Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230312e302f32342d3234203d3e20323638323239.roa
File:                     34352e3233352e3230312e302f32342d3234203d3e20323638323239.roa (raw, json)
Hash identifier:          3rbNIyWKAeAgadES/e6UnmCqK+v/XYJUKXAXA7FTKI4=
Subject key identifier:   50:A6:D9:54:3A:AF:36:E1:5E:38:B6:13:50:10:0C:66:A6:BB:8F:66
Certificate issuer:       /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial:       2993D363485C91CD533DD982BAD4D254016A7239
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230312e302f32342d3234203d3e20323638323239.roa
Signing time:             Wed 03 Jul 2024 21:10:27 +0000
ROA not before:           Wed 03 Jul 2024 21:05:27 +0000
ROA not after:            Wed 02 Jul 2025 21:10:27 +0000
asID:                     268229
IP address blocks:        45.235.201.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:93:d3:63:48:5c:91:cd:53:3d:d9:82:ba:d4:d2:54:01:6a:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
        Validity
            Not Before: Jul  3 21:05:27 2024 GMT
            Not After : Jul  2 21:10:27 2025 GMT
        Subject: CN=50A6D9543AAF36E15E38B61350100C66A6BB8F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:e7:97:e6:d1:1b:61:63:73:53:16:49:63:
                    98:b1:d0:c1:05:48:98:7a:1b:8b:f9:f0:89:26:22:
                    e5:b0:c0:5d:eb:28:1b:2a:05:cb:dc:a5:e0:b8:88:
                    4a:4e:8f:44:75:90:d9:2a:d8:38:84:2a:13:2d:64:
                    c0:1f:4f:98:fc:4a:b3:67:06:c1:36:d5:3c:e0:86:
                    cc:48:5f:00:7e:b0:d5:b1:b3:f3:1c:48:b8:cb:04:
                    1a:77:f5:fa:ad:a1:5c:08:92:b6:1b:65:ee:c9:6f:
                    6b:b4:6c:38:34:38:8e:4d:9a:8f:04:ec:a5:79:bb:
                    6e:fb:9b:72:bc:3b:20:74:8f:2b:86:a1:fc:f2:13:
                    1e:de:ee:6f:42:5f:4b:31:9d:ee:62:75:ee:75:6c:
                    4b:bb:d8:d9:44:8d:3a:c0:27:ad:61:e8:fb:21:03:
                    b0:0a:ab:a5:31:ed:d1:38:07:5f:6f:d9:fa:2b:f2:
                    f7:b0:ba:be:b9:b2:ae:c8:cd:bf:36:23:c4:ea:71:
                    09:76:97:41:ea:6e:1a:17:74:d2:69:23:89:b9:ff:
                    50:46:61:cd:f7:dc:5e:36:f7:d4:67:2c:88:46:f4:
                    99:cf:40:e5:56:6b:45:3c:b3:bd:1d:98:f0:fe:ce:
                    33:aa:24:35:b8:99:4e:ea:73:e0:86:45:0c:3a:20:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A6:D9:54:3A:AF:36:E1:5E:38:B6:13:50:10:0C:66:A6:BB:8F:66
            X509v3 Authority Key Identifier:
                keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230312e302f32342d3234203d3e20323638323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:84:de:0a:73:d2:82:ff:63:2a:37:5c:1e:a2:45:c6:ac:30:
         9f:30:d9:0e:be:c5:82:ae:5a:5e:80:a1:18:9a:a2:83:b0:52:
         14:aa:2b:db:5b:27:b6:e8:de:6e:69:6f:26:31:c7:59:1b:5b:
         f8:d2:92:ac:41:f4:06:a4:42:e6:f9:46:ab:8b:2f:4a:12:84:
         f1:d2:89:1b:22:2b:4f:b7:26:fc:f4:3b:74:87:a3:99:7c:2f:
         90:d9:22:da:bd:75:48:fd:b2:ff:ea:b4:e0:80:1f:fa:c3:23:
         61:6f:04:22:3b:b5:68:8b:be:83:ef:58:b5:69:fd:47:00:4d:
         b6:5b:a8:87:93:31:71:1c:e5:52:15:1a:01:4a:bd:46:55:09:
         1f:88:eb:7f:6e:f2:2f:87:c7:90:0c:26:ab:dd:e8:66:6d:d6:
         25:88:02:e2:71:35:10:05:40:ff:b9:dc:b7:13:8d:c0:60:ea:
         91:ee:f2:69:5f:a1:9b:63:70:54:68:34:33:56:ce:6a:46:85:
         bc:1d:72:d5:e6:28:ba:2d:2b:06:ef:28:ee:47:18:60:29:17:
         46:dc:a1:8e:12:71:e6:27:98:be:a5:d4:55:97:07:3a:86:b9:
         46:b2:61:f7:6b:70:7f:78:16:9b:0f:66:c2:9d:b3:52:90:1c:
         e1:d6:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 06:47:53 2024 by rpki-client on console-ams.rpki-client.org