Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34352e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34352e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          snzqRINIXmiH+K822YKcFGE4gkK+t0SKLZcm1e7m4rg=
Subject key identifier:   F7:96:11:C1:EC:4F:74:CB:16:31:11:F8:4B:91:DB:7B:4C:35:51:A0
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       3141DEB639637B027FEBD0506755E148AE80390A
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34352e302f32342d3234203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:52 +0000
ROA not before:           Thu 04 Apr 2024 11:04:52 +0000
ROA not after:            Thu 03 Apr 2025 11:09:52 +0000
asID:                     267079
IP address blocks:        45.227.45.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:41:de:b6:39:63:7b:02:7f:eb:d0:50:67:55:e1:48:ae:80:39:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:52 2024 GMT
            Not After : Apr  3 11:09:52 2025 GMT
        Subject: CN=F79611C1EC4F74CB163111F84B91DB7B4C3551A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:91:0f:07:d2:c3:f5:f8:69:9a:1b:d8:ef:
                    b1:c9:00:5e:03:c7:ea:26:70:4d:28:5c:ad:06:76:
                    e4:06:32:6a:76:d4:6a:6e:bf:e0:24:d5:67:06:a4:
                    f8:05:05:c2:b4:d3:53:11:dd:e6:8e:a0:a2:7c:1e:
                    9d:cd:94:dc:b3:b1:ce:54:e7:24:cd:3c:45:5a:6c:
                    0e:39:9e:d7:f0:fa:ec:de:35:32:45:23:59:09:4e:
                    f2:67:72:e9:42:c4:a9:01:ae:ce:fd:41:6d:da:8e:
                    f1:08:23:11:81:9e:bb:f0:47:0e:1d:b4:09:5a:68:
                    de:b0:79:38:a8:21:9d:9f:39:0a:86:3d:be:15:4f:
                    e3:44:a9:bd:9f:e0:03:2a:05:47:19:ab:08:49:aa:
                    14:45:94:36:f2:26:b4:5c:cf:a3:81:f5:9f:2b:4e:
                    a5:0f:15:e8:12:e2:6f:5b:aa:19:26:c2:8e:ac:d9:
                    d8:7f:75:51:6c:f9:dd:62:ac:9e:2d:2e:dd:23:22:
                    de:3c:69:c8:29:0d:d9:c9:25:1b:81:b5:b4:9e:bc:
                    a7:33:fd:a9:3f:85:12:64:f7:6f:dc:d6:3f:68:a9:
                    85:92:3e:c6:a9:d7:14:07:44:d4:95:a3:ac:d1:18:
                    e4:d2:6e:9d:51:35:3f:9a:73:e6:47:32:b0:28:75:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:96:11:C1:EC:4F:74:CB:16:31:11:F8:4B:91:DB:7B:4C:35:51:A0
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34352e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b1:6a:5b:0f:5d:ff:a3:14:88:f7:99:31:dc:df:d4:39:4b:
         20:68:ed:e7:be:be:73:52:07:00:4f:07:5c:db:f7:a8:25:6b:
         3f:a6:93:b8:c3:ed:a7:d2:7a:29:1b:f6:ab:67:11:3f:0b:5f:
         ef:ea:36:9c:a7:50:b8:56:ad:5d:9b:b1:a5:ba:c3:f5:24:60:
         8b:c0:6d:b0:34:4d:e9:6f:e5:d1:d2:21:66:87:f8:1b:1b:65:
         84:1e:32:c3:e5:26:03:37:7f:b8:12:73:20:aa:99:7f:0b:68:
         18:03:76:92:f6:b7:9d:a7:2a:f0:99:62:3f:3c:10:89:89:bc:
         95:ae:d6:a5:7c:7c:70:c4:4f:17:8e:41:87:38:0a:d5:0c:a7:
         21:d9:43:fd:ae:14:a1:f7:2b:3e:1e:bf:51:55:b8:af:21:fc:
         cc:79:d5:11:f6:80:cb:93:56:6a:05:97:b1:86:6f:5c:bc:48:
         5e:6f:b0:13:9f:81:a7:26:e7:53:4b:84:0d:5e:eb:07:19:d4:
         8c:0b:9b:48:90:16:48:08:51:37:be:2a:cf:e1:bf:bc:ee:0a:
         cc:e1:0f:8f:65:af:66:bf:e3:07:dc:4d:09:40:82:56:e1:b0:
         3f:5a:83:70:00:52:2a:33:f7:be:0c:7d:3b:02:9f:84:21:0e:
         c1:cb:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org