Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa
File:                     34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa (raw, json)
Hash identifier:          K5KbU6/2yIXe47R3igoSDjBoT3eKXnJ1EVeXoloCXaQ=
Subject key identifier:   66:8F:0D:EA:60:D7:54:E5:9B:5A:D0:64:07:46:F5:1F:E2:1A:33:87
Certificate issuer:       /CN=35032C100F6D77D0004BCA943283FCAEF246335A
Certificate serial:       403343117650D6A3C31A3F9EC752610874E0290E
Authority key identifier: 35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa
Signing time:             Thu 04 Apr 2024 22:42:16 +0000
ROA not before:           Thu 04 Apr 2024 22:37:16 +0000
ROA not after:            Thu 03 Apr 2025 22:42:16 +0000
asID:                     268408
IP address blocks:        45.160.124.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:43:11:76:50:d6:a3:c3:1a:3f:9e:c7:52:61:08:74:e0:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35032C100F6D77D0004BCA943283FCAEF246335A
        Validity
            Not Before: Apr  4 22:37:16 2024 GMT
            Not After : Apr  3 22:42:16 2025 GMT
        Subject: CN=668F0DEA60D754E59B5AD0640746F51FE21A3387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:db:fe:6d:f0:5b:e0:4a:5d:e0:c6:05:e3:87:
                    0f:c3:ed:2e:41:52:0f:e0:8a:26:08:fc:25:e8:bc:
                    9d:6a:99:fa:65:3a:7c:80:27:7b:6f:53:2b:c3:df:
                    5a:21:53:0a:16:f2:ae:f9:71:e2:8e:5d:77:34:ad:
                    b4:d1:2f:5c:53:41:96:e1:09:83:fc:fc:9d:90:a4:
                    f4:54:55:cc:37:1c:6a:8d:fc:ac:1c:1f:c4:9c:b1:
                    30:de:4b:5e:82:6c:e6:d2:08:8e:00:7b:ea:cd:e9:
                    32:0d:ff:58:a8:bf:40:b3:17:48:cf:59:04:38:28:
                    33:20:a7:1d:6a:ee:1f:55:37:35:b6:4a:e6:43:e9:
                    c2:3a:cd:50:d3:89:21:17:53:70:96:16:f9:90:4c:
                    02:75:52:2b:8d:f7:e9:a6:c6:ec:2a:ef:14:02:cf:
                    24:00:b1:89:93:62:fe:58:b5:49:c9:3d:97:79:5b:
                    c9:08:91:e1:2c:fd:3a:c4:12:12:87:4f:4d:7c:bf:
                    c2:d8:92:03:6d:c9:93:aa:fe:ab:4e:b9:99:9b:e1:
                    85:f0:36:bf:c5:bf:d1:bf:39:66:48:6a:ea:31:32:
                    e5:0f:ce:9e:ec:d1:bb:0e:58:70:a4:ee:15:8d:3b:
                    09:8e:f3:fd:91:f6:bc:0b:1e:ba:13:85:4b:08:05:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8F:0D:EA:60:D7:54:E5:9B:5A:D0:64:07:46:F5:1F:E2:1A:33:87
            X509v3 Authority Key Identifier:
                keyid:35:03:2C:10:0F:6D:77:D0:00:4B:CA:94:32:83:FC:AE:F2:46:33:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/35032C100F6D77D0004BCA943283FCAEF246335A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35032C100F6D77D0004BCA943283FCAEF246335A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Sewkv6BVJUFzXH9k25X5jW3iaXDtZAQxgUtuGyDiPQk/1/34352e3136302e3132342e302f32342d3234203d3e20323638343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:47:74:73:44:bc:ca:38:bf:9c:92:5f:62:fa:c7:0e:3d:c7:
         02:15:16:10:0b:8c:ec:0b:b7:46:82:18:ab:42:4b:2d:cb:fa:
         01:48:4c:e5:9d:17:6f:c1:22:58:2d:99:24:05:51:a1:03:48:
         bf:84:2c:8f:8e:d4:d6:09:2b:81:27:a7:c7:57:37:00:28:ce:
         72:6d:fd:37:12:17:15:1c:36:06:b6:c7:c5:b8:ba:c7:41:0c:
         0c:99:67:4d:4f:a0:43:f9:c7:4a:e1:a9:86:02:4a:42:0a:d9:
         0d:6f:65:ad:22:60:32:e4:cd:1a:24:a0:c6:d1:7f:84:a5:8e:
         30:9f:c9:42:2c:50:49:d9:de:63:c5:fe:f8:84:c6:51:1a:6c:
         55:66:e8:5c:83:c4:bc:8b:08:bb:74:8a:98:fc:70:43:8f:8f:
         5f:73:9c:38:22:ac:8b:f1:db:31:cd:0f:b4:97:e4:9c:90:7c:
         2e:5e:fc:73:53:4d:bb:5d:06:03:6b:1c:a1:f6:33:6b:67:b4:
         a9:01:93:31:b0:c2:22:31:df:0b:c8:c8:6c:d5:b8:4e:8e:50:
         a3:b3:d0:f0:b1:89:5f:23:43:0e:73:5e:61:d9:f8:5d:fa:6c:
         01:fb:69:98:bb:f6:78:46:8c:ac:65:c5:2b:68:67:39:33:65:
         f8:2a:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:20 2024 by rpki-client on console-ams.rpki-client.org