Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36332e302f32342d3234203d3e20323639343537.roa
File:                     34352e3138372e36332e302f32342d3234203d3e20323639343537.roa (raw, json)
Hash identifier:          SNl+G+K+aNLrsF5x/YxDJf7B804k8Q6qoChD67jU2ag=
Subject key identifier:   9F:40:86:4D:D8:CB:B5:42:4A:22:36:50:43:41:20:4C:B9:42:5D:3F
Certificate issuer:       /CN=3361B78662C4F4994A60931D16B5383E3AB4E319
Certificate serial:       47A116DC7E710D27B9029D1FE0B188A5FC7B714C
Authority key identifier: 33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36332e302f32342d3234203d3e20323639343537.roa
Signing time:             Wed 05 Jun 2024 14:01:18 +0000
ROA not before:           Wed 05 Jun 2024 13:56:18 +0000
ROA not after:            Wed 04 Jun 2025 14:01:18 +0000
asID:                     269457
IP address blocks:        45.187.63.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a1:16:dc:7e:71:0d:27:b9:02:9d:1f:e0:b1:88:a5:fc:7b:71:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B78662C4F4994A60931D16B5383E3AB4E319
        Validity
            Not Before: Jun  5 13:56:18 2024 GMT
            Not After : Jun  4 14:01:18 2025 GMT
        Subject: CN=9F40864DD8CBB5424A2236504341204CB9425D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:0f:e6:22:c4:ce:01:48:be:8f:14:e9:fb:
                    81:72:5c:aa:c7:7a:2e:6e:85:72:ce:d4:2d:95:a0:
                    fd:15:26:ce:e8:24:e9:f0:88:e7:b3:23:93:9c:e3:
                    44:44:dc:2f:de:28:06:26:d8:b8:80:da:ef:32:45:
                    27:d0:b7:b4:1b:5f:f2:3d:8d:e5:f8:d1:99:29:f0:
                    9f:93:5c:73:4d:f7:c5:37:45:39:0e:68:d5:ec:05:
                    7a:12:fc:61:25:f1:ec:3a:10:c6:52:63:4f:74:57:
                    09:f9:c2:92:0d:80:0d:22:aa:3e:cc:38:0d:57:aa:
                    b9:77:03:31:c9:00:f7:5d:31:d4:ef:26:f3:d9:6e:
                    aa:d7:3a:e7:21:43:c5:bd:8f:4c:3f:db:61:90:b6:
                    fc:91:36:a9:bf:0f:94:9b:40:eb:11:45:f6:10:cd:
                    10:16:53:66:14:75:92:3d:b5:20:34:02:9f:d2:a0:
                    05:9b:6f:af:39:04:04:a0:51:94:22:4f:89:eb:94:
                    07:29:d9:b3:4d:19:25:34:6b:c7:c1:87:1a:34:3c:
                    6a:59:a8:bf:eb:59:0f:cc:81:d1:c4:8d:95:0a:b1:
                    33:e4:22:d2:d1:e9:af:ff:15:a3:f9:21:0e:5a:1f:
                    28:80:da:d6:0f:87:05:7b:54:d5:5b:f7:53:6d:9f:
                    af:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:40:86:4D:D8:CB:B5:42:4A:22:36:50:43:41:20:4C:B9:42:5D:3F
            X509v3 Authority Key Identifier:
                keyid:33:61:B7:86:62:C4:F4:99:4A:60:93:1D:16:B5:38:3E:3A:B4:E3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/3361B78662C4F4994A60931D16B5383E3AB4E319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B78662C4F4994A60931D16B5383E3AB4E319.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/1/34352e3138372e36332e302f32342d3234203d3e20323639343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:85:70:37:77:eb:41:4e:49:11:fe:bb:db:24:39:0c:c6:1d:
         84:75:ef:5d:e5:02:88:d0:5f:ec:f2:d3:9d:20:c7:27:87:e6:
         33:83:44:9f:e3:40:71:09:7d:08:e5:b4:85:66:2f:05:3d:68:
         3e:33:d0:3f:9d:21:bc:e6:f0:5c:f9:e4:2f:31:b9:9c:bc:20:
         0f:c9:1b:9a:9e:62:d8:81:03:9a:e2:e6:a8:f7:b3:f1:d1:65:
         c1:77:2e:37:e7:24:23:59:8b:65:f5:b0:c0:9a:70:80:fa:56:
         fc:bd:af:8e:8f:07:29:4b:20:56:61:d1:13:f6:41:ec:f4:7a:
         26:b8:8d:3d:ee:5c:e8:ec:8e:d2:72:79:11:37:bf:e7:5c:d8:
         93:8f:2d:55:51:37:05:23:4e:93:de:08:e3:33:4f:3d:52:75:
         60:3a:0c:82:ba:30:c9:8a:f1:7d:85:19:11:5b:b9:99:3e:48:
         5c:e5:27:6f:c1:5a:f5:49:c7:d4:96:fd:a9:f9:db:03:a3:43:
         7d:e6:ee:8a:5d:b5:ce:16:2d:76:0d:df:de:c0:bf:9d:45:9a:
         62:63:8f:d8:41:7b:32:57:89:44:75:c3:4a:d0:6f:3e:b0:31:
         b7:43:a1:35:d7:3f:dd:7a:74:17:78:e6:5d:b6:c1:ad:a4:a9:
         50:bf:ea:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 18:00:47 2024 by rpki-client on console-fra.rpki-client.org