Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa
File:                     34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa (raw, json)
Hash identifier:          TxHiqU0Kj+nfcYXzoBo+lDlLm05g5Vx4FtiFQkshjYU=
Subject key identifier:   AA:38:EE:B4:69:A3:BA:44:D3:C4:33:FC:5B:ED:AA:38:8F:42:53:09
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       541C47A37A28CC812B955EA69F5BEE194B926D91
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:10 +0000
ROA not before:           Wed 03 Apr 2024 23:18:10 +0000
ROA not after:            Wed 02 Apr 2025 23:23:10 +0000
asID:                     268673
IP address blocks:        45.165.104.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1c:47:a3:7a:28:cc:81:2b:95:5e:a6:9f:5b:ee:19:4b:92:6d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:10 2024 GMT
            Not After : Apr  2 23:23:10 2025 GMT
        Subject: CN=AA38EEB469A3BA44D3C433FC5BEDAA388F425309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:ce:7e:45:2a:8a:d5:f1:7e:5f:36:98:ed:
                    aa:09:c5:d7:35:1d:9d:c7:08:e6:bc:d1:8c:2c:25:
                    7b:50:e3:b0:4b:e4:08:90:ca:cc:3b:b5:bc:2f:52:
                    f1:e6:1b:e2:56:c8:71:11:20:0d:2b:e2:fb:75:62:
                    42:23:48:58:bc:fb:93:34:c6:b4:d9:34:e9:ba:6b:
                    e5:07:43:26:8b:92:9f:11:62:5c:9b:d3:48:f0:fc:
                    73:c6:19:51:e1:f3:1e:09:79:16:9e:4b:ff:60:79:
                    3d:ea:26:53:59:80:8f:df:9e:4c:a2:22:39:da:52:
                    a5:13:5c:29:96:da:08:7c:6a:6d:a9:b0:1b:53:12:
                    66:75:29:19:36:2e:ed:1f:67:f5:09:76:42:54:7e:
                    a1:cd:6d:54:16:9d:a8:c0:fb:42:48:b9:fa:61:c9:
                    29:40:55:a3:70:95:25:fb:5f:9d:0a:49:c6:29:9f:
                    3f:15:e9:f0:a3:e1:76:cc:b7:a8:27:eb:bc:63:73:
                    e7:3f:0a:7a:ec:65:5c:0a:e5:4d:bf:7f:ea:e9:a2:
                    09:6a:1d:b4:b1:b3:22:f5:a2:0d:60:b9:4d:f5:d7:
                    24:1a:91:a9:2f:a8:89:ef:c1:50:f8:a4:0b:76:e5:
                    ca:93:5f:88:0e:8f:6b:ae:cf:00:de:61:5f:36:b8:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:EE:B4:69:A3:BA:44:D3:C4:33:FC:5B:ED:AA:38:8F:42:53:09
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130342e302f32342d3234203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:93:64:83:18:27:b1:85:38:28:1f:73:f6:09:e9:67:19:
         d7:a6:e2:1e:fa:3c:e6:ad:e9:15:9c:83:d0:d9:07:3a:ed:b9:
         d9:56:5e:02:e3:35:11:1a:0a:ef:a4:eb:57:0d:3e:3c:53:3e:
         b2:30:85:60:4f:a8:10:a0:16:d7:6a:c3:78:f3:62:42:ce:b6:
         48:51:d0:9b:5b:e8:c1:68:94:19:58:69:a3:e7:32:cd:30:84:
         35:26:72:82:00:b8:ee:6d:29:6b:fb:ee:52:72:96:8c:5f:0c:
         de:81:7c:76:1a:b8:b8:8f:27:56:a9:c4:94:09:df:5d:4d:30:
         cf:9d:70:db:39:87:ec:f9:6a:99:3c:c1:0f:6d:7f:a2:eb:a5:
         90:1e:39:0f:f8:4f:ee:e4:8b:d8:5a:3f:54:49:ee:fc:01:a3:
         a8:ec:91:74:51:30:1c:b8:42:73:09:3a:4f:37:ef:5d:76:73:
         4c:98:55:52:5f:f7:04:8a:b3:4b:ae:12:18:8a:c5:36:5a:6a:
         b5:e4:e6:f7:75:29:6c:f8:2a:b6:8f:e6:d9:b7:cb:2c:e3:34:
         99:d9:83:45:a7:0a:e4:89:4d:08:bd:2a:66:da:aa:e2:b7:42:
         79:46:44:9f:91:8d:96:da:f5:dd:b9:a1:ca:a1:5a:1c:c7:cb:
         06:ea:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:37 2024 by rpki-client on console-fra.rpki-client.org