Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3233203d3e20323637303739.roa
File:                     34352e3232372e34342e302f32332d3233203d3e20323637303739.roa (raw, json)
Hash identifier:          qTVW48p88JndeWFXx14IG2SPwtZYs2p4isQvy7THY10=
Subject key identifier:   F5:75:5D:70:72:BB:C4:BE:B3:DA:C7:C1:67:7C:5E:5A:0E:54:4F:45
Certificate issuer:       /CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
Certificate serial:       76C903D3795EF9152DB071E8BD7A48D05FC24628
Authority key identifier: 01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3233203d3e20323637303739.roa
Signing time:             Mon 23 Oct 2023 23:06:29 +0000
ROA not before:           Mon 23 Oct 2023 23:01:29 +0000
ROA not after:            Mon 21 Oct 2024 23:06:29 +0000
asID:                     267079
IP address blocks:        45.227.44.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c9:03:d3:79:5e:f9:15:2d:b0:71:e8:bd:7a:48:d0:5f:c2:46:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B06433E6144C6AAA5D56186EEE7840105A6FB5
        Validity
            Not Before: Oct 23 23:01:29 2023 GMT
            Not After : Oct 21 23:06:29 2024 GMT
        Subject: CN=F5755D7072BBC4BEB3DAC7C1677C5E5A0E544F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1e:0f:88:23:1a:3f:f0:69:73:8c:09:51:90:
                    92:80:ca:fc:b3:8c:a4:45:9c:e3:29:67:f8:3e:f1:
                    44:c2:80:a5:a2:f5:19:2c:79:78:9a:d0:a1:55:0f:
                    6a:95:c4:2c:af:15:d8:0b:cf:d2:86:ac:91:92:9a:
                    39:2c:f6:88:f6:fe:a5:87:a9:20:9c:b5:c3:02:03:
                    2a:07:90:9c:67:10:dd:fe:b9:70:5c:8e:60:ce:34:
                    f5:9e:44:6a:76:3a:90:b5:f0:89:7c:25:37:1c:19:
                    9f:b9:ac:4d:cd:9f:31:25:17:df:be:ce:bd:6b:9a:
                    42:7c:e5:26:fb:7c:92:99:c5:6a:ea:35:4b:ef:b0:
                    18:82:05:98:3f:c9:96:e3:b4:fa:a2:23:70:b6:14:
                    7e:8f:c6:66:97:6c:e7:d4:c8:bb:66:c2:b3:a7:46:
                    ea:cd:0f:05:12:62:5f:ad:68:b7:1e:8f:d2:15:02:
                    ee:8d:ff:73:2c:af:85:44:77:cb:83:c9:69:c3:3b:
                    d6:eb:f1:26:8a:02:86:9e:a3:51:6e:a2:b0:95:c7:
                    d0:a6:cb:84:81:c7:c7:f3:ad:7b:ab:27:9f:04:d2:
                    f7:ff:8a:9e:01:7d:4b:60:52:ff:a9:42:a6:ab:1a:
                    55:21:6d:51:bd:72:2a:b0:8d:1d:fd:5d:6a:55:29:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:75:5D:70:72:BB:C4:BE:B3:DA:C7:C1:67:7C:5E:5A:0E:54:4F:45
            X509v3 Authority Key Identifier:
                keyid:01:B0:64:33:E6:14:4C:6A:AA:5D:56:18:6E:EE:78:40:10:5A:6F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01B06433E6144C6AAA5D56186EEE7840105A6FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/34352e3232372e34342e302f32332d3233203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:08:6c:f4:18:63:57:94:03:c7:26:45:b5:94:79:18:dd:f4:
         69:a4:69:bf:73:23:cf:b6:c5:13:f7:ac:cd:b4:88:b7:6b:ee:
         6c:d7:e9:b2:91:73:e8:2d:17:99:57:ea:5a:b3:f1:3d:15:a4:
         96:f0:03:09:bd:52:9f:ea:17:97:a7:f9:ad:6b:53:2c:86:6b:
         f1:56:fe:50:de:c7:10:57:59:8d:10:f5:c7:e8:94:f3:19:0c:
         04:8a:95:ac:dd:ff:b3:82:50:b9:f3:e0:1a:af:b5:4b:6e:08:
         49:72:d1:84:98:ce:19:b6:b5:af:0c:e1:e9:4c:58:68:89:2e:
         e9:d2:26:5d:5f:b8:32:3a:d4:06:2d:89:38:15:52:c5:e1:65:
         ca:ce:4a:83:41:04:f9:37:c2:f9:d1:cd:f9:57:32:3e:b6:6b:
         23:b8:a6:68:c8:5f:35:0d:e0:e9:7a:d7:34:35:f2:64:b8:33:
         a2:25:2b:44:e9:6a:4b:09:b8:4b:ef:fe:c9:55:9b:20:3e:ac:
         34:9d:c9:c1:e0:ac:3f:74:ad:cb:f1:39:2d:95:86:0d:03:a8:
         8e:bf:9c:2c:f6:15:03:41:00:95:76:bd:95:21:fe:d4:b5:54:
         81:35:83:a3:11:b7:de:1a:99:62:0e:0e:e1:30:53:bf:5a:7f:
         e5:9a:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 09:34:02 2024 by rpki-client on console-fra.rpki-client.org