Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3234203d3e20323638373130.roa
File:                     34352e3137302e3233302e302f32332d3234203d3e20323638373130.roa (raw, json)
Hash identifier:          8U+koEIw5Xw5JfBsdEED86ogrBx9Fwslt7Uo7wOTJGc=
Subject key identifier:   66:F3:1F:2C:DF:C6:AF:78:6F:FE:D1:40:15:3A:BB:B0:31:5B:A4:5D
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       23B710B4ECE39BB141064386AA310191D431567C
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3234203d3e20323638373130.roa
Signing time:             Fri 26 Jul 2024 14:35:45 +0000
ROA not before:           Fri 26 Jul 2024 14:30:45 +0000
ROA not after:            Fri 25 Jul 2025 14:35:45 +0000
asID:                     268710
IP address blocks:        45.170.230.0/23 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b7:10:b4:ec:e3:9b:b1:41:06:43:86:aa:31:01:91:d4:31:56:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Jul 26 14:30:45 2024 GMT
            Not After : Jul 25 14:35:45 2025 GMT
        Subject: CN=66F31F2CDFC6AF786FFED140153ABBB0315BA45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:d4:29:fa:3b:c8:05:25:d9:01:ce:ca:62:
                    54:f1:15:af:40:c8:93:c9:80:69:ef:1d:14:90:5b:
                    49:3f:2c:64:87:e5:9f:b9:8d:15:d1:16:0a:5d:78:
                    0e:72:11:93:db:35:2c:15:b5:f8:4d:af:e7:09:80:
                    96:48:9e:91:f1:59:c6:79:88:2b:02:34:4c:ad:14:
                    bb:ea:c3:29:3a:9f:66:41:e9:d1:9b:6e:eb:95:0b:
                    8e:8f:b3:c1:6f:43:ae:06:ac:3b:3a:60:74:ff:12:
                    e2:f2:ce:53:5c:3a:47:55:a9:5d:05:c2:f1:6a:58:
                    a6:5c:03:0e:9f:8d:1f:e7:f8:1a:ba:db:57:38:5a:
                    9a:01:b1:9d:c2:5f:d3:1d:25:12:3c:4f:5c:ee:d2:
                    77:e2:4f:41:f7:ed:8a:ab:46:f0:8c:92:fc:20:56:
                    37:e7:4c:90:33:1c:85:1f:4f:3f:e0:e8:4c:cf:d7:
                    6c:3e:eb:76:80:41:fb:1b:3b:e7:9b:7f:26:7c:94:
                    b8:e3:75:17:b8:0d:69:0b:c3:97:30:e8:06:61:a7:
                    24:0a:80:d9:97:b9:98:b5:0f:5b:f9:b0:14:42:04:
                    ae:fb:81:fa:6e:71:95:52:55:01:1c:25:1f:26:fc:
                    8f:b1:ec:6e:4b:38:fb:9a:f9:87:26:39:01:fe:9f:
                    9b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:1F:2C:DF:C6:AF:78:6F:FE:D1:40:15:3A:BB:B0:31:5B:A4:5D
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3233302e302f32332d3234203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:6f:ea:68:0a:55:06:ed:6d:73:a2:d8:0c:cd:e8:a5:60:7f:
         25:bf:76:52:75:ef:80:09:26:56:29:57:97:4a:b1:6a:4f:96:
         86:1c:3c:96:02:09:ad:5d:1c:4d:33:c0:7a:39:bd:2c:08:80:
         74:bd:ae:22:40:a6:9d:09:e0:d2:d2:82:ee:b0:7c:8d:8b:49:
         70:c8:91:37:11:bc:a7:6c:a5:96:90:bc:03:7f:74:60:75:ec:
         96:03:fa:89:a3:4c:95:f4:8c:40:99:84:70:ec:27:45:81:6f:
         62:4d:8c:89:13:38:c3:2d:1f:bb:be:c6:d5:50:b9:a8:0e:0f:
         32:0c:ee:94:ff:ba:fc:7e:e1:a9:cd:39:7b:6c:53:35:ff:53:
         81:5d:3f:1f:c2:eb:71:e3:ba:ca:6b:39:05:f8:8b:71:d8:51:
         32:6c:29:cc:96:a3:1b:8c:c5:78:68:3f:c4:b7:86:03:98:3c:
         64:fd:23:4e:0f:34:3f:5c:1c:45:ac:4d:54:b0:1f:25:0e:9f:
         d4:4c:33:08:92:ed:1c:31:77:52:ec:23:d8:48:24:e5:5a:e3:
         2d:b7:28:d5:53:58:c5:da:a9:1e:be:bb:6e:0a:24:c4:cb:c1:
         6f:71:6b:6d:c0:72:b0:ec:99:57:45:b3:53:3f:5a:34:1f:8c:
         f2:53:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:17:56 2024 by rpki-client on console-ams.rpki-client.org