Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134372e302f32342d3234203d3e203631373137.roa
File:                     34352e37312e3134372e302f32342d3234203d3e203631373137.roa (raw, json)
Hash identifier:          ptRnmS5lgVIap8Di2ZwRqus9sEe8oI1pLus015GY0Uk=
Subject key identifier:   BF:23:32:89:40:5B:24:85:D6:DC:F3:BE:4F:FD:13:A3:DB:3A:17:AA
Certificate issuer:       /CN=818877B39D32BF83248D22BD29D162AD2243D97A
Certificate serial:       06F692DF2F777F26F6E9DD604B21A80CC113BB7F
Authority key identifier: 81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134372e302f32342d3234203d3e203631373137.roa
Signing time:             Thu 04 Apr 2024 15:37:47 +0000
ROA not before:           Thu 04 Apr 2024 15:32:47 +0000
ROA not after:            Thu 03 Apr 2025 15:37:47 +0000
asID:                     61717
IP address blocks:        45.71.147.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:92:df:2f:77:7f:26:f6:e9:dd:60:4b:21:a8:0c:c1:13:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818877B39D32BF83248D22BD29D162AD2243D97A
        Validity
            Not Before: Apr  4 15:32:47 2024 GMT
            Not After : Apr  3 15:37:47 2025 GMT
        Subject: CN=BF233289405B2485D6DCF3BE4FFD13A3DB3A17AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:94:32:24:6c:97:ef:7e:a6:91:74:5c:9d:
                    7b:a2:c6:5a:b9:26:77:76:10:f5:e8:66:c2:fd:20:
                    13:10:f2:70:83:c0:34:64:b7:63:35:2b:c7:76:75:
                    c7:cd:8e:4c:03:8b:cf:8a:61:35:e1:fd:40:20:94:
                    6c:a1:67:f8:2e:b7:8d:d5:80:d5:9b:6f:77:50:39:
                    0f:11:7a:3e:94:b8:b9:6f:e2:16:27:3a:f7:3b:3d:
                    a6:65:f3:04:0c:c8:97:2b:96:2f:d6:51:75:ca:22:
                    61:20:c5:da:8d:1a:93:ff:c8:59:6a:ad:0e:31:65:
                    56:ab:11:13:5c:65:c3:ac:3b:29:4f:68:8c:5c:7c:
                    0d:24:51:fc:2c:84:d7:64:aa:1a:e7:6b:78:8d:53:
                    25:11:12:ca:7f:86:64:38:04:41:60:47:d5:2a:39:
                    1a:3e:88:88:5b:12:8d:00:2c:3e:83:86:9c:cd:3d:
                    6a:97:9a:80:df:a7:d3:b0:17:69:20:7d:5c:ca:3a:
                    a3:57:f5:96:5f:1c:d6:18:88:f1:09:fa:72:b7:1a:
                    21:85:23:31:55:9a:c8:d6:f0:7d:60:2b:36:11:3b:
                    34:04:3f:03:73:db:54:ef:e4:25:09:57:d4:80:f5:
                    0d:3a:18:b4:06:25:89:4f:82:55:69:2f:17:1a:5c:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:23:32:89:40:5B:24:85:D6:DC:F3:BE:4F:FD:13:A3:DB:3A:17:AA
            X509v3 Authority Key Identifier:
                keyid:81:88:77:B3:9D:32:BF:83:24:8D:22:BD:29:D1:62:AD:22:43:D9:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/818877B39D32BF83248D22BD29D162AD2243D97A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/818877B39D32BF83248D22BD29D162AD2243D97A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57vPNzngE8fEDVgicFXJAZytfM818jXo9PFk6T1LKGJX/1/34352e37312e3134372e302f32342d3234203d3e203631373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:ce:9c:3d:a4:d6:dd:31:ae:f7:40:78:09:37:02:17:16:
         40:d9:0b:18:c7:24:8f:41:35:bf:8c:ae:b8:62:2a:3a:7f:93:
         37:6c:4f:30:c4:23:39:f9:58:d8:6b:61:6f:59:87:8b:61:66:
         4d:88:38:f0:9e:58:9d:a4:e9:a5:5e:27:39:7b:fb:b2:97:14:
         94:00:3e:04:c0:3a:1f:e8:4c:8c:ea:d3:55:88:70:d6:dd:87:
         bc:c2:96:df:24:6c:8d:84:ff:a2:48:0a:15:0e:3f:5b:ef:fe:
         d6:4b:06:4d:c7:d3:e7:16:e6:58:3f:81:f8:b7:fb:ec:25:95:
         5f:37:51:9b:67:6d:7d:0a:a7:88:6e:c6:36:37:3d:d1:14:f5:
         df:c9:51:c6:76:5a:0b:3d:68:43:7a:89:ec:03:09:5d:a3:5e:
         36:f4:bf:ad:9a:9d:c9:d5:c2:3b:67:8e:d1:bd:9a:f5:ef:cc:
         bb:63:2a:8b:f0:06:56:06:79:e4:2b:ef:e5:94:36:7b:37:32:
         1d:37:be:0c:da:df:ae:cd:e6:7e:38:01:32:ac:74:48:bf:3e:
         0a:ef:c0:36:10:34:d6:47:ad:eb:8b:76:12:bf:3e:75:c0:a4:
         3c:14:78:33:44:2d:6f:04:54:08:93:80:48:d8:35:1e:27:0b:
         65:57:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 17:27:20 2024 by rpki-client on console-ams.rpki-client.org