Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
File:                     34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (raw, json)
Hash identifier:          5TCfpAX5Im9+nTlpgK+F+R0+bM8bun8MVOLKlCL5F7Y=
Subject key identifier:   97:F6:72:A0:67:76:F2:07:6D:00:1B:A6:F1:30:E6:12:1A:85:0E:C7
Certificate issuer:       /CN=00128F95DB8A5B29D029F4525401E18331575DBD
Certificate serial:       532D1F4D60C0A2D8DB4E43992A29297BD05D9662
Authority key identifier: 00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
Signing time:             Thu 04 Apr 2024 07:33:59 +0000
ROA not before:           Thu 04 Apr 2024 07:28:59 +0000
ROA not after:            Thu 03 Apr 2025 07:33:59 +0000
asID:                     268230
IP address blocks:        45.235.220.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:1f:4d:60:c0:a2:d8:db:4e:43:99:2a:29:29:7b:d0:5d:96:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00128F95DB8A5B29D029F4525401E18331575DBD
        Validity
            Not Before: Apr  4 07:28:59 2024 GMT
            Not After : Apr  3 07:33:59 2025 GMT
        Subject: CN=97F672A06776F2076D001BA6F130E6121A850EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:31:e5:1e:ab:1f:6d:a8:a9:b1:78:b0:b8:
                    74:1a:c8:ed:e8:68:c2:57:69:36:86:6d:89:a0:5d:
                    f5:f7:11:b0:38:dd:32:cd:7d:f7:8e:fc:66:aa:2c:
                    3b:b1:07:d1:26:35:4c:5a:48:3d:7c:bf:c4:0a:e9:
                    d4:b0:c9:3b:97:68:3c:93:8a:2c:39:60:bf:9d:8d:
                    23:77:a8:5d:1c:0e:fa:6b:47:df:c9:65:b8:f3:1b:
                    05:d3:44:09:42:dc:c7:b5:55:57:b2:22:5e:88:e2:
                    9c:e1:42:bc:66:27:dc:64:ca:a0:a4:de:2f:c2:78:
                    d6:87:87:56:85:11:42:b2:58:60:8f:1b:54:a0:a0:
                    6b:57:52:df:b5:d1:5a:d2:2e:f9:2a:40:e5:5c:2e:
                    c7:cc:a0:09:6a:04:61:d1:c3:41:af:8e:66:1d:03:
                    c8:12:3f:d3:c4:e7:5f:bd:3b:37:b7:5e:e4:42:17:
                    0d:f8:f7:0f:b6:60:f4:88:18:be:3b:08:61:03:f4:
                    b2:08:76:24:70:2d:7a:a4:9a:34:20:ae:48:26:3c:
                    72:e5:a8:3b:c6:c9:77:97:53:0a:03:f3:e4:88:89:
                    f7:80:33:dd:c5:67:6d:6f:52:4f:7e:c0:7c:9b:c2:
                    9f:df:85:ca:d4:de:40:43:67:12:7c:3c:34:b3:55:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:72:A0:67:76:F2:07:6D:00:1B:A6:F1:30:E6:12:1A:85:0E:C7
            X509v3 Authority Key Identifier:
                keyid:00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:40:c5:74:80:4d:d6:aa:3c:95:f8:36:62:ee:73:75:b9:ea:
         e7:0f:07:cf:f3:6a:b9:27:49:bc:4b:e8:11:59:4e:ee:6d:dd:
         1f:4e:27:21:70:d2:28:36:ac:b9:43:67:dd:88:86:61:43:65:
         8a:92:98:7a:de:08:94:12:24:ec:7b:23:33:88:0e:8a:88:4a:
         4e:28:47:40:65:49:1e:8d:cf:95:00:e0:20:e4:0c:56:6b:db:
         90:09:53:05:c5:90:7a:82:04:2b:e3:98:23:c8:21:e0:1d:ce:
         b7:56:b8:f7:c3:3c:fb:06:5a:b8:8c:f6:79:28:c6:fa:33:a4:
         f1:8b:9d:f3:8b:4c:9d:e5:c9:01:f8:15:5a:fa:22:e6:2a:f7:
         26:ff:9b:9b:4f:e3:16:6a:7a:04:86:92:28:61:4c:5a:31:20:
         05:15:98:cb:fe:85:69:d3:72:0d:76:6b:88:be:46:15:ef:e7:
         9c:dd:e1:9c:2a:cc:54:8c:c7:62:66:14:a8:82:ff:28:72:6d:
         50:d0:76:2d:a6:9a:d9:dd:09:77:9e:a4:23:79:16:b6:19:74:
         b8:98:90:63:8d:a9:1b:37:ba:01:57:e6:17:bb:b5:eb:b4:1a:
         52:ac:d8:af:7a:bc:dd:c7:d7:b9:56:6f:71:77:1f:2f:16:27:
         b5:89:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 12:34:15 2024 by rpki-client on console-fra.rpki-client.org