Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa
File:                     34352e3137392e34352e302f32342d3234203d3e20323639303737.roa (raw, json)
Hash identifier:          sAh96k4x2JUzE4WX7T4zcNwwtOTz/BD+0/f4nyESodM=
Subject key identifier:   D9:46:10:CE:E0:D6:4E:C1:57:DC:9F:6E:09:7E:B8:08:A4:40:08:EB
Certificate issuer:       /CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
Certificate serial:       3CA13747366887750F75725D346B5BE46D933632
Authority key identifier: A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa
Signing time:             Thu 04 Apr 2024 09:09:33 +0000
ROA not before:           Thu 04 Apr 2024 09:04:33 +0000
ROA not after:            Thu 03 Apr 2025 09:09:33 +0000
asID:                     269077
IP address blocks:        45.179.45.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a1:37:47:36:68:87:75:0f:75:72:5d:34:6b:5b:e4:6d:93:36:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
        Validity
            Not Before: Apr  4 09:04:33 2024 GMT
            Not After : Apr  3 09:09:33 2025 GMT
        Subject: CN=D94610CEE0D64EC157DC9F6E097EB808A44008EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:07:3f:75:d6:2f:7d:f7:46:88:6a:0e:16:
                    bc:df:09:f3:7c:37:ac:fd:62:65:01:c8:00:c2:8f:
                    1c:5a:af:87:cb:b6:dc:98:d0:2d:f4:93:6d:15:8b:
                    87:da:95:07:e8:67:08:5a:85:5b:47:8e:e1:c3:4c:
                    ab:c1:77:0d:d3:c9:a3:4e:3f:cd:e0:66:c2:83:c5:
                    62:45:f0:57:f1:6f:ef:d6:63:c1:92:83:b5:b7:45:
                    eb:22:3e:fd:cf:53:ad:70:c1:dc:ec:e4:97:a9:2a:
                    98:d4:76:51:7f:1a:63:f8:49:6a:20:e6:25:70:61:
                    49:8d:9f:4d:ed:6a:c7:d6:99:66:65:8d:8a:4f:af:
                    93:86:24:80:a1:fd:1f:94:2d:dc:cc:4d:1e:b7:e1:
                    a0:cd:cd:e5:c4:88:c9:63:15:66:17:02:a2:3d:65:
                    fe:de:c0:02:ef:be:26:1b:5d:ca:c4:f1:a0:d5:93:
                    35:83:6b:4f:eb:fd:32:e1:72:fa:c7:19:37:8d:8f:
                    fb:89:e6:a8:20:c9:d6:52:18:ab:96:cf:82:48:e5:
                    14:17:47:53:d6:19:8c:7e:37:42:29:3b:d2:ff:b7:
                    47:4d:3f:3b:ce:20:dd:2f:62:e0:43:81:51:fc:63:
                    c5:ae:5a:6f:f8:a0:ed:46:11:f0:c2:67:13:5c:fb:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:46:10:CE:E0:D6:4E:C1:57:DC:9F:6E:09:7E:B8:08:A4:40:08:EB
            X509v3 Authority Key Identifier:
                keyid:A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/34352e3137392e34352e302f32342d3234203d3e20323639303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f8:5d:12:ce:42:8e:84:3d:00:0c:02:a1:d4:1d:de:6e:55:
         1f:c0:e8:33:14:31:31:c3:1a:e8:ca:bd:f3:da:f8:e5:ed:99:
         30:8c:50:d9:53:68:6b:cd:79:ce:9c:c7:31:49:bb:fb:84:4c:
         eb:21:fe:a1:71:fa:30:3f:5e:31:20:c0:2a:5d:95:a1:19:c5:
         a9:ff:b5:ef:eb:10:7e:2e:6a:b5:a5:1b:3d:24:23:1e:9e:6a:
         0e:a1:d4:af:2e:eb:b2:56:06:7f:7a:76:14:3f:8d:20:ad:67:
         7b:98:65:f6:d7:79:de:73:5b:58:73:cb:32:ef:9e:5c:b4:49:
         87:3e:c9:27:1f:f0:b6:90:71:4b:2e:59:3d:b4:c5:14:89:7b:
         71:5b:5b:ad:d8:08:22:79:20:20:90:9b:fc:39:e7:87:cd:a2:
         fc:61:6a:e4:16:8b:73:af:fe:ad:61:f0:9e:84:98:0f:1a:b8:
         cc:7b:9c:a7:3e:3b:c4:03:72:84:27:82:31:c5:85:47:5b:c4:
         b7:f8:00:81:93:a3:e6:10:dd:b1:8b:97:49:46:8e:d0:9c:43:
         c8:0b:fc:26:cb:56:9c:fc:a7:df:09:b8:ec:66:21:ee:e6:9f:
         c4:d9:22:b8:00:96:da:18:60:38:b6:79:b9:8f:74:7b:47:48:
         2b:7f:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 02:22:49 2024 by rpki-client on console-fra.rpki-client.org