Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134362e302f32332d3233203d3e203631373137.roa
File:                     34352e37312e3134362e302f32332d3233203d3e203631373137.roa (raw, json)
Hash identifier:          87eI62DEMOLf/c3tiaLKuyb2b1DD/mZ5cBVf/o8yWxE=
Subject key identifier:   37:98:88:69:C4:EB:B3:5C:AA:0D:D9:55:11:F8:DA:EF:B5:68:FC:D6
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       663CA71E4C9D15C9CEE1222E01ECF51CF42A09C3
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134362e302f32332d3233203d3e203631373137.roa
Signing time:             Mon 07 Oct 2024 11:06:05 +0000
ROA not before:           Mon 07 Oct 2024 11:01:05 +0000
ROA not after:            Mon 06 Oct 2025 11:06:05 +0000
asID:                     61717
IP address blocks:        45.71.146.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3c:a7:1e:4c:9d:15:c9:ce:e1:22:2e:01:ec:f5:1c:f4:2a:09:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Oct  7 11:01:05 2024 GMT
            Not After : Oct  6 11:06:05 2025 GMT
        Subject: CN=37988869C4EBB35CAA0DD95511F8DAEFB568FCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:12:a1:c2:76:82:0e:fd:5c:03:8d:df:83:
                    5f:bb:0d:ab:da:f4:f0:68:6e:96:a4:d8:63:bc:71:
                    d6:ab:ab:a1:fb:54:e1:d0:03:e5:dd:4d:4e:17:fa:
                    5c:b6:0a:9b:fb:7d:fa:64:6c:1c:75:8f:9c:e8:c7:
                    02:6a:82:ab:d0:f5:e5:70:43:2f:15:5a:fe:cd:48:
                    e9:dd:f3:4c:96:11:6b:ab:c5:75:4a:c4:02:ee:ae:
                    3d:6b:9b:ce:f0:2b:3d:ed:f9:f6:d5:6d:82:21:ae:
                    8a:e8:9a:9d:d0:70:f3:44:40:16:2c:01:10:44:5f:
                    07:af:5d:6e:c5:bf:2c:7d:0d:d2:e9:84:07:03:36:
                    40:54:af:4a:d4:a9:5d:ee:bb:51:78:ab:13:5d:06:
                    ce:e2:72:b5:5b:b9:b6:f1:8d:68:02:07:fc:c1:c8:
                    98:7b:53:eb:1f:24:c0:d8:a0:be:67:49:6c:71:06:
                    c2:8a:ad:b1:d2:da:c0:16:4d:c9:06:3f:b2:1e:43:
                    d4:09:73:10:15:d6:aa:f5:fa:d6:0d:1b:32:a8:13:
                    ed:30:76:e5:b9:2e:db:e4:e1:49:89:45:a8:a1:f5:
                    ba:9d:fd:5e:95:80:c3:0e:7a:08:56:e1:5b:ee:a1:
                    5f:fd:68:bd:1b:c7:d0:ff:53:98:30:9a:24:f1:ab:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:88:69:C4:EB:B3:5C:AA:0D:D9:55:11:F8:DA:EF:B5:68:FC:D6
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134362e302f32332d3233203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:74:19:9b:dd:0f:e0:65:b5:1e:53:8e:51:00:76:3b:ad:
         1e:6b:ec:cf:bb:d6:9b:3c:ce:a7:df:6b:40:07:1d:82:31:5a:
         9f:4d:d4:e2:9f:aa:3b:05:11:6c:3f:6a:27:95:12:78:35:19:
         83:2b:18:91:56:d5:30:5b:56:8f:0c:f9:3a:a6:e8:fd:89:a6:
         73:7b:a5:e9:96:f2:7b:2f:5c:7b:71:af:b5:b7:37:dc:dd:53:
         50:18:30:ce:17:96:a6:ea:6c:65:65:44:f3:55:9f:65:5e:b5:
         0e:ff:a7:f5:94:f8:00:62:35:a2:39:bf:29:b0:ff:06:e7:0c:
         79:15:6e:8c:f2:e9:4f:4b:aa:bd:a2:34:09:00:ed:d7:f3:17:
         91:cb:bd:f0:27:f4:90:7d:81:02:f2:92:8a:ab:b5:1c:8d:50:
         67:3f:b1:78:9c:20:ed:2b:86:d2:7d:a3:20:a5:39:f2:f5:e6:
         40:9d:9f:16:1a:b0:45:6d:e9:56:f9:4e:be:8b:b0:29:f2:e4:
         f4:1a:db:fa:91:67:8d:cb:97:7d:64:2b:a3:e6:3d:98:1f:0f:
         d9:bb:ae:4d:ab:04:65:51:98:2d:aa:16:6f:39:66:8c:fc:1c:
         9e:14:11:d8:5a:c5:07:2d:8c:94:04:8e:d6:91:41:04:d5:46:
         cb:81:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:20 2024 by rpki-client on console-ams.rpki-client.org