Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32332d3233203d3e20323638343437.roa
File:                     34352e3136312e35302e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier:          YhYda0a3aO0TjQtvr4YYeEgwrj76VNSXBe6s4ndRWLw=
Subject key identifier:   A8:41:88:18:B2:BF:18:5D:04:3A:13:5A:5A:47:02:2A:25:F6:D3:0D
Certificate issuer:       /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial:       224D81DCA7C196B7274549482190937779F696
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32332d3233203d3e20323638343437.roa
Signing time:             Tue 08 Oct 2024 22:42:57 +0000
ROA not before:           Tue 08 Oct 2024 22:37:57 +0000
ROA not after:            Tue 07 Oct 2025 22:42:57 +0000
asID:                     268447
IP address blocks:        45.161.50.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4d:81:dc:a7:c1:96:b7:27:45:49:48:21:90:93:77:79:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
        Validity
            Not Before: Oct  8 22:37:57 2024 GMT
            Not After : Oct  7 22:42:57 2025 GMT
        Subject: CN=A8418818B2BF185D043A135A5A47022A25F6D30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:49:59:e0:b9:db:a6:b9:85:78:43:e0:13:
                    65:66:82:d9:53:d3:7e:84:d5:24:b5:ca:94:51:5e:
                    e1:9f:f0:83:29:b2:6d:e6:86:91:b8:69:5c:6a:9f:
                    82:f9:83:3d:0b:a3:a0:69:55:5f:0e:2b:4e:1e:52:
                    1e:7a:35:72:b7:2a:f1:ea:68:d3:36:99:64:82:bf:
                    3d:bf:17:dc:3b:af:98:ea:a7:0a:d4:49:95:dc:0a:
                    f7:be:43:a4:48:20:15:02:aa:06:86:85:83:1d:27:
                    a4:ae:10:b2:f5:a0:e3:4b:5d:30:db:8a:9a:b9:d0:
                    7c:6a:8c:3d:4d:82:99:eb:f5:bf:ed:89:92:21:d9:
                    16:f9:84:f7:e2:ba:ec:6a:8a:78:fe:8e:e7:98:87:
                    5b:34:87:8b:c8:26:2c:9a:9d:ad:53:03:6f:4f:83:
                    a1:29:e5:d5:9b:d5:4e:b9:05:50:c5:c3:4a:c1:b9:
                    68:a6:ea:3d:e4:34:35:7a:b8:d2:ba:28:aa:7f:f3:
                    dd:eb:bd:aa:0c:09:b2:66:98:e6:83:7f:97:2c:cf:
                    75:31:75:af:ac:0b:c8:69:cc:52:63:ea:38:00:78:
                    55:9a:f1:5a:3f:a4:ad:f0:38:3e:62:ca:06:9d:74:
                    6a:0b:ea:3b:f9:b3:66:10:a8:c1:2e:63:d3:fb:2e:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:88:18:B2:BF:18:5D:04:3A:13:5A:5A:47:02:2A:25:F6:D3:0D
            X509v3 Authority Key Identifier:
                keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e35302e302f32332d3233203d3e20323638343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:26:f6:ce:4f:d6:68:50:2b:49:0b:a0:72:4b:df:83:4f:71:
         f3:bb:2c:c2:77:8f:62:6f:81:e1:80:27:6c:d0:5b:2e:f1:d6:
         71:ac:9f:fc:cd:90:31:ba:c3:34:4c:22:e3:95:6a:1e:ac:b6:
         a9:cc:9d:7a:99:84:b3:48:06:07:57:84:42:eb:f0:32:fc:5d:
         39:bd:a2:68:39:aa:b0:e9:7e:7a:02:18:11:ba:d0:1f:08:ac:
         44:c3:31:eb:8e:cd:5f:99:b9:c2:a9:24:94:3a:f8:fa:9e:a5:
         5a:e0:a1:60:db:8c:0d:83:c3:7e:7a:c7:58:5a:3f:45:9a:42:
         9d:b8:c4:41:dc:b6:bb:68:74:cd:46:0b:55:8e:9a:d0:c1:2f:
         4a:df:eb:cc:47:2e:e4:8d:aa:bc:5d:5d:a5:7b:bd:10:09:34:
         70:36:18:49:f1:0a:b2:ec:96:a9:a5:55:f0:82:38:02:50:9b:
         3c:0f:04:cf:32:5f:25:9f:40:22:0d:9f:a5:aa:25:52:e4:19:
         5e:dc:5d:3c:49:66:bc:9d:93:00:fc:b6:00:1f:98:ac:c3:9d:
         d3:5e:02:79:31:ac:86:89:60:cc:9c:18:9a:2e:c1:ce:9d:a1:
         8b:ed:11:5d:b2:e8:34:34:6b:56:ca:7d:5b:47:0a:e8:df:a8:
         c4:1b:b3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:35:34 2024 by rpki-client on console-fra.rpki-client.org