Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa
File:                     34352e37302e3234382e302f32322d3232203d3e20323637363130.roa (raw, json)
Hash identifier:          +FIPI9R2YsJEZUHgVhcGfrVzU3Kj8dzOUyZ3y99+BTw=
Subject key identifier:   64:2F:53:5E:19:35:A4:BE:B8:2B:F1:79:FA:A7:82:50:3C:B4:AE:14
Certificate issuer:       /CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
Certificate serial:       47B7B9AFF723EF056765D5215B43C81B2DE8E40A
Authority key identifier: B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa
Signing time:             Thu 04 Apr 2024 13:54:05 +0000
ROA not before:           Thu 04 Apr 2024 13:49:05 +0000
ROA not after:            Thu 03 Apr 2025 13:54:05 +0000
asID:                     267610
IP address blocks:        45.70.248.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:b9:af:f7:23:ef:05:67:65:d5:21:5b:43:c8:1b:2d:e8:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
        Validity
            Not Before: Apr  4 13:49:05 2024 GMT
            Not After : Apr  3 13:54:05 2025 GMT
        Subject: CN=642F535E1935A4BEB82BF179FAA782503CB4AE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:e6:37:44:7c:c9:18:78:91:1e:29:5d:cf:
                    f9:2a:da:bc:5f:5b:a7:d7:82:3b:98:9f:df:9b:45:
                    f7:f3:c4:b6:73:45:db:ee:72:d3:ac:dc:f6:51:dc:
                    b5:c0:0b:70:e1:27:d6:aa:4b:e6:28:49:14:51:b7:
                    ad:52:0d:d6:cc:f3:da:b0:e9:42:ee:90:ec:02:ae:
                    25:a7:3e:99:5e:ce:43:b6:1d:1d:4c:04:a3:69:6c:
                    fa:fe:52:64:e6:76:ad:fe:f4:e1:6b:eb:9a:e1:0e:
                    70:68:9e:dd:36:82:41:4a:25:e1:c2:1f:1c:28:3f:
                    74:de:53:22:cb:96:15:aa:e3:d8:ce:7f:8c:c3:e3:
                    d3:f6:3b:6e:b4:b4:35:d8:66:07:90:b1:3e:c7:c6:
                    50:a2:33:69:22:65:bb:c1:ff:86:71:36:de:a3:1b:
                    96:06:01:e1:3d:1d:6c:55:f1:a7:76:1b:97:2a:62:
                    99:cc:1d:e3:fd:61:dc:2b:12:1d:84:cc:6e:5b:bf:
                    28:1d:31:19:91:aa:90:a9:7f:0e:ff:93:14:e5:a0:
                    dc:19:8e:6b:13:e4:70:95:21:e0:86:6c:8f:9f:d3:
                    19:6b:f3:e0:29:df:5e:cb:24:83:2d:19:ff:12:03:
                    ef:85:28:91:59:51:40:74:de:f7:26:11:72:09:0c:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:53:5E:19:35:A4:BE:B8:2B:F1:79:FA:A7:82:50:3C:B4:AE:14
            X509v3 Authority Key Identifier:
                keyid:B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32322d3232203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:1d:72:c9:18:ec:23:86:c4:db:cf:26:15:ab:d6:2b:25:63:
         65:de:5f:8c:0d:b5:8d:96:4d:37:ea:e2:02:46:87:ee:70:34:
         45:ac:23:44:2f:71:96:37:0a:1d:55:f2:01:80:ff:aa:44:b4:
         1b:5a:21:f0:92:d8:78:a1:e9:00:7b:2a:f8:d6:24:a4:17:44:
         02:05:be:09:7e:d3:a5:dc:95:2f:07:5b:5b:91:80:c0:40:74:
         cc:e5:ce:35:92:6b:55:97:62:31:3a:4e:55:85:de:18:4b:8d:
         e0:d0:a2:63:ce:9c:59:97:29:d7:23:c6:d7:40:61:82:5f:1c:
         05:b7:0d:5c:ef:eb:26:c7:1f:7a:bd:02:1d:bf:9a:65:0a:99:
         61:c3:e5:0f:ba:b2:1b:66:71:d5:c0:59:d9:20:fd:98:ba:e8:
         80:d9:02:2f:42:7e:37:5c:38:65:3c:b9:ae:48:50:ee:bf:a0:
         1f:11:2d:8d:a3:3d:20:10:b4:1a:c1:d2:ca:e4:5c:53:df:b2:
         f6:a7:c1:34:08:13:92:95:e1:ad:78:de:6a:4d:aa:e5:69:be:
         6a:1e:3a:8d:e7:98:aa:f4:fd:22:a4:b0:3b:62:ff:fb:6d:e1:
         1b:64:58:f0:ce:4e:d1:83:02:9c:a1:2d:9a:19:56:4a:2b:3c:
         74:c6:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org