Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          1j8SfKP0cHoTcKZJdqv63x0aXutLx4KKX2PzPV/fSKI=
Subject key identifier:   76:D9:93:1F:3E:DF:B5:F2:61:1E:96:6A:17:5B:DE:29:D4:BA:DB:0F
Certificate issuer:       /CN=69055FBEBF6785F771BFF701242EF920E00482FD
Certificate serial:       105C8505E9DC5C8330BD1AB2631EC77EA4DF5401
Authority key identifier: 69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
Signing time:             Tue 30 Jul 2024 12:23:56 +0000
ROA not before:           Tue 30 Jul 2024 12:18:56 +0000
ROA not after:            Tue 29 Jul 2025 12:23:56 +0000
asID:                     268678
IP address blocks:        45.165.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5c:85:05:e9:dc:5c:83:30:bd:1a:b2:63:1e:c7:7e:a4:df:54:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69055FBEBF6785F771BFF701242EF920E00482FD
        Validity
            Not Before: Jul 30 12:18:56 2024 GMT
            Not After : Jul 29 12:23:56 2025 GMT
        Subject: CN=76D9931F3EDFB5F2611E966A175BDE29D4BADB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:ac:7d:31:00:fe:c9:89:39:78:06:55:5f:
                    a4:c2:29:35:de:9b:8d:76:20:36:08:b0:d8:7e:05:
                    6a:66:34:ce:3e:8b:65:4c:f1:84:eb:83:9b:51:ba:
                    f6:9f:e1:2f:e4:33:de:a1:16:81:9b:22:b3:c4:76:
                    fc:cb:09:62:32:59:40:fd:64:85:87:17:a9:7f:05:
                    e0:29:40:6c:66:ac:69:e1:ed:ae:e5:9c:d3:b5:d3:
                    3d:d8:6c:9a:cb:7b:01:05:b2:22:09:00:13:07:0e:
                    e9:4d:a8:fb:e3:a3:03:eb:46:69:0e:47:e4:9d:f5:
                    14:8b:26:14:bf:ec:2c:c4:f2:6d:22:cb:6f:c4:14:
                    3c:5f:34:bd:8c:39:67:83:0c:a0:b3:6c:dd:c3:ec:
                    85:40:4d:58:e1:99:0c:3b:1e:66:0f:bc:e8:c6:ad:
                    bb:0b:9f:bb:af:d1:f8:45:dd:06:34:a2:04:19:86:
                    ec:87:b6:f9:19:10:43:99:63:0a:db:ea:19:04:c2:
                    8f:61:c0:59:c9:c3:a9:a7:d4:8f:37:a3:72:b2:0e:
                    bd:46:2f:cf:cc:7c:0f:9e:f1:b1:da:84:0f:af:17:
                    a8:56:02:76:a3:36:0e:30:14:92:f4:98:c0:b0:f0:
                    d8:f0:0d:5c:50:75:1b:9b:e2:fe:3d:d0:15:67:c5:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:93:1F:3E:DF:B5:F2:61:1E:96:6A:17:5B:DE:29:D4:BA:DB:0F
            X509v3 Authority Key Identifier:
                keyid:69:05:5F:BE:BF:67:85:F7:71:BF:F7:01:24:2E:F9:20:E0:04:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/69055FBEBF6785F771BFF701242EF920E00482FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69055FBEBF6785F771BFF701242EF920E00482FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:2d:ae:ca:55:12:20:32:dd:5b:56:58:4f:2c:28:ef:35:
         96:39:fc:98:96:cd:62:18:d0:9d:24:b7:af:1e:fa:d3:ea:a4:
         ee:67:98:ff:f6:b8:08:6f:19:cc:9b:50:7d:1f:a4:1d:43:f7:
         ac:66:de:57:69:be:60:1b:bb:90:5a:35:18:79:91:70:9c:b7:
         94:05:80:c1:c3:e5:65:26:ff:43:27:ff:73:45:f6:bb:65:c7:
         07:df:d3:36:91:d7:17:36:fc:18:4d:77:38:78:3f:b7:1f:51:
         4d:2e:01:54:64:ac:28:16:00:f5:07:4d:b7:2a:4e:d4:2b:63:
         cd:82:0d:35:72:b3:94:3a:a9:48:12:ba:27:89:fb:ef:01:ce:
         e4:5d:9f:1c:ab:89:e8:8d:81:db:27:ec:8e:38:b6:b1:ba:c9:
         8d:be:60:cf:97:48:94:dd:e2:7f:c4:70:e7:e8:ce:a7:06:52:
         a0:f7:d3:21:7b:ed:a5:1b:c8:34:da:6c:e4:1d:d8:fb:f5:6e:
         1f:be:a0:1d:dc:3e:1a:4a:58:44:13:ea:74:ee:f9:67:98:76:
         3f:42:df:04:34:51:4c:b0:6c:ef:e4:db:4c:fe:14:7a:ac:71:
         01:7c:83:18:c7:3b:b7:64:d3:44:b5:e0:dd:20:35:40:18:c8:
         2f:57:e4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 04:24:37 2024 by rpki-client on console-fra.rpki-client.org