Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36312e302f32342d3234203d3e20323636393635.roa
File:                     34352e3232362e36312e302f32342d3234203d3e20323636393635.roa (raw, json)
Hash identifier:          L8Ir25Xb4ptpk8xWYKGbh8aFY5Ln1xEEBYBZlaZC7No=
Subject key identifier:   D2:2E:0A:1F:FC:7E:64:62:E8:70:59:D3:F4:41:02:A7:35:FF:DF:16
Certificate issuer:       /CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
Certificate serial:       751E0EF906F7C9F8C40C7A7FC54E0C1128142CED
Authority key identifier: 01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36312e302f32342d3234203d3e20323636393635.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     266965
IP address blocks:        45.226.61.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1e:0e:f9:06:f7:c9:f8:c4:0c:7a:7f:c5:4e:0c:11:28:14:2c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013F6D10FDDF3FC92E558460AAB04E6E3721C968
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:83:f2:bc:41:a8:6b:2d:fa:29:83:e5:19:
                    b7:f7:ab:32:a3:8c:1e:f0:65:6d:fb:bf:73:aa:69:
                    5a:ed:74:e0:a0:42:15:e5:03:d5:5e:9a:6f:6a:31:
                    39:7c:44:78:6b:8d:d9:fc:80:46:06:41:30:92:c1:
                    ec:a2:4c:b5:5f:90:b3:e0:c7:b2:0e:a3:75:fc:08:
                    1e:f3:69:a0:c3:47:15:59:d6:b8:5a:f0:94:61:e1:
                    9d:03:e6:9b:75:b0:46:11:64:e2:7c:c7:cd:6a:17:
                    53:ea:d8:58:df:9d:6f:e3:ad:2f:02:56:8c:0c:2c:
                    9a:7e:1f:80:cc:cf:20:2f:f1:e7:d2:7e:62:38:36:
                    af:d4:01:6b:62:ad:86:1b:3f:d4:44:69:6c:3b:43:
                    44:cc:6a:67:a8:0f:15:e5:cf:cf:1b:1e:51:e9:78:
                    0d:ee:ec:55:86:f3:32:25:d5:46:ac:8f:9c:86:13:
                    c3:56:49:a3:d7:6f:b0:ef:7f:96:d2:76:28:19:c5:
                    70:54:5d:72:88:5c:4f:59:d4:84:4a:8d:9f:06:87:
                    e0:11:3c:90:6b:2a:76:9e:95:c1:6c:fd:ad:37:ef:
                    90:cb:eb:12:a5:59:51:c8:31:37:2c:72:73:60:b9:
                    f0:73:e0:ad:56:e5:1c:3c:9c:d7:e8:c4:ae:cf:e2:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2E:0A:1F:FC:7E:64:62:E8:70:59:D3:F4:41:02:A7:35:FF:DF:16
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:10:FD:DF:3F:C9:2E:55:84:60:AA:B0:4E:6E:37:21:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/013F6D10FDDF3FC92E558460AAB04E6E3721C968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/1/34352e3232362e36312e302f32342d3234203d3e20323636393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:a1:a9:77:81:21:8a:55:2c:e5:62:81:ef:aa:bf:5c:c1:cd:
         cb:5b:dc:c6:90:04:f7:98:fb:c8:be:21:74:21:65:71:a0:22:
         d3:c5:32:38:77:bb:f0:3c:f3:fb:b8:fc:ef:70:f2:2b:68:cb:
         64:ca:aa:fd:59:0e:9a:e3:f5:29:69:02:de:c9:09:8e:65:3c:
         c3:2d:f3:79:a1:a8:6f:29:19:cc:c2:76:f5:e8:c4:4a:f1:4a:
         1d:83:88:ea:c8:e0:d3:db:22:99:a4:7a:cb:ef:6e:76:21:54:
         63:2c:f1:14:ff:b8:ce:77:27:be:5c:aa:66:54:7a:d2:be:47:
         48:7b:ec:c2:c5:b7:cb:0d:97:45:79:56:c0:cf:c3:57:9f:2e:
         65:f1:b0:95:88:1e:82:c2:2a:ae:ba:fb:40:fe:f7:69:a2:b1:
         ed:01:07:89:fe:c0:82:1d:82:10:c1:0c:a2:27:7a:43:3f:6d:
         d5:d3:4d:67:2f:70:9b:77:37:43:26:54:b9:ea:60:77:70:0e:
         c3:51:07:a2:6e:ba:f5:dd:13:17:e9:0f:02:aa:16:19:05:8c:
         7e:a8:0f:bf:2a:30:3c:38:27:8b:6b:69:52:31:14:21:f6:c3:
         06:c1:e7:98:46:04:d6:43:62:19:41:16:31:f2:8a:82:c6:3b:
         17:88:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org