Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa
File:                     34352e37302e3234382e302f32332d3233203d3e20323637363130.roa (raw, json)
Hash identifier:          IjBzCwC6BFNchKzXjbPNenR8GSacP6bu0sYM49BfBm4=
Subject key identifier:   03:A9:54:6C:5A:08:01:F0:C3:16:F4:0F:E6:70:82:D6:1E:D0:90:14
Certificate issuer:       /CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
Certificate serial:       400AD964B78566E8D9BC2DC4AC35EA8ED788ECB7
Authority key identifier: B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa
Signing time:             Thu 04 Apr 2024 13:54:05 +0000
ROA not before:           Thu 04 Apr 2024 13:49:05 +0000
ROA not after:            Thu 03 Apr 2025 13:54:05 +0000
asID:                     267610
IP address blocks:        45.70.248.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0a:d9:64:b7:85:66:e8:d9:bc:2d:c4:ac:35:ea:8e:d7:88:ec:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B27CE4DDB9F9E7D401214FEC57190D90869B206C
        Validity
            Not Before: Apr  4 13:49:05 2024 GMT
            Not After : Apr  3 13:54:05 2025 GMT
        Subject: CN=03A9546C5A0801F0C316F40FE67082D61ED09014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:3c:2c:98:62:00:0b:61:aa:2a:af:18:18:
                    be:33:a6:16:28:1c:88:71:63:e5:49:84:f6:44:c3:
                    71:7e:f1:41:bd:3c:45:68:e2:5f:b4:44:b2:4f:9c:
                    15:26:e1:7e:9e:b9:8d:e8:36:71:21:82:c9:fd:44:
                    97:e2:6a:f2:ad:88:6f:b8:8a:86:5e:ac:00:90:93:
                    c1:da:cb:b6:79:26:8a:72:12:f0:4a:f6:b0:ab:18:
                    76:71:0d:95:3f:ec:90:d1:61:73:9d:81:37:1a:de:
                    db:d7:c7:36:92:b4:66:f7:7e:7e:e5:39:c3:e5:6f:
                    13:e2:fa:b3:7f:29:10:15:32:2e:29:c8:69:9a:16:
                    8b:cf:90:94:fe:e7:9a:42:22:f4:9a:c6:3b:bf:c4:
                    7e:95:4b:b1:da:20:00:af:66:a1:0a:6d:a2:ed:ac:
                    5e:23:0b:67:6a:6f:d4:23:55:5a:1a:09:48:fa:90:
                    8a:e6:c9:7d:f6:10:e4:ac:1b:96:2a:78:76:eb:33:
                    9c:d3:d1:1a:68:d2:5b:fd:8b:9a:2a:ed:ad:ae:e8:
                    d2:e0:cd:07:44:bf:b1:61:68:09:e5:80:c2:64:ca:
                    c3:ae:6e:c6:3c:ab:de:37:de:29:f4:5e:60:78:8b:
                    76:ba:a4:05:74:0a:7b:f6:d7:00:ab:ab:2f:25:70:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A9:54:6C:5A:08:01:F0:C3:16:F4:0F:E6:70:82:D6:1E:D0:90:14
            X509v3 Authority Key Identifier:
                keyid:B2:7C:E4:DD:B9:F9:E7:D4:01:21:4F:EC:57:19:0D:90:86:9B:20:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B27CE4DDB9F9E7D401214FEC57190D90869B206C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wV6fDzJrw97QXzoH8he5DyZCMkFdheEbqudTqgkrSr5/1/34352e37302e3234382e302f32332d3233203d3e20323637363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:74:d0:8f:af:ea:05:64:f6:7e:74:ad:b7:f8:dc:a3:6c:8b:
         6c:fa:20:2a:7f:d1:3e:6d:b9:da:67:0c:92:ed:39:28:5a:2c:
         04:73:32:56:30:8f:d8:db:62:81:9e:2b:8d:e7:10:29:1e:2b:
         33:bb:c2:b4:9b:35:0b:e6:bd:ee:d9:bf:80:b3:7a:b6:de:54:
         06:45:08:7c:49:87:83:e3:20:19:e2:1f:2a:d7:6f:d4:33:84:
         d9:d6:9b:89:f6:fe:98:9e:3b:76:5d:b5:b2:8d:35:59:67:ff:
         ff:7f:be:03:b1:42:f1:44:15:60:e8:ef:fe:bb:3a:e0:b2:2f:
         ae:a6:a0:dd:87:35:30:3d:bc:78:2f:0a:b3:2c:58:80:91:42:
         91:03:c3:d1:70:c7:5c:04:8a:8c:1f:76:07:5f:30:e4:70:f1:
         ab:5b:99:d2:b3:17:2f:d8:57:18:d5:a2:5d:8a:9e:6b:c5:ec:
         73:d9:2e:66:9d:45:fb:78:51:28:41:6d:56:4c:82:9c:28:2b:
         9f:34:71:b2:d4:a2:a2:19:36:9b:df:6e:74:26:a0:23:04:d9:
         0f:b7:02:5c:a0:0c:19:07:7f:78:49:16:ec:87:ff:c4:49:b8:
         00:18:b0:83:7f:21:fa:d3:e4:0d:e2:42:bd:d7:0d:dd:e1:6f:
         98:3e:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 20:19:45 2024 by rpki-client on console-fra.rpki-client.org