Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
File:                     34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa (raw, json)
Hash identifier:          wyowvQdkJVhtiiCoY4EoE84BdzouYUJhIcPr5OVkAp8=
Subject key identifier:   CC:D7:64:0A:C1:0C:13:99:DD:F6:9B:8D:C4:CA:47:4E:D8:0F:01:02
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       792D89BE857419D88F2BCE16BC1AD685B83FB484
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        45.160.124.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2d:89:be:85:74:19:d8:8f:2b:ce:16:bc:1a:d6:85:b8:3f:b4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=CCD7640AC10C1399DDF69B8DC4CA474ED80F0102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:a8:e7:26:c7:7f:37:8c:d8:4f:f5:5a:3d:
                    21:0d:e5:46:27:40:a8:8d:86:b0:62:a3:b3:91:55:
                    5e:2e:54:6f:c1:d5:c3:7c:c8:2c:7f:c0:3d:5b:84:
                    36:75:0a:04:83:c7:16:f1:bc:c3:02:d6:64:fa:be:
                    e8:f7:6c:59:ac:7e:d9:0a:25:04:e0:97:68:f7:87:
                    ec:25:b0:4f:3e:45:69:65:5b:04:13:ef:b1:e1:a0:
                    01:5c:7a:59:4e:58:74:c6:9d:ed:46:5b:39:55:03:
                    7b:02:59:38:9f:34:ca:bc:c6:db:36:d6:23:76:38:
                    04:c1:a1:60:bc:67:e0:c7:b9:47:d3:01:ed:f1:24:
                    59:19:c1:77:89:d9:5b:dd:e7:5b:49:a5:b3:46:92:
                    ff:e7:60:4b:c3:57:40:ee:b6:fc:7c:73:7d:15:c7:
                    c4:f9:1f:a9:9e:2a:ef:ea:92:25:36:b0:73:f8:e2:
                    56:9e:4c:65:cd:0e:fa:8c:e5:02:e6:a4:68:cb:e4:
                    b6:6a:51:47:d0:97:70:98:e0:93:54:d0:43:cd:45:
                    0a:11:cf:af:f2:e1:7c:42:62:04:fb:6e:50:94:a4:
                    a1:1f:ac:ed:27:65:52:68:d8:f7:f3:1c:e4:47:34:
                    73:05:74:38:25:46:05:af:74:80:1f:fd:ab:fe:b2:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:64:0A:C1:0C:13:99:DD:F6:9B:8D:C4:CA:47:4E:D8:0F:01:02
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32332d3233203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:75:f6:3c:d1:be:42:39:c5:3a:b1:18:52:92:d7:41:e6:df:
         db:68:c1:77:5a:83:74:20:76:3b:8c:7b:0b:95:a0:ea:66:7e:
         9e:55:5e:f1:85:e5:58:b3:e9:aa:5d:01:d4:a6:f8:d9:c0:21:
         5e:80:14:f2:7b:ee:b6:ff:88:9f:7e:c2:5b:ce:78:6c:c7:a6:
         0b:c5:5d:4b:42:b4:bb:26:5c:2a:d2:36:23:4e:e1:9e:41:7f:
         22:ab:ad:95:43:9f:f9:f4:4f:c9:57:d3:dd:48:3f:02:21:8d:
         93:77:85:45:91:9e:b5:18:c1:45:93:f9:7b:45:ec:c4:89:b1:
         98:bc:98:a5:65:82:95:17:3e:07:7b:f2:6b:a1:88:be:99:26:
         16:2d:89:ef:fb:00:1f:71:07:9c:5d:4a:04:2b:9c:8f:c8:0d:
         83:d7:ca:c9:83:b0:58:cd:c4:96:cb:04:42:10:45:2e:66:90:
         f3:6b:18:08:1c:63:2d:33:f0:15:60:86:1c:9a:90:55:a2:bf:
         63:5f:32:ca:ef:dc:ac:55:c1:6e:ae:dd:53:2d:00:6c:6d:d2:
         14:c9:c5:4b:13:66:6f:8d:26:f2:f6:98:f9:ee:0e:70:f1:4f:
         1c:25:6a:e7:34:20:71:3f:2a:e5:a0:8d:33:e4:9a:a1:74:85:
         d4:e3:67:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:39 2024 by rpki-client on console-fra.rpki-client.org