Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa
File:                     34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa (raw, json)
Hash identifier:          fxtSFylRMdzMOpUEGbOX/OFG/q9oLGHXtxIBP5Ja7qg=
Subject key identifier:   DE:C7:C1:71:D9:10:AE:22:88:06:ED:6B:47:3A:FA:39:19:7B:AA:76
Certificate issuer:       /CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
Certificate serial:       28D902E2C2D387CED93541815FEEE3628D3429EE
Authority key identifier: 3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa
Signing time:             Mon 05 Aug 2024 18:23:13 +0000
ROA not before:           Mon 05 Aug 2024 18:18:13 +0000
ROA not after:            Mon 04 Aug 2025 18:23:13 +0000
asID:                     269038
IP address blocks:        45.177.174.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d9:02:e2:c2:d3:87:ce:d9:35:41:81:5f:ee:e3:62:8d:34:29:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3
        Validity
            Not Before: Aug  5 18:18:13 2024 GMT
            Not After : Aug  4 18:23:13 2025 GMT
        Subject: CN=DEC7C171D910AE228806ED6B473AFA39197BAA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:af:d9:ef:49:7f:96:3e:bd:5c:67:2c:5d:52:
                    87:95:16:72:45:a8:28:b9:43:d6:08:3a:dd:c5:ee:
                    95:5a:85:1a:4d:18:5e:90:b6:ea:1b:49:c9:14:db:
                    58:28:97:44:03:fb:b9:cc:31:14:c8:62:bb:47:0a:
                    c8:ee:57:50:76:cd:86:1a:1c:aa:18:d5:88:4e:b5:
                    57:0a:cd:22:0f:3a:7d:43:79:03:ac:28:f7:b4:68:
                    86:d2:03:ae:e0:50:bd:1e:2b:8e:c7:05:3d:5a:c4:
                    17:e8:90:c9:fc:0b:cf:a7:ec:39:66:f0:f1:24:ca:
                    33:d7:fc:21:24:41:1d:2e:bc:e4:ff:6a:69:2a:49:
                    da:9c:8b:d5:5e:b1:aa:d7:5b:bc:24:5f:cd:04:ee:
                    f8:4e:47:d8:cc:34:a3:ac:ed:f4:c8:5a:6b:cd:a4:
                    27:86:5b:79:4f:b6:24:4a:d2:e2:6b:e0:b9:5c:dc:
                    9e:83:cf:8e:b4:e4:b8:c1:82:82:0a:07:b0:a8:5d:
                    ba:c9:96:db:1a:22:f5:2b:36:dd:b9:7e:28:15:aa:
                    0d:f3:7c:69:6e:0b:9d:00:b3:34:48:12:0c:45:80:
                    0a:88:f8:1a:45:01:25:12:c4:e3:2b:1f:7f:ce:b7:
                    6b:40:d6:5d:c1:ae:1b:ec:0f:c2:c7:ea:75:fa:5d:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:C1:71:D9:10:AE:22:88:06:ED:6B:47:3A:FA:39:19:7B:AA:76
            X509v3 Authority Key Identifier:
                keyid:3C:75:FE:DB:0E:BE:CF:9F:9A:A9:9D:4E:23:63:D7:26:96:43:E2:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C75FEDB0EBECF9F9AA99D4E2363D7269643E2D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/76e5c348WJoLgEt9kKNVQ2LK3aGrzNN7ffiLVixSnwy6/0/34352e3137372e3137342e302f32342d3234203d3e20323639303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:eb:8d:7f:11:f2:de:3d:b8:bc:b7:46:54:e5:f0:1c:b1:
         eb:d6:d0:54:95:3f:24:44:83:da:ca:4c:a9:58:81:25:29:54:
         54:cb:b8:dd:49:cc:41:47:9c:4c:53:2c:8a:42:b0:bd:5f:8a:
         4c:f7:70:20:d8:0b:9e:02:22:51:c3:58:a1:7f:34:45:31:83:
         9a:43:37:9c:2c:d7:57:9f:b3:38:50:75:d1:b8:fe:f1:d0:43:
         81:d7:0d:12:ec:69:e0:48:68:a8:6c:3c:60:3d:2c:65:4e:b5:
         0d:f5:ba:85:90:4e:ed:00:68:29:8b:3c:93:0c:6e:8c:52:e6:
         16:45:57:a3:c7:0e:6e:9a:7d:7f:7c:01:17:41:f5:9b:d3:97:
         76:60:7a:e7:73:38:e7:5d:3e:96:86:d3:83:ce:70:d2:e9:09:
         49:8b:8b:6b:46:f3:ca:d3:db:e2:26:36:38:86:b8:d3:a8:5c:
         54:98:2d:ee:15:c1:12:2b:96:fe:7a:84:1e:eb:78:51:76:15:
         bd:63:15:6d:53:b0:8f:47:6e:08:7a:3d:cb:1e:f2:8b:7e:29:
         99:6c:c1:b6:2a:04:12:a7:9a:9a:ac:2f:e1:5f:84:f8:53:8a:
         1a:4e:f8:77:de:d5:12:f1:9f:72:3a:87:a4:7b:7d:b7:20:13:
         66:be:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 20 21:18:52 2024 by rpki-client on console-ams.rpki-client.org