         a2:2e:ce:65:de:0b:66:a5:af:d6:e7:ce:de:29:a7:2d:26:ea:
         20:ba:cc:01:cb:8c:86:2c:49:c8:de:7a:e1:69:7a:6d:ec:37:
         d1:ab:eb:a6:df:ff:24:2b:8f:a9:4d:21:5f:d2:cf:5c:6b:2a:
         78:65:6c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 22:29:07 2024 by rpki-client on console-fra.rpki-client.org