Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa
File:                     34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa (raw, json)
Hash identifier:          6R8mGKvXO5x/0wvV3BLmvqtxj2kwstwzWJNhCWMDZjk=
Subject key identifier:   D7:E9:E5:D1:90:C0:50:CC:36:AC:46:7C:54:D7:8A:CF:10:E2:05:92
Certificate issuer:       /CN=57678057080E52061A1CA6E454ADEB9345B4646B
Certificate serial:       42F7FBDD5330B66972DCF3FBEEE8C4631B0D37EA
Authority key identifier: 57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa
Signing time:             Fri 30 Aug 2024 18:32:53 +0000
ROA not before:           Fri 30 Aug 2024 18:27:53 +0000
ROA not after:            Fri 29 Aug 2025 18:32:53 +0000
asID:                     268257
IP address blocks:        45.236.240.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f7:fb:dd:53:30:b6:69:72:dc:f3:fb:ee:e8:c4:63:1b:0d:37:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57678057080E52061A1CA6E454ADEB9345B4646B
        Validity
            Not Before: Aug 30 18:27:53 2024 GMT
            Not After : Aug 29 18:32:53 2025 GMT
        Subject: CN=D7E9E5D190C050CC36AC467C54D78ACF10E20592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dc:9c:1c:6f:8c:70:5e:31:0a:02:dd:dc:07:
                    40:f6:2e:f6:b6:43:f2:98:fa:1b:1b:d9:78:dd:02:
                    b1:bc:cb:99:a7:94:df:49:ff:3a:16:85:36:f3:31:
                    43:e3:25:4c:6d:78:46:fa:fc:88:63:97:e1:15:14:
                    61:5c:b9:49:5e:0e:47:7f:63:f7:d2:42:5c:04:90:
                    04:4a:f5:16:c1:ef:47:32:31:b5:57:bf:03:d2:5e:
                    10:4c:5a:28:82:aa:0c:e4:39:ff:78:5b:82:18:70:
                    b2:5a:7f:98:42:34:47:1f:47:3a:b0:1f:a1:01:78:
                    e6:68:67:02:42:23:9a:22:b9:ad:e8:38:88:10:cd:
                    dd:e1:f0:36:38:73:3d:64:ef:df:5a:2f:58:c8:ec:
                    5a:cf:f8:35:c7:ef:2f:70:41:10:bb:97:b8:ef:f5:
                    32:61:85:2e:02:34:54:c4:b2:a2:55:95:cf:c7:1a:
                    3f:4b:74:74:15:8b:0f:56:62:30:9d:f5:77:b5:62:
                    4b:c1:20:fd:f3:41:40:9d:e5:96:7b:6b:46:ef:24:
                    f7:36:46:7f:05:e2:7c:06:ec:86:a5:db:cf:fb:7f:
                    3d:32:ef:9b:15:86:92:ad:44:97:07:6b:03:11:eb:
                    1e:6f:fb:7b:2e:64:dd:0d:7c:f9:21:16:d4:63:19:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E9:E5:D1:90:C0:50:CC:36:AC:46:7C:54:D7:8A:CF:10:E2:05:92
            X509v3 Authority Key Identifier:
                keyid:57:67:80:57:08:0E:52:06:1A:1C:A6:E4:54:AD:EB:93:45:B4:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/57678057080E52061A1CA6E454ADEB9345B4646B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57678057080E52061A1CA6E454ADEB9345B4646B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51e4KbFbmTzpE3d4HVSK1F9hW9p9zS28SwjiTgu2LQnX/0/34352e3233362e3234302e302f32332d3233203d3e20323638323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:80:61:cb:ad:76:29:c0:43:6a:9c:49:f8:d3:e8:bc:4b:
         75:e9:e4:b5:19:f3:72:0f:49:85:b0:52:10:8d:61:0d:3f:28:
         7a:26:37:c2:11:48:84:19:11:6b:64:f2:e5:43:57:4e:db:93:
         04:a7:35:e3:68:7f:de:26:35:0c:a1:be:ad:58:31:83:d4:89:
         69:6f:f7:ae:b6:d8:b5:ac:f9:bd:28:d1:d9:58:81:b4:12:b7:
         00:d1:56:88:de:11:77:12:be:c3:50:88:87:17:8f:df:0d:c7:
         92:94:b3:91:70:a2:9c:35:e1:02:a2:df:20:8e:98:c0:12:c0:
         ad:c6:4b:aa:72:e8:84:73:68:bc:68:01:0b:90:e4:df:0a:ef:
         5e:24:f5:0c:45:ef:af:0e:24:ad:7d:57:a2:32:a5:39:b5:af:
         a0:fd:60:da:4c:66:fb:a4:a3:39:64:7a:1a:d5:eb:f4:2c:83:
         65:1d:c1:7c:4a:a3:ce:16:92:f9:70:9b:66:9a:9b:78:b6:72:
         d3:98:88:97:d4:a4:27:6b:4c:e1:34:5c:d3:ee:84:74:a5:4e:
         20:bd:89:6b:ce:c2:7f:98:14:e0:a9:79:85:74:80:c1:47:e5:
         09:66:16:79:75:e7:2b:0a:9f:31:c0:44:8f:a4:a0:68:a4:37:
         4c:2f:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 19:48:30 2024 by rpki-client on console-ams.rpki-client.org