Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier:          tgjwbO6Jbv/8XUmuuZ/6jtleKDvBo40+0V5yqab6FmU=
Subject key identifier:   F7:8A:ED:3F:A6:6E:24:65:57:D3:B1:2C:6F:0A:FA:43:08:71:17:CA
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       2629DD87CC6EC1618277D982808F6CD4D7CB5AB8
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:24:01 +0000
ROA not before:           Tue 30 Jul 2024 12:19:01 +0000
ROA not after:            Tue 29 Jul 2025 12:24:01 +0000
asID:                     268678
IP address blocks:        45.165.148.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:29:dd:87:cc:6e:c1:61:82:77:d9:82:80:8f:6c:d4:d7:cb:5a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:19:01 2024 GMT
            Not After : Jul 29 12:24:01 2025 GMT
        Subject: CN=F78AED3FA66E246557D3B12C6F0AFA43087117CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:91:97:70:f8:3c:cb:e7:e8:f9:36:d9:02:
                    f5:c5:a3:55:e0:f9:8e:a1:72:9f:03:94:fc:59:90:
                    15:e2:79:ea:ad:83:ed:d9:a4:ff:37:28:f2:fc:24:
                    79:c3:3b:75:87:65:95:03:f5:a1:f9:0f:02:72:1e:
                    a3:15:17:8e:26:f5:17:e1:aa:cd:75:e8:12:95:80:
                    7e:db:3a:c5:66:cc:63:fb:00:cb:e0:61:f6:34:59:
                    28:82:54:ee:c5:38:d9:3b:4f:04:15:cb:47:51:cf:
                    65:ec:e9:16:fc:b0:9d:88:46:46:10:ed:e7:2c:42:
                    a4:91:0b:8b:a6:1e:35:16:27:22:7b:f8:c5:75:bd:
                    dd:a2:cd:4b:c4:b8:ce:4e:bb:23:c7:84:74:2f:9b:
                    f5:d2:49:61:56:7b:03:33:5b:2f:cb:c5:5b:f9:dc:
                    a2:dd:1b:05:5b:c4:11:4f:83:2e:9b:76:3e:a5:fa:
                    aa:07:e9:dc:45:ef:bd:64:3a:2d:ee:b6:1d:a4:5c:
                    9a:a9:a4:05:75:92:18:5d:c1:56:7a:7a:f9:40:1c:
                    79:ef:e0:38:41:c2:c8:05:94:36:e9:28:2f:86:e5:
                    a3:fc:5e:42:56:18:e7:6b:56:43:f0:0d:7d:1f:c8:
                    f3:42:6b:ea:3c:50:9b:59:7e:2e:68:fa:c7:7f:fe:
                    b6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8A:ED:3F:A6:6E:24:65:57:D3:B1:2C:6F:0A:FA:43:08:71:17:CA
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:15:82:18:0f:0c:85:a1:d4:b8:c1:79:29:9c:57:2a:ef:eb:
         d2:d5:26:f4:89:59:7b:9f:e9:f8:c4:c3:2c:ab:a9:03:6f:92:
         46:46:4f:67:81:f3:ad:d4:bf:18:c8:93:d2:d0:ed:43:4a:9d:
         11:0a:50:af:59:cd:c8:30:ba:c1:fc:20:eb:54:16:83:e3:b2:
         fd:18:0e:16:b3:31:2d:89:68:38:26:4c:6e:c5:43:b9:b8:8e:
         58:b5:fb:b4:d6:86:49:1a:17:bb:27:ea:69:b2:03:9b:f9:c7:
         87:84:7c:35:3f:3e:d5:ba:c3:08:b4:a6:6a:61:1b:eb:dc:c5:
         70:79:f6:33:95:d8:cd:31:2d:e9:81:f6:da:82:18:f5:41:98:
         dd:3a:83:e7:b4:95:c7:0e:c7:10:cc:0d:82:1e:62:82:28:2b:
         c9:3a:ad:44:ed:d1:62:9a:d8:eb:5c:ed:2c:a9:ca:90:15:3b:
         d7:ed:78:23:33:2b:eb:1a:21:c3:d2:0a:66:b9:c2:ae:b6:2c:
         c7:ee:d1:c8:2b:9e:76:ae:8a:f9:bf:a9:27:4e:03:5a:00:ee:
         7e:c1:e8:42:b5:62:9c:b3:44:f0:fc:74:b9:b5:40:68:9c:40:
         9d:38:d4:d7:28:51:c3:d4:a9:7b:3b:71:f7:c1:4c:9b:1c:3c:
         9f:fe:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 04:24:37 2024 by rpki-client on console-fra.rpki-client.org