Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa
File:                     34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa (raw, json)
Hash identifier:          UK1JUVWMOnCNoiti+DyN1lZFqQxhyNY3rllvSZ1S84Q=
Subject key identifier:   8F:7D:79:34:17:DB:38:76:D3:36:B5:EF:5A:9E:1D:CA:A9:8D:71:48
Certificate issuer:       /CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
Certificate serial:       3CB639072A321701E08ECBA2062E39508893BC20
Authority key identifier: E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa
Signing time:             Wed 03 Apr 2024 23:23:11 +0000
ROA not before:           Wed 03 Apr 2024 23:18:11 +0000
ROA not after:            Wed 02 Apr 2025 23:23:11 +0000
asID:                     268673
IP address blocks:        45.165.106.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b6:39:07:2a:32:17:01:e0:8e:cb:a2:06:2e:39:50:88:93:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15
        Validity
            Not Before: Apr  3 23:18:11 2024 GMT
            Not After : Apr  2 23:23:11 2025 GMT
        Subject: CN=8F7D793417DB3876D336B5EF5A9E1DCAA98D7148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:7e:e2:ef:37:13:c8:cf:cc:b0:32:3d:a7:
                    29:c0:5c:ed:ea:03:4a:c1:f9:22:3b:b7:9c:55:ed:
                    b9:4c:14:02:e1:5b:29:dd:ac:93:74:be:ef:59:86:
                    0b:69:d3:e8:e3:a8:10:62:89:4d:dc:a4:8d:c6:df:
                    fb:cf:b8:0c:46:fc:79:a7:96:0e:f1:e3:da:98:2d:
                    db:ac:23:ed:8e:07:e1:e1:bd:db:4d:62:ab:08:94:
                    a4:79:ce:46:f0:cb:58:41:78:b6:54:6d:b5:f9:2b:
                    85:44:a9:8a:ab:91:b0:75:c7:6e:ff:db:34:d9:ea:
                    ce:df:f4:42:52:a9:2d:24:88:b4:47:cf:63:1b:29:
                    e3:a4:04:64:08:41:dc:e4:78:dc:5d:1c:7e:7d:27:
                    03:a1:14:af:4e:be:29:da:fe:b5:cb:bd:7d:55:c6:
                    61:eb:6d:7a:1e:75:7d:62:08:3f:d7:42:42:90:91:
                    6b:e3:4b:e3:2b:78:43:a1:01:c1:27:57:0f:32:fb:
                    10:b7:70:34:d1:ac:00:87:c8:b7:a6:87:fe:52:95:
                    02:4d:db:fa:cd:df:f8:0b:d5:84:ae:e8:3c:e0:cb:
                    06:04:88:b7:7f:52:ff:52:8d:c6:49:3d:5c:47:21:
                    02:6b:bb:f0:c0:37:71:55:7a:d4:f7:80:64:47:1b:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:79:34:17:DB:38:76:D3:36:B5:EF:5A:9E:1D:CA:A9:8D:71:48
            X509v3 Authority Key Identifier:
                keyid:E8:56:65:FF:B4:E6:EA:EB:C5:AB:C5:DD:1A:6B:99:B0:26:68:8F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E85665FFB4E6EAEBC5ABC5DD1A6B99B026688F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/1/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:a7:ab:8e:5c:13:3e:72:c5:a0:ca:a2:df:46:44:b6:96:
         d6:70:40:d0:43:8c:fc:5d:5b:59:cf:b4:ca:2e:69:7d:ed:e8:
         b4:60:07:95:61:c5:3e:7a:e8:62:50:19:26:cc:6b:67:7c:c2:
         f4:8c:ca:0e:83:9b:e9:aa:2f:fa:a8:1c:50:35:20:d0:db:71:
         dd:3d:4f:79:bb:d9:0a:d4:79:07:c9:d2:07:fa:0c:59:59:0d:
         0b:eb:3c:78:3d:0c:44:05:c2:67:2c:46:23:ec:f2:c4:7c:67:
         40:46:58:37:17:44:2b:a9:f4:61:01:27:15:d3:65:3c:96:65:
         74:ff:16:48:56:7b:d8:54:07:c7:64:ef:58:4c:94:55:80:eb:
         76:dd:50:db:bb:60:cf:c1:9a:c8:fb:fd:80:b2:6e:9b:04:0f:
         59:91:36:77:06:ff:27:58:11:bf:48:e1:b6:cd:13:ad:92:85:
         65:e8:fc:f9:5f:30:6c:6d:b2:a0:ff:46:44:74:97:78:50:ce:
         88:fc:d9:20:1f:de:9e:24:41:4f:9d:28:73:ec:38:ad:ff:d6:
         86:9f:c4:5c:fe:84:43:ea:b9:13:3c:20:49:3f:ea:7b:07:73:
         8f:57:ee:d8:b2:4c:ae:15:09:cd:a2:28:49:55:83:fb:73:11:
         f5:d4:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:37 2024 by rpki-client on console-fra.rpki-client.org