Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          hjwHQRSvm5v8uElKNTCp2Z+nTJl5uA4CYJ9Jm46com4=
Subject key identifier:   95:EA:AF:6B:BF:AC:E9:1D:EF:32:6E:BF:5F:3A:A8:62:D5:C5:EF:EE
Certificate issuer:       /CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
Certificate serial:       5F5BC8F84F537565A154D0EBE52B0CF2B05E3AC3
Authority key identifier: D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
Signing time:             Wed 03 Apr 2024 21:10:46 +0000
ROA not before:           Wed 03 Apr 2024 21:05:46 +0000
ROA not after:            Wed 02 Apr 2025 21:10:46 +0000
asID:                     269175
IP address blocks:        45.181.92.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:c8:f8:4f:53:75:65:a1:54:d0:eb:e5:2b:0c:f2:b0:5e:3a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D06B11E63B9C70F7F811C6806C7FE298F81295CC
        Validity
            Not Before: Apr  3 21:05:46 2024 GMT
            Not After : Apr  2 21:10:46 2025 GMT
        Subject: CN=95EAAF6BBFACE91DEF326EBF5F3AA862D5C5EFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:16:82:54:14:a9:93:77:64:f9:b8:08:e3:
                    a0:0b:8d:6f:73:d1:04:1e:27:a5:a1:86:47:76:85:
                    cd:4a:f9:96:91:2a:1a:99:b2:8c:b1:19:34:5a:56:
                    d7:5c:f9:6a:9a:81:d8:36:57:fd:ed:1a:3f:29:5f:
                    7a:39:7a:83:b7:a3:73:d7:4a:2f:d0:44:b4:93:0c:
                    0e:99:a3:dc:ae:cb:97:8a:6b:4a:5b:d8:76:2f:7e:
                    80:46:81:95:09:7a:c0:70:35:ff:3a:f9:bb:ae:2d:
                    ce:6a:3d:f2:5c:2b:31:30:95:ff:d5:0a:5d:a8:db:
                    4b:65:32:a4:91:e0:78:d3:cc:b8:8e:96:30:a2:53:
                    3f:b8:55:58:d9:ad:62:aa:be:64:78:3b:0f:69:41:
                    ee:1f:5b:bb:be:36:11:09:3a:ca:ac:e1:75:e7:d8:
                    5f:64:8f:e3:cb:a2:e0:fe:eb:6b:5d:7a:be:60:59:
                    bf:18:2b:e4:b7:ad:e4:09:ef:94:19:6f:36:19:b7:
                    bf:63:79:4c:ad:d4:06:cb:cc:40:86:35:ac:e7:ec:
                    68:e9:16:c3:c7:fe:1c:3a:08:dc:9b:9d:a9:9e:ac:
                    d1:2e:77:c6:8d:b2:d7:71:12:c7:b9:fb:4d:bc:e5:
                    50:72:05:2b:a2:df:31:fa:68:ec:ee:b8:4f:32:e1:
                    68:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EA:AF:6B:BF:AC:E9:1D:EF:32:6E:BF:5F:3A:A8:62:D5:C5:EF:EE
            X509v3 Authority Key Identifier:
                keyid:D0:6B:11:E6:3B:9C:70:F7:F8:11:C6:80:6C:7F:E2:98:F8:12:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D06B11E63B9C70F7F811C6806C7FE298F81295CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/1/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:32:03:f5:8f:66:06:f5:6c:0e:f0:5f:b3:b6:34:01:d5:
         2c:9c:5f:95:5d:fb:3e:ed:95:e1:10:ff:db:f1:60:b4:c6:62:
         d3:f7:9a:10:b5:14:b0:83:28:7b:a4:ef:92:bf:b6:6f:8a:61:
         51:aa:38:83:07:2c:44:bc:54:8d:34:d6:e2:bf:11:ca:af:e2:
         00:76:8e:b4:6c:cb:cd:c9:fb:40:4f:fe:1b:74:0a:88:6a:a0:
         1e:0e:36:e3:7f:d2:ad:4b:4f:50:b5:c4:91:c8:59:44:bb:55:
         61:13:b4:0c:5e:b4:84:1d:e1:ee:e5:64:87:31:f9:13:69:3a:
         32:55:8c:d8:0f:0c:d3:cb:b1:7d:6e:e6:69:62:03:23:46:2c:
         c7:70:aa:87:c8:d8:da:cc:52:c7:da:8c:ba:bc:10:bc:a1:67:
         1b:7b:93:64:ff:b4:87:5f:01:be:a5:dc:ad:43:02:2c:26:9b:
         69:e8:fb:d5:f8:9d:ad:ff:8a:79:cb:58:07:2d:e0:dd:d8:f6:
         3c:df:f7:4e:a6:ef:42:da:61:09:aa:68:93:0e:d1:cf:0d:70:
         15:5d:80:eb:1c:34:54:5c:c3:59:0d:da:70:b8:2f:b9:c2:3a:
         cb:f5:57:a8:59:ff:55:51:8d:f8:9f:9b:2b:b5:26:64:90:1d:
         b0:76:c6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 09:09:22 2024 by rpki-client on console-fra.rpki-client.org