Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233352e302f32342d3234203d3e20323639323630.roa
File:                     34352e3138322e3233352e302f32342d3234203d3e20323639323630.roa (raw, json)
Hash identifier:          MEX3GUfymwjhOo/YQ/K7QykHH8c61lR2IOcAnxcjPPE=
Subject key identifier:   52:1E:EE:0A:26:53:E9:E7:22:3A:E3:42:82:54:53:CC:18:B0:6F:B7
Certificate issuer:       /CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
Certificate serial:       4B89E31AE968BE40A905742DD2F02ACB4476B91A
Authority key identifier: F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233352e302f32342d3234203d3e20323639323630.roa
Signing time:             Sun 02 Jun 2024 15:00:15 +0000
ROA not before:           Sun 02 Jun 2024 14:55:15 +0000
ROA not after:            Sun 01 Jun 2025 15:00:15 +0000
asID:                     269260
IP address blocks:        45.182.235.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:e3:1a:e9:68:be:40:a9:05:74:2d:d2:f0:2a:cb:44:76:b9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E925F71E1524B85EAEB1074F0066C25A7941A4
        Validity
            Not Before: Jun  2 14:55:15 2024 GMT
            Not After : Jun  1 15:00:15 2025 GMT
        Subject: CN=521EEE0A2653E9E7223AE342825453CC18B06FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:9a:fc:67:ad:af:5c:37:ef:cd:35:f2:c8:
                    a6:f1:c2:83:a2:46:ae:7a:9a:d7:b3:81:c0:31:a8:
                    cf:a0:f1:e9:f5:f9:ed:9e:36:98:63:e3:a3:e3:cc:
                    4a:5f:eb:0f:87:1f:9b:4b:2c:c1:e5:3a:57:de:89:
                    64:08:46:60:d1:c9:d3:b3:41:14:98:eb:30:a8:c6:
                    ee:e2:df:15:c0:46:3c:d5:a1:6a:82:8c:d1:02:36:
                    14:2c:f5:5f:f4:d4:35:60:4e:b4:e8:6e:3c:da:3e:
                    9c:05:72:f1:7f:36:e9:5e:b1:fa:c1:3a:98:f6:01:
                    3f:d5:de:3e:26:f4:41:19:ed:3b:9b:98:b1:6b:99:
                    92:a2:80:dd:42:2c:c0:48:6b:28:dc:aa:b8:22:d4:
                    5d:da:d5:f0:5b:a8:e7:2a:e5:dd:7a:14:79:82:fe:
                    96:42:49:e4:61:59:be:57:ad:9d:b5:b0:dc:53:8c:
                    ee:49:3e:e7:64:3a:42:d5:a9:c6:b5:51:98:0e:21:
                    ff:5f:23:cd:8a:60:53:21:0b:67:47:84:06:64:17:
                    1c:5f:d1:a0:c4:dd:07:72:92:40:c0:8e:f3:3a:aa:
                    e5:cc:ab:94:ab:ab:43:0f:3e:4e:b4:64:86:a0:bd:
                    a7:fc:e1:e4:ad:59:de:2f:fb:e1:a6:ea:de:3a:98:
                    0c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:EE:0A:26:53:E9:E7:22:3A:E3:42:82:54:53:CC:18:B0:6F:B7
            X509v3 Authority Key Identifier:
                keyid:F8:E9:25:F7:1E:15:24:B8:5E:AE:B1:07:4F:00:66:C2:5A:79:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/F8E925F71E1524B85EAEB1074F0066C25A7941A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8E925F71E1524B85EAEB1074F0066C25A7941A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UqQwa8yDTh8zbKNsANyd6xVweuLK7aYvKrJajiDJs1u/0/34352e3138322e3233352e302f32342d3234203d3e20323639323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:a3:e8:ed:2f:c1:14:9a:59:4f:82:2d:a0:02:ee:9c:72:
         23:e0:7e:d6:0c:3e:9a:94:66:90:67:4c:7f:e6:e5:7b:2f:e5:
         1e:da:e7:e2:51:0c:86:8c:a6:e2:8c:f0:8f:e1:8c:31:93:5e:
         e8:a3:01:a3:a7:88:66:c3:1e:92:ca:e9:2a:36:4a:5c:e4:e7:
         20:cd:b1:7f:5c:be:a2:38:48:74:16:8b:13:71:3c:da:34:48:
         e2:4f:33:cf:80:ca:91:44:06:20:12:e1:8f:35:a6:49:b1:34:
         8f:fd:66:17:2c:45:3b:7e:ab:58:af:2d:48:2c:b7:83:ab:39:
         95:1e:31:a7:88:ab:b2:ad:92:bd:56:27:3d:eb:4e:5d:ed:87:
         cf:9a:c2:93:6c:90:70:60:19:21:83:6d:ff:1d:c5:3e:8a:a8:
         be:10:36:99:4c:6b:72:6b:06:fa:38:35:19:6c:1e:9e:c6:70:
         2e:8c:aa:ce:0a:d3:1f:c2:21:56:c2:fd:16:30:66:d1:06:b4:
         ba:c5:a6:f0:c2:90:6f:cc:b7:54:f0:1f:42:0e:96:04:be:f5:
         4f:9b:92:66:2c:d2:89:9f:98:c8:19:3d:26:8a:32:d5:c7:2d:
         d9:f0:a3:03:c7:99:12:7a:a5:38:05:38:b3:ca:12:54:f6:d9:
         1b:18:eb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:27 2024 by rpki-client on console-fra.rpki-client.org