Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa
File:                     34352e3138352e33362e302f32322d3232203d3e20323639343431.roa (raw, json)
Hash identifier:          3WWwIIB3hEV/PrQrtewpLFiaNVXC1GPMeKkSXUIfhEo=
Subject key identifier:   52:6E:B6:56:B2:1B:15:DF:FD:76:18:AB:B0:29:39:85:63:9B:54:6E
Certificate issuer:       /CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
Certificate serial:       1023D808AB827C78C0979AE4D297B1385B0E3214
Authority key identifier: 7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa
Signing time:             Thu 04 Apr 2024 21:51:02 +0000
ROA not before:           Thu 04 Apr 2024 21:46:02 +0000
ROA not after:            Thu 03 Apr 2025 21:51:02 +0000
asID:                     269441
IP address blocks:        45.185.36.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:23:d8:08:ab:82:7c:78:c0:97:9a:e4:d2:97:b1:38:5b:0e:32:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDB8E46A577D9E35DC75F64051C0386B874A16F
        Validity
            Not Before: Apr  4 21:46:02 2024 GMT
            Not After : Apr  3 21:51:02 2025 GMT
        Subject: CN=526EB656B21B15DFFD7618ABB0293985639B546E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:4d:f4:6d:a4:3f:39:f7:25:a7:46:af:57:
                    7d:e2:60:47:e8:f6:0d:bc:e1:2b:b2:34:c7:bc:3e:
                    6c:01:3b:8c:67:47:9c:94:c3:7c:97:a1:55:28:64:
                    c3:7e:ef:35:2a:44:02:1e:f3:8d:eb:39:e5:ab:d6:
                    b4:67:ed:f0:00:c4:f0:c4:f0:fb:05:0c:e4:bd:94:
                    3c:4c:b7:21:51:a3:d4:33:c6:dd:fd:ad:47:06:26:
                    ac:a3:6c:32:33:bd:25:e1:e8:29:24:89:36:07:c0:
                    ce:c2:66:7e:a0:56:5c:41:50:56:c8:c3:4c:a8:e1:
                    d7:59:b1:8f:23:60:d9:a6:39:5a:54:5e:8b:37:6e:
                    4e:75:4d:c7:4d:5b:74:a7:31:07:ec:fd:88:98:f7:
                    a2:ba:b7:1e:31:b4:ea:cc:6e:fc:83:08:a3:5c:ef:
                    b7:0f:a3:c1:d7:0b:a0:e4:f5:b2:7b:05:25:b6:0e:
                    3a:f6:5c:86:b4:1e:8b:4f:d4:5a:05:a4:88:a3:f2:
                    fe:7e:32:ea:21:70:a3:af:0a:05:5f:d1:5e:d8:9c:
                    3c:73:78:85:c7:49:a7:ee:07:dd:f6:b5:54:08:02:
                    ac:2f:dd:d7:f3:18:24:b8:ab:1a:de:9f:07:31:ed:
                    32:9d:e2:27:2d:73:1c:54:5f:17:40:2f:42:70:df:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:B6:56:B2:1B:15:DF:FD:76:18:AB:B0:29:39:85:63:9B:54:6E
            X509v3 Authority Key Identifier:
                keyid:7B:DB:8E:46:A5:77:D9:E3:5D:C7:5F:64:05:1C:03:86:B8:74:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDB8E46A577D9E35DC75F64051C0386B874A16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/1/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:b6:42:c1:ab:b1:d5:e5:19:c0:eb:ca:1a:25:4b:00:e2:
         a1:a3:31:d2:1e:48:57:11:50:0d:af:75:04:79:7d:c5:6c:19:
         22:aa:4a:0e:e5:a2:45:a7:2c:e0:2f:cb:fb:3e:b4:a6:0e:d9:
         42:87:32:30:ef:68:f2:90:cf:cb:84:30:ae:40:47:ed:69:e5:
         5e:c9:5e:99:de:87:a6:c2:13:3c:f2:c4:e5:e0:59:70:3e:dc:
         7a:21:e4:db:3a:f2:52:d5:b5:a8:07:ac:0b:3e:c6:45:44:f9:
         b2:6f:fa:73:b9:3d:59:32:0e:13:24:11:11:29:38:bb:66:0e:
         af:a1:11:92:a8:82:87:d7:4a:95:52:1b:6b:18:30:34:f6:36:
         c6:61:6a:c1:b1:ac:8d:96:91:a0:60:e2:81:69:ef:73:ab:25:
         18:e0:5d:14:bf:56:52:52:20:0f:a4:4a:3e:ed:71:09:ac:fe:
         b3:d8:da:c8:d0:00:5e:d5:d9:16:33:2d:0d:c9:94:c3:7f:fd:
         dc:65:89:f9:b1:58:d2:87:3a:8c:b3:96:0a:67:30:24:06:39:
         5b:69:ff:e7:49:3d:f5:ac:3f:c9:8a:05:ad:ef:69:b5:e8:77:
         91:d4:a0:4f:7e:c6:2a:08:4a:a7:07:09:0f:f0:be:46:99:f6:
         e4:4b:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 03:35:59 2024 by rpki-client on console-fra.rpki-client.org