Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa
File:                     34352e3232362e36302e302f32322d3232203d3e20323636393635.roa (raw, json)
Hash identifier:          ZQvVaG4mZG8DDDrbA6DGWGGYmqDknpWLx9GrDbqPwko=
Subject key identifier:   A7:97:4F:90:0B:F7:9A:C3:10:93:9B:B4:6A:AC:82:FB:F7:09:B2:A9
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       3AF6D238F4FEA309DD55602C0502456E801EDE05
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.60.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f6:d2:38:f4:fe:a3:09:dd:55:60:2c:05:02:45:6e:80:1e:de:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:3f:ba:06:03:76:e6:33:b9:56:82:9a:87:
                    ca:2c:70:18:93:f5:30:ed:18:e8:df:90:ca:44:41:
                    0b:6a:95:4a:31:51:10:be:79:1e:7e:6a:77:66:4b:
                    5a:9f:25:4c:f3:39:14:a1:d0:09:c7:0e:43:f3:28:
                    29:a3:91:e5:bb:64:c3:12:09:67:a5:44:09:29:23:
                    bf:31:72:0c:2c:cd:00:7d:75:98:d4:45:61:0d:e7:
                    7c:9e:ce:c2:fb:d6:ef:b6:8b:66:5f:f2:34:0e:47:
                    6f:cf:7a:15:ac:71:4b:f6:59:e3:50:89:0f:de:32:
                    fb:43:5d:20:b3:82:90:7b:e4:b2:9a:4b:1e:ac:73:
                    9f:44:42:8b:3d:5f:31:3f:03:06:56:b3:de:a1:08:
                    a8:c0:d5:ff:9a:b1:c5:cd:27:f3:fb:e4:66:d5:18:
                    84:40:bd:62:af:ed:e8:b0:45:cb:82:c9:d6:8d:48:
                    9b:ac:4e:ec:80:88:77:a2:4e:8d:3a:74:f0:20:a1:
                    c0:9b:8c:4b:58:51:6e:b3:64:e4:38:32:41:22:a3:
                    67:37:f9:3a:9d:a5:57:48:f7:8d:56:3a:06:85:39:
                    8a:2e:ce:e3:c4:c4:58:15:58:6a:9e:b9:76:4e:fd:
                    77:0c:44:60:33:ad:74:a7:e4:20:a6:1a:0f:f3:5b:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:4F:90:0B:F7:9A:C3:10:93:9B:B4:6A:AC:82:FB:F7:09:B2:A9
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36302e302f32322d3232203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:46:ef:7f:a4:00:41:3b:91:b0:35:17:c5:60:a5:db:99:d9:
         10:e0:68:69:4b:9f:7f:7b:43:2e:1d:95:8a:21:fc:f0:54:8e:
         c8:05:c5:0d:2d:22:50:52:bb:29:5e:39:c3:3a:d9:38:6d:0e:
         21:39:83:46:25:23:96:76:13:39:0a:d7:0c:64:5c:09:8e:cb:
         b1:3d:ab:ea:fb:ad:6d:b2:27:d9:c4:d5:62:03:08:50:17:c5:
         8b:2d:65:f0:5b:50:38:55:c5:45:4f:a9:0d:42:92:99:7e:c1:
         4b:32:62:3f:69:3c:5c:9e:e6:95:20:97:b7:5b:88:da:34:d1:
         a9:d8:6a:33:63:6e:c0:eb:3e:05:5b:1b:6b:3b:68:37:f1:2d:
         34:07:b8:a2:7d:74:2d:b7:37:9d:29:a7:d8:c6:1b:13:58:d7:
         e6:51:fe:c1:01:37:d1:a9:35:97:1d:90:55:13:ba:01:2b:fa:
         5f:6f:e5:59:6f:3b:91:79:ba:dd:8e:c6:50:92:e2:40:bd:5b:
         06:b7:79:91:27:e1:36:5b:91:a5:9f:50:4f:7b:5d:8e:4c:fa:
         a7:b7:82:c4:ae:b6:ca:bf:a0:bb:a8:10:fe:35:67:c2:0d:9e:
         5e:e4:93:95:79:31:aa:da:c7:98:cb:d4:74:da:3f:cf:f8:73:
         87:69:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 18:03:13 2024 by rpki-client on console-ams.rpki-client.org