Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32332d3233203d3e20323638313335.roa
File:                     34352e3137302e362e302f32332d3233203d3e20323638313335.roa (raw, json)
Hash identifier:          nLQ+wtM+YLyR8nzKxrwz3UdIX1L0RIblmmkaoMLL7+w=
Subject key identifier:   E5:FF:4B:68:BC:36:A7:40:3D:63:D4:1D:0D:D0:BB:6B:EF:D2:D4:10
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       7D6AA303195F3AE9590A7E74B1E705C1D6FA1CE9
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32332d3233203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:17:15 +0000
ROA not before:           Fri 12 May 2023 13:12:15 +0000
ROA not after:            Fri 10 May 2024 13:17:15 +0000
asID:                     268135
IP address blocks:        45.170.6.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6a:a3:03:19:5f:3a:e9:59:0a:7e:74:b1:e7:05:c1:d6:fa:1c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:12:15 2023 GMT
            Not After : May 10 13:17:15 2024 GMT
        Subject: CN=E5FF4B68BC36A7403D63D41D0DD0BB6BEFD2D410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:bd:70:81:cc:86:30:74:1f:05:04:43:48:
                    8a:a1:1b:89:90:d9:78:65:c3:e1:92:9e:94:4f:26:
                    af:bf:dc:a1:60:c2:de:49:c6:4c:08:23:50:f9:2c:
                    c3:09:62:e0:80:87:e8:1e:16:45:a9:52:ff:e8:47:
                    82:d8:9a:2d:17:ef:a9:29:80:91:0b:4f:a4:6b:6f:
                    ea:49:26:ff:4f:b6:79:4d:32:80:8f:a1:ca:08:81:
                    a8:2d:89:dc:89:ea:1c:1d:cd:6d:4c:a9:5a:4e:6b:
                    39:5c:58:de:74:5a:7d:c4:3c:e4:96:87:98:de:ef:
                    f6:1a:e6:6e:be:d9:1b:d4:51:41:74:ca:73:c9:44:
                    92:bd:b2:a6:2a:2e:af:89:3b:fb:28:1a:46:75:1e:
                    db:03:d7:a3:90:7c:9b:c7:68:f5:15:f9:9d:5c:bf:
                    19:5d:f7:34:f5:e8:4c:3f:72:5c:37:e3:2a:a0:cb:
                    f4:ae:86:e0:d4:5b:be:88:4b:98:5a:a0:95:1f:fb:
                    8d:46:28:a0:86:e2:bb:58:57:c7:69:02:df:60:66:
                    a4:4b:42:ea:2e:f9:ef:df:9f:44:c7:7a:7f:b2:1c:
                    29:cb:28:a9:97:ca:14:75:82:a6:63:e2:28:20:d9:
                    92:2a:74:4b:78:11:18:84:14:9c:d2:c8:de:db:fc:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FF:4B:68:BC:36:A7:40:3D:63:D4:1D:0D:D0:BB:6B:EF:D2:D4:10
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e362e302f32332d3233203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:ee:c3:2b:be:ba:e4:45:2a:0d:ef:a2:0c:69:85:93:73:
         e5:26:64:5f:40:ac:d2:85:9d:ae:1c:d4:f1:90:32:d1:9f:4b:
         07:89:18:b6:7b:dc:69:d3:77:a1:af:5a:c9:fa:a7:33:0a:11:
         73:df:0e:3e:5f:5c:aa:0b:e1:50:15:4d:33:3b:b0:b6:5d:09:
         d6:63:d7:4b:81:b1:ea:87:79:98:7c:60:4a:f4:ea:3d:70:b2:
         b0:10:53:16:7e:f2:8c:96:c0:4b:37:15:a0:2b:db:cf:dc:b9:
         e4:89:41:b9:d5:48:89:a2:02:6c:4f:09:ed:50:17:bd:1f:ed:
         44:40:be:e6:d2:3d:86:8f:df:a5:61:29:6c:ea:f6:29:61:f0:
         c6:58:23:0e:eb:0e:79:2b:7f:2f:43:c6:93:91:53:0a:df:b9:
         e2:74:74:d7:80:82:1b:f6:1c:0d:2c:41:28:1e:1c:a1:26:23:
         5a:46:45:c4:50:bf:f4:58:a4:88:3f:27:6d:9c:82:ba:a5:3f:
         7d:4f:b2:c4:5f:d8:8a:f5:56:4a:2a:18:f8:9d:08:15:cb:ae:
         05:7b:e6:5b:a5:63:0f:a3:99:07:e4:12:e7:6f:d2:9a:80:2a:
         74:ae:39:af:b3:23:43:d5:df:f3:a0:ab:6b:6b:72:39:ef:a3:
         46:dd:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 20:48:46 2024 by rpki-client on console-fra.rpki-client.org