Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32342d3234203d3e20323639363637.roa
File:                     34352e3139312e36322e302f32342d3234203d3e20323639363637.roa (raw, json)
Hash identifier:          R6Eh0fb3Og5l7lcVWDry0z4C6HOCPiXd0/pvxBDvvAA=
Subject key identifier:   EA:AE:CD:8E:AD:2F:0A:FF:4E:FE:46:A1:BA:BD:8A:64:8B:45:03:67
Certificate issuer:       /CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Certificate serial:       330B273ACC79DEDDEA644DD5DFADE1DAF9B57715
Authority key identifier: 31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32342d3234203d3e20323639363637.roa
Signing time:             Wed 23 Oct 2024 20:04:21 +0000
ROA not before:           Wed 23 Oct 2024 19:59:21 +0000
ROA not after:            Wed 22 Oct 2025 20:04:21 +0000
asID:                     269667
IP address blocks:        45.191.62.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:27:3a:cc:79:de:dd:ea:64:4d:d5:df:ad:e1:da:f9:b5:77:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
        Validity
            Not Before: Oct 23 19:59:21 2024 GMT
            Not After : Oct 22 20:04:21 2025 GMT
        Subject: CN=EAAECD8EAD2F0AFF4EFE46A1BABD8A648B450367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:37:d8:30:74:6b:f1:2a:5d:48:8a:bd:da:50:
                    c2:e4:0f:59:27:90:5e:d5:d9:67:79:3d:68:dd:3b:
                    d2:69:76:a6:40:c7:49:ca:a4:fa:06:d8:45:1a:fe:
                    dd:33:fc:0a:4b:aa:d5:b1:2b:01:8d:3b:39:a9:9e:
                    8c:24:0e:c8:76:54:bb:80:98:db:b0:db:f0:ea:bd:
                    79:39:9b:61:21:92:f6:f6:64:41:10:10:51:43:d0:
                    ca:b6:99:7d:18:69:c9:f2:2a:17:ab:cd:ba:eb:90:
                    3a:63:4f:24:ad:3f:db:c5:6a:30:c0:c4:3d:6f:db:
                    b3:52:46:5e:bd:f6:62:88:7b:4d:36:8b:17:67:58:
                    90:6a:29:5d:0e:7a:01:b1:e5:fb:64:c9:4a:fa:50:
                    66:74:ec:cb:36:b2:6d:4d:70:56:bd:bf:7c:cd:81:
                    88:e6:c5:64:78:a5:e4:9f:a6:92:99:5d:c9:d3:fc:
                    38:27:49:d1:b8:85:d5:48:a3:77:d8:80:32:ff:70:
                    2e:63:38:fe:d7:b7:47:a4:16:af:08:a8:52:8c:d8:
                    c5:4a:3a:b6:74:72:fd:85:65:3a:77:47:59:7d:39:
                    24:75:f3:ac:d4:cc:12:48:86:59:89:e8:c7:c1:3a:
                    8a:fc:c1:cc:c8:cd:91:f3:97:5b:ce:e8:dc:9e:13:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AE:CD:8E:AD:2F:0A:FF:4E:FE:46:A1:BA:BD:8A:64:8B:45:03:67
            X509v3 Authority Key Identifier:
                keyid:31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32342d3234203d3e20323639363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:24:cc:ed:71:fb:bf:2a:be:13:8d:37:40:09:90:d6:46:
         0c:1e:4d:be:a2:5e:c0:f2:56:95:47:46:b6:3c:84:1a:04:b9:
         59:d0:1e:cd:c5:2a:23:c9:05:c3:8d:73:3a:f1:54:f1:22:2e:
         09:c7:e9:e3:9e:f8:19:a4:0a:f6:d4:fc:1f:8a:3d:73:5b:f1:
         92:fb:9e:e1:a3:57:95:62:08:5a:a3:86:6a:3b:62:8c:d3:28:
         9c:4b:55:cf:6f:ee:e2:aa:d2:78:2f:ad:7a:04:74:a1:74:a7:
         7d:27:78:73:f1:17:17:89:b0:08:e2:38:8f:da:41:74:3d:78:
         0d:97:7d:bf:2e:da:49:27:24:81:37:da:6b:50:41:58:e1:8a:
         4b:29:34:28:82:16:c6:f1:a5:5d:4a:0d:c7:34:9f:6e:c1:22:
         50:9f:15:5f:8b:98:e2:79:31:4d:aa:3c:58:27:cd:14:60:90:
         bc:56:14:6e:58:5d:1b:62:46:b2:eb:00:1c:6e:6b:43:01:29:
         90:22:9d:f1:45:17:61:ec:51:a5:2f:8b:61:4d:91:54:97:81:
         b9:23:4a:b4:09:84:c7:01:02:39:2d:98:3c:dd:44:9e:e9:42:
         96:06:07:0c:87:33:1e:02:c8:c6:72:1f:a1:5e:48:c5:92:e3:
         74:0b:ba:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:31 2024 by rpki-client on console-ams.rpki-client.org