Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa
File:                     34352e3232372e34362e302f32342d3234203d3e20323637303739.roa (raw, json)
Hash identifier:          wuUmHSRxgyIczNYo2YeFm+hoPH7ZM1wwxoYHXxbrY6U=
Subject key identifier:   74:17:4F:ED:B7:6B:14:8B:55:E2:51:64:5E:39:0A:61:B7:67:82:FC
Certificate issuer:       /CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
Certificate serial:       3A8E1CEADED98C50CD87737748CDBCC7B39232B9
Authority key identifier: BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa
Signing time:             Thu 04 Apr 2024 11:09:53 +0000
ROA not before:           Thu 04 Apr 2024 11:04:53 +0000
ROA not after:            Thu 03 Apr 2025 11:09:53 +0000
asID:                     267079
IP address blocks:        45.227.46.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:1c:ea:de:d9:8c:50:cd:87:73:77:48:cd:bc:c7:b3:92:32:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA61C4911C1A34E84E64B3E9BF2862583819F5BF
        Validity
            Not Before: Apr  4 11:04:53 2024 GMT
            Not After : Apr  3 11:09:53 2025 GMT
        Subject: CN=74174FEDB76B148B55E251645E390A61B76782FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:ba:60:12:ba:ba:36:97:ad:a3:e0:02:e1:
                    e3:1d:f0:42:82:cb:24:c4:68:e4:56:65:b2:84:83:
                    f8:14:d1:8d:46:f3:a2:54:bb:a1:f9:c0:ce:fc:a4:
                    4e:be:d3:b8:85:df:7f:42:aa:1a:4c:3f:50:7e:42:
                    45:ce:d7:89:65:af:64:96:e4:57:1d:e0:b4:62:21:
                    f8:9d:5b:2f:4a:36:00:35:5d:e2:61:b8:4d:09:c6:
                    e5:94:b5:7c:66:29:21:9d:ee:54:d2:9e:e7:50:4a:
                    40:5a:70:a5:e4:8c:d7:ae:fb:d1:e8:e3:58:f5:7f:
                    3e:a5:e7:ff:67:65:03:01:21:2a:7d:97:a5:c6:1e:
                    75:f7:08:57:c5:c1:b2:3c:60:99:93:96:5d:4c:73:
                    c5:34:4b:1d:50:8a:80:20:2b:b4:75:af:df:21:4c:
                    9d:77:5c:3b:2c:4b:76:37:51:07:24:db:9f:fe:cb:
                    01:34:49:99:49:e5:e1:ea:e8:fc:db:38:fd:91:13:
                    fc:99:3d:cc:c7:97:90:8a:41:f3:91:49:22:52:8c:
                    48:a6:bb:6f:ec:a2:11:70:36:86:b1:0a:eb:b9:39:
                    1b:0c:3f:04:f3:cd:2d:57:eb:90:3f:17:f9:1a:35:
                    6e:c6:a1:67:67:5f:3c:01:94:d1:e4:cf:97:76:83:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:4F:ED:B7:6B:14:8B:55:E2:51:64:5E:39:0A:61:B7:67:82:FC
            X509v3 Authority Key Identifier:
                keyid:BA:61:C4:91:1C:1A:34:E8:4E:64:B3:E9:BF:28:62:58:38:19:F5:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA61C4911C1A34E84E64B3E9BF2862583819F5BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/1/34352e3232372e34362e302f32342d3234203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b9:b5:d8:33:d4:55:f7:56:b9:a0:ca:51:e3:5a:c2:04:26:
         7f:de:d0:7b:e8:1f:ff:12:a5:78:5e:e7:74:65:e2:1f:0c:49:
         6c:aa:f5:1a:58:0a:19:f5:a3:57:cc:02:93:9b:63:09:0a:ec:
         11:c1:85:18:a3:73:f7:c4:c9:ee:ac:87:a8:4e:b9:99:46:11:
         e8:61:43:4d:ad:f0:8f:3b:1f:ed:18:f0:cb:85:13:bc:b2:70:
         bc:85:a8:04:3f:59:34:66:57:d9:f9:83:b7:69:a3:3d:85:66:
         e4:96:b7:cd:c1:ea:06:00:af:8b:87:05:87:1c:04:ac:76:e5:
         83:17:35:e2:ec:a8:56:53:92:65:d6:bd:f0:81:c1:41:54:2d:
         0a:b2:1b:94:05:5f:8a:47:ac:f7:c8:7b:0f:28:36:ba:8e:07:
         f2:56:cc:16:de:55:15:e7:0b:fa:ce:e5:60:82:4a:e2:f4:dc:
         1a:75:ad:c4:eb:86:56:1b:3c:03:88:28:e7:94:a2:1d:c9:85:
         34:4b:a3:a5:13:6a:14:04:f4:15:f7:41:ca:c1:fc:a1:d3:a4:
         0f:ad:02:90:b5:e4:2d:89:f1:4c:d7:05:52:db:04:fd:1a:f1:
         2c:a7:e7:89:08:5c:2c:40:9a:3c:fb:90:4f:16:de:53:b5:5b:
         5d:a3:16:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:43:14 2024 by rpki-client on console-fra.rpki-client.org