Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
File:                     34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa (raw, json)
Hash identifier:          JNIR2dG1YlmzRtL0I9HxLQJTvL14HwIAJcJJQ1xEaic=
Subject key identifier:   A8:4C:73:BF:69:F3:29:5D:71:C7:52:AC:DA:68:E2:8C:2F:B0:DD:0C
Certificate issuer:       /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial:       2FBB38538BFBC65729A292F05083E2A9E90D044D
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa
Signing time:             Thu 04 Apr 2024 07:20:49 +0000
ROA not before:           Thu 04 Apr 2024 07:15:49 +0000
ROA not after:            Thu 03 Apr 2025 07:20:49 +0000
asID:                     268678
IP address blocks:        45.165.148.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:bb:38:53:8b:fb:c6:57:29:a2:92:f0:50:83:e2:a9:e9:0d:04:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
        Validity
            Not Before: Apr  4 07:15:49 2024 GMT
            Not After : Apr  3 07:20:49 2025 GMT
        Subject: CN=A84C73BF69F3295D71C752ACDA68E28C2FB0DD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:e5:d6:2d:3c:3c:23:b7:a6:ca:6e:da:d5:
                    1a:79:1b:cc:e8:f7:f1:95:69:47:64:91:ea:80:3a:
                    fc:02:82:e3:a2:69:db:cf:cd:b6:e6:a1:2c:a0:0c:
                    eb:df:de:b1:6f:f6:57:cd:c8:0a:5c:a7:46:75:5d:
                    0b:ea:0e:65:00:83:35:b6:83:a0:95:24:bc:80:3a:
                    db:88:52:cc:5d:b3:76:eb:4a:ea:0e:67:c2:da:60:
                    cc:58:fc:c6:83:7e:11:f7:ca:5c:e0:9c:83:a1:a4:
                    64:c2:f4:6d:49:eb:e9:8b:22:61:0f:4c:a3:46:bd:
                    ff:e4:63:97:c4:a2:04:c6:4d:4d:9c:03:84:a6:85:
                    90:ab:5f:a9:bb:85:c2:48:e1:1d:e7:91:a9:e4:f2:
                    64:50:c5:35:4d:6f:27:06:43:98:23:c5:46:9b:39:
                    67:10:a8:4e:33:75:f1:67:f0:8a:c1:73:de:76:6a:
                    29:97:c9:a8:09:92:27:8b:7b:d5:00:99:f4:68:8d:
                    21:63:07:89:3f:08:2d:d4:0d:f4:b6:3f:7f:18:62:
                    c9:80:97:1f:d9:b1:b5:f7:9c:0f:92:ad:38:64:1e:
                    fb:ec:f1:3e:82:58:8a:f5:9e:bf:ef:dc:50:5f:74:
                    a4:47:8d:41:75:d2:fa:1b:b4:a2:58:7c:b5:8a:36:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4C:73:BF:69:F3:29:5D:71:C7:52:AC:DA:68:E2:8C:2F:B0:DD:0C
            X509v3 Authority Key Identifier:
                keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32332d3233203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:c9:9d:9e:78:d6:02:a2:94:d8:d2:7d:cb:47:ae:98:ba:
         b8:fb:a4:b5:2e:2e:59:f9:5f:a2:cf:6d:cd:bd:93:93:f8:f6:
         37:31:43:26:e7:2e:40:70:86:9e:10:37:e8:35:85:58:f6:2d:
         10:b6:27:0e:24:8f:74:4b:4c:d3:e1:3a:1c:81:59:02:09:2a:
         ad:24:aa:5c:cc:f2:77:a9:38:d8:3a:f5:cb:cd:83:59:d7:d0:
         e7:1a:85:8d:51:dc:c3:c6:43:26:46:9d:9a:2d:d0:76:08:cc:
         d7:85:7d:db:9f:86:cc:8a:05:5a:70:38:b6:dd:3d:33:04:1d:
         8b:f1:79:61:ad:72:e6:b8:7b:99:be:53:6b:26:74:17:d8:30:
         59:e6:4c:ef:51:62:32:ca:73:5c:6e:2e:80:ff:da:31:2d:5b:
         06:f5:04:88:ad:41:0a:b1:ad:8b:9c:4a:20:6c:e0:5a:bd:ca:
         06:ee:00:73:22:72:5c:6a:41:4b:e2:d2:84:15:40:98:b7:2f:
         cb:83:b3:7b:88:3d:70:96:89:a6:e4:3b:36:1c:99:f0:4f:27:
         66:f4:21:a1:7a:38:0d:10:ae:d0:5c:a4:26:fe:91:fb:22:65:
         da:0b:4f:21:b6:0f:ce:d1:4b:46:0e:17:50:c2:6f:2c:6e:02:
         14:d6:7f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org