Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa
File:                     34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa (raw, json)
Hash identifier:          hTZY9DyUNY5grSORrKkcIOH1wCEtk+pGYNNERMO5ZcU=
Subject key identifier:   9A:8D:E2:D4:A1:35:E7:1D:CE:99:E5:23:81:17:E2:02:9C:2D:BE:F2
Certificate issuer:       /CN=587B556A325EFD4FA17909D19F46DDB8079DD090
Certificate serial:       5E8A91BA0B75AEA9A70CBC981E5AE7BEE1F8DD21
Authority key identifier: 58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa
Signing time:             Thu 04 Apr 2024 23:24:17 +0000
ROA not before:           Thu 04 Apr 2024 23:19:17 +0000
ROA not after:            Thu 03 Apr 2025 23:24:17 +0000
asID:                     267136
IP address blocks:        45.229.234.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8a:91:ba:0b:75:ae:a9:a7:0c:bc:98:1e:5a:e7:be:e1:f8:dd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587B556A325EFD4FA17909D19F46DDB8079DD090
        Validity
            Not Before: Apr  4 23:19:17 2024 GMT
            Not After : Apr  3 23:24:17 2025 GMT
        Subject: CN=9A8DE2D4A135E71DCE99E5238117E2029C2DBEF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:64:72:a4:e2:12:c0:aa:d0:c6:da:7f:df:
                    50:d0:74:eb:45:f3:aa:93:10:a9:35:36:5a:bf:f5:
                    e6:54:1d:a7:3b:c9:56:2e:03:a0:e3:cf:6a:0f:09:
                    c8:bb:0b:ba:7a:4e:8a:e1:f4:64:eb:b7:be:16:f3:
                    38:69:3d:d8:fe:ef:dd:4d:0e:a5:dd:10:56:41:4f:
                    78:e2:1e:e0:15:eb:f4:1d:92:cf:3c:42:da:d1:20:
                    d5:d2:da:b3:54:0c:ae:47:bf:c4:08:81:3e:ad:1c:
                    6e:78:fb:ae:5a:0f:37:f0:ef:6b:96:92:83:3d:48:
                    84:f6:9b:18:cb:c7:82:25:af:85:a9:e1:da:ea:e1:
                    73:f9:62:e5:a3:d8:47:9f:17:68:43:c1:ec:c5:38:
                    b5:02:ee:ca:bd:2c:58:de:00:3b:a3:51:64:8e:d7:
                    c5:a6:86:24:1d:04:dd:cf:a9:72:66:82:11:8f:09:
                    22:ee:7f:22:80:ff:b4:43:53:9b:49:4c:42:d2:24:
                    ee:58:cb:c2:51:64:02:c5:68:65:cd:fd:65:8f:66:
                    d4:25:7c:d8:c6:02:8a:4e:0c:88:41:5b:57:85:9f:
                    e0:4b:5a:4f:33:7a:9f:99:38:30:4d:b4:2f:26:35:
                    97:a4:a5:b5:a5:14:9e:76:4a:35:2f:84:4a:2c:70:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:E2:D4:A1:35:E7:1D:CE:99:E5:23:81:17:E2:02:9C:2D:BE:F2
            X509v3 Authority Key Identifier:
                keyid:58:7B:55:6A:32:5E:FD:4F:A1:79:09:D1:9F:46:DD:B8:07:9D:D0:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/587B556A325EFD4FA17909D19F46DDB8079DD090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/587B556A325EFD4FA17909D19F46DDB8079DD090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Bj3FQeD77x63oJLzKiiwvoCSXvQ5djEKoZLZqTgbio1/1/34352e3232392e3233342e302f32342d3234203d3e20323637313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:68:9b:9e:e1:0e:78:86:8c:3a:26:4c:b6:90:04:41:18:b7:
         50:30:5e:ab:f0:0e:5c:fd:3b:b7:fb:60:80:23:69:48:c9:62:
         9c:17:d7:8f:ec:31:e7:be:3f:2b:8f:67:40:0f:27:0c:39:91:
         b8:bb:73:07:d1:c7:f9:5d:f6:bc:de:ec:fd:54:23:58:da:82:
         c1:5e:2c:3f:7e:cd:e9:ff:80:f4:a8:51:86:0e:8d:ea:97:6d:
         c2:9f:e3:c9:b3:cf:9a:29:ac:12:29:b7:52:ef:7a:f5:75:17:
         97:95:42:d9:ed:7f:a5:92:e1:32:4b:12:60:fd:9a:95:43:b1:
         bf:ee:1f:1c:0e:c2:d9:0f:2c:ec:4b:49:a3:dc:9a:cd:d7:5c:
         54:80:3c:1e:ae:7a:2a:eb:b7:8d:13:d9:3b:01:54:9c:a0:6e:
         68:7c:14:3f:59:80:67:b1:eb:9f:df:ac:d5:48:20:3f:d0:0e:
         18:a2:72:1f:84:0d:88:fe:02:f8:6c:1f:e6:6f:49:ba:a4:86:
         af:9c:d5:84:09:3a:34:74:9b:cd:ed:fb:56:30:15:f9:c4:e0:
         68:4f:6c:55:e1:b3:a8:3a:99:70:cf:00:b1:e1:43:cf:03:e3:
         23:ef:4f:75:7f:8a:40:66:78:72:90:51:e2:59:d3:d6:be:4f:
         bf:59:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 10 17:38:58 2024 by rpki-client on console-ams.rpki-client.org