Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa
File:                     34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier:          nibQ4sk//2bbuTPJ0n2MpzmGHujKV6z36SCjM06hvbo=
Subject key identifier:   4F:42:65:61:99:B2:74:D1:D1:99:43:EB:4A:E3:B5:32:12:1C:29:9E
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       47B11E3BB9BAD875435F729B1ABB74E70D719140
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:25 +0000
ROA not before:           Wed 03 Jul 2024 21:05:25 +0000
ROA not after:            Wed 02 Jul 2025 21:10:25 +0000
asID:                     268229
IP address blocks:        45.235.200.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:1e:3b:b9:ba:d8:75:43:5f:72:9b:1a:bb:74:e7:0d:71:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:25 2024 GMT
            Not After : Jul  2 21:10:25 2025 GMT
        Subject: CN=4F42656199B274D1D19943EB4AE3B532121C299E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:91:23:ee:44:57:99:cf:ac:ff:c5:43:27:63:
                    72:13:0c:72:e1:9f:99:5e:dd:92:f8:49:88:34:a0:
                    6b:34:1e:14:9f:f7:4a:8f:f7:55:de:a0:ff:3e:8a:
                    f1:74:61:67:3e:83:df:d3:39:3f:77:44:30:84:bb:
                    bd:67:bd:af:4b:21:54:00:e8:65:80:6d:3f:0b:69:
                    14:4c:c5:71:de:fb:2e:86:d7:ca:dd:70:29:78:b2:
                    67:53:b8:a2:a8:aa:ea:bd:ad:31:24:1b:eb:a8:00:
                    5b:c5:0f:a4:13:78:cf:39:91:a6:70:a6:3b:8c:5d:
                    a4:e7:94:5d:f0:7b:d5:41:1a:59:c1:36:2d:49:3e:
                    c1:a2:0e:83:61:15:85:42:b6:6b:b3:78:68:92:88:
                    1d:f2:5a:a0:a0:5a:42:8a:cd:02:f5:00:8b:a3:ac:
                    91:32:a7:49:38:0e:c3:c3:10:c5:68:b9:a0:89:00:
                    1f:60:5f:c6:49:20:d7:cd:25:00:43:70:81:37:2c:
                    cc:12:a5:89:cc:cc:68:34:0c:2a:cb:0e:b5:4d:e4:
                    72:73:44:52:90:fb:ad:57:f4:ba:db:08:40:f8:4c:
                    9d:06:d3:20:4f:5f:70:db:cb:bc:a8:5e:b8:3d:59:
                    83:3c:06:4b:d3:3e:b0:73:4a:2e:2d:53:2d:e2:10:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:65:61:99:B2:74:D1:D1:99:43:EB:4A:E3:B5:32:12:1C:29:9E
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32342d3234203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d5:cb:8b:95:b5:92:ae:fa:82:67:b6:ab:04:07:dd:0e:2a:
         f2:03:c3:4e:46:4e:80:a8:af:86:4c:7e:66:7e:7c:65:a7:95:
         e4:ab:62:a2:ae:a4:68:d4:7b:c2:78:fc:bc:96:31:47:8b:ce:
         fb:70:df:ef:a0:b5:c9:c6:b0:c5:cc:4a:67:45:87:bb:ec:b3:
         a5:23:a6:2e:e6:4c:a7:6a:26:87:56:17:db:ff:75:17:eb:6a:
         df:a2:cc:cb:4e:4e:c5:90:ee:07:19:7b:30:29:43:16:11:57:
         68:af:4b:88:d9:1d:21:31:bf:67:79:27:b5:26:7f:c0:7c:3a:
         91:59:db:ba:65:1d:e0:2b:08:b7:c8:57:dc:cf:b3:b9:ef:05:
         c1:33:a2:92:44:81:80:22:1c:41:1b:ef:b5:11:31:21:ae:e8:
         11:67:ef:dd:d0:67:f2:bc:4d:4e:9b:c0:fa:8e:99:5e:9a:d8:
         f4:28:05:91:f7:ab:0f:55:37:5d:4c:28:08:4c:71:89:0b:0d:
         68:c8:c3:e3:5d:56:03:1f:bd:07:ac:35:df:b8:81:41:d9:5d:
         28:8d:fa:6a:a2:86:28:a7:a9:c8:3b:95:7f:03:e1:3d:aa:88:
         86:0c:67:df:d8:66:c6:4b:3f:1a:20:22:0d:b2:bc:ca:1a:d9:
         a5:e5:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 06:47:53 2024 by rpki-client on console-ams.rpki-client.org