Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa
File:                     34352e3139312e36302e302f32342d3234203d3e20323639363637.roa (raw, json)
Hash identifier:          +1nhHiZS1fPYG2KcTuF57GyZSKAJR8ZODJHbdCJRbPA=
Subject key identifier:   34:74:F0:D7:A1:C5:87:6A:61:D0:17:DB:E8:E8:78:ED:DE:95:CE:52
Certificate issuer:       /CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Certificate serial:       5DE38571007560C97BE56FA31332326B5C0F3450
Authority key identifier: 31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa
Signing time:             Wed 23 Oct 2024 20:04:27 +0000
ROA not before:           Wed 23 Oct 2024 19:59:27 +0000
ROA not after:            Wed 22 Oct 2025 20:04:27 +0000
asID:                     269667
IP address blocks:        45.191.60.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e3:85:71:00:75:60:c9:7b:e5:6f:a3:13:32:32:6b:5c:0f:34:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
        Validity
            Not Before: Oct 23 19:59:27 2024 GMT
            Not After : Oct 22 20:04:27 2025 GMT
        Subject: CN=3474F0D7A1C5876A61D017DBE8E878EDDE95CE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:ab:c5:aa:2e:6d:12:da:ad:17:df:f7:98:
                    81:53:c6:e8:c2:57:4a:a4:f3:2a:9e:7c:22:f9:a8:
                    3e:f2:69:3b:5f:65:10:eb:46:a6:a8:9c:45:fd:fa:
                    46:34:cf:2e:38:c1:ee:fa:e8:9a:bb:a3:95:24:3a:
                    56:6b:13:ab:a5:c9:77:f0:09:4c:19:c0:9b:2a:65:
                    ce:a7:6d:c1:52:d3:e5:18:e0:f2:e4:3b:b2:f4:ed:
                    65:72:99:ba:3c:6d:de:f7:d6:8b:5b:3b:5c:58:b0:
                    8c:ba:2f:a5:a1:db:56:cc:61:fa:52:f4:0a:30:86:
                    8e:da:de:c0:3f:14:4f:ba:bc:33:51:19:38:2f:6b:
                    98:91:8f:66:a9:3c:c2:22:7f:32:41:90:1e:c3:7f:
                    b7:84:d9:d4:cc:54:68:2c:55:87:6e:22:18:96:1b:
                    9e:6c:0d:6a:a6:9e:0f:4e:2e:22:14:38:b5:b6:4a:
                    f5:af:73:af:8c:ae:ec:49:db:12:d0:34:d1:63:19:
                    cf:e2:6e:97:f7:c4:e9:66:f1:b1:9b:50:48:7d:d3:
                    f8:d4:c3:a6:ce:53:10:ba:23:65:be:51:0b:6c:e9:
                    cc:33:41:06:29:15:76:a3:cc:c7:b2:76:7f:8d:6a:
                    0a:c8:93:08:df:9e:05:d5:9d:e5:03:7f:44:46:4f:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:74:F0:D7:A1:C5:87:6A:61:D0:17:DB:E8:E8:78:ED:DE:95:CE:52
            X509v3 Authority Key Identifier:
                keyid:31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32342d3234203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:53:0a:d2:47:3b:69:48:65:c8:84:a5:fe:e6:b0:e7:1b:a4:
         93:b0:92:cc:3e:53:02:93:34:35:57:45:fd:4b:6c:91:69:58:
         dd:38:56:1c:bf:d9:2b:fe:c6:ed:3d:28:cd:d8:b2:7d:ad:cf:
         d2:3e:c4:64:a1:50:ca:bd:db:93:20:29:4d:26:62:94:d2:87:
         4f:2d:0a:75:2f:59:0f:a8:d8:84:be:27:20:c7:66:42:11:29:
         57:3b:de:2c:c1:8c:e3:56:13:bd:25:84:33:56:82:9e:cc:be:
         b0:56:42:49:c8:89:7e:f0:70:81:5b:d7:ee:1b:57:c1:f7:ae:
         bd:67:61:c3:ef:62:7d:d7:3d:96:04:2b:70:ac:9c:42:4b:16:
         38:98:fa:33:6c:d0:2e:b4:71:83:a4:95:f1:48:1a:ea:73:58:
         d9:f4:3f:b0:07:96:b0:36:a1:7d:f7:c0:32:cc:06:01:f3:29:
         26:10:25:db:0f:f8:03:ba:d3:bc:85:c8:a7:50:7a:47:12:56:
         83:2f:18:35:a5:8b:5d:7c:2d:80:3d:08:39:15:b4:a5:57:bc:
         58:75:25:0a:48:3b:33:92:35:98:d5:da:6d:9c:69:10:df:9f:
         76:18:1b:93:4d:98:ac:a3:3c:e7:4d:83:86:b6:58:11:21:70:
         94:c6:b3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 08:39:23 2024 by rpki-client on console-fra.rpki-client.org