Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3234203d3e20323638363232.roa
File:                     34352e3136342e33362e302f32322d3234203d3e20323638363232.roa (raw, json)
Hash identifier:          ho8PbEpiLu/gnejCbVp380tHRH7EFRaAXgnrCuF79Yk=
Subject key identifier:   64:2A:A3:FF:83:72:4C:38:74:D4:10:32:91:28:B0:74:FE:24:65:A9
Certificate issuer:       /CN=6C3C02D3BCB39DB866B00522F58C95D7D77CAE19
Certificate serial:       26B26165DCC3BD7074F93F6BA08311053317964E
Authority key identifier: 6C:3C:02:D3:BC:B3:9D:B8:66:B0:05:22:F5:8C:95:D7:D7:7C:AE:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3234203d3e20323638363232.roa
Signing time:             Wed 05 Jun 2024 23:17:48 +0000
ROA not before:           Wed 05 Jun 2024 23:12:48 +0000
ROA not after:            Wed 04 Jun 2025 23:17:48 +0000
asID:                     268622
IP address blocks:        45.164.36.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b2:61:65:dc:c3:bd:70:74:f9:3f:6b:a0:83:11:05:33:17:96:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C3C02D3BCB39DB866B00522F58C95D7D77CAE19
        Validity
            Not Before: Jun  5 23:12:48 2024 GMT
            Not After : Jun  4 23:17:48 2025 GMT
        Subject: CN=642AA3FF83724C3874D410329128B074FE2465A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:55:69:72:91:2f:fc:ad:31:70:6a:c6:ef:
                    61:b0:ca:22:b9:8c:09:70:d5:9c:14:84:7d:82:a2:
                    d1:33:c7:36:cb:e1:7e:f3:78:f2:6b:54:1f:34:c4:
                    9b:3b:0c:8f:b6:4d:6f:e1:fd:71:86:6a:c4:98:9c:
                    a3:ca:c9:02:08:31:3f:fa:21:76:a1:23:6e:f5:0e:
                    30:bb:1a:2f:c1:11:c2:77:96:bb:b0:2b:a2:79:ba:
                    c5:f1:c2:ca:25:e0:62:19:db:75:d9:5f:0a:55:5c:
                    ce:7b:e3:6d:a2:3a:0d:0e:ac:52:fc:4d:b0:ef:00:
                    8e:19:f1:29:e2:18:c3:9c:84:2d:40:1b:4e:8f:30:
                    c9:25:d8:21:98:10:cf:ee:b1:9b:d6:92:be:94:c5:
                    28:08:36:e0:e1:cd:1e:79:2f:b3:3d:be:b5:28:f7:
                    1d:a4:c1:c6:85:a1:7a:d0:ab:99:eb:c2:a2:70:47:
                    1c:48:df:b1:f8:30:77:28:21:2b:57:5f:2a:bb:6e:
                    b5:e0:b7:65:b8:c9:70:62:34:99:cd:6b:c4:36:15:
                    40:1d:93:f6:dd:85:33:22:59:51:f7:3e:bf:b1:ee:
                    49:c2:87:4d:e7:57:d2:41:31:f8:70:0d:b9:1c:8b:
                    2d:4f:fd:77:ca:fd:88:0b:2e:6e:af:55:0b:9a:65:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2A:A3:FF:83:72:4C:38:74:D4:10:32:91:28:B0:74:FE:24:65:A9
            X509v3 Authority Key Identifier:
                keyid:6C:3C:02:D3:BC:B3:9D:B8:66:B0:05:22:F5:8C:95:D7:D7:7C:AE:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C3C02D3BCB39DB866B00522F58C95D7D77CAE19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/34352e3136342e33362e302f32322d3234203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:38:24:6c:dc:ac:a9:6c:0d:0d:cd:6b:df:77:8e:fd:ea:c4:
         d9:ef:cd:ed:1e:3d:fb:94:8e:0d:ae:27:cb:9c:44:d8:5e:34:
         3d:15:7b:c1:65:4d:ac:64:8e:70:91:12:62:9e:c0:61:2b:a7:
         7e:37:cb:7c:94:fc:9b:b7:39:b8:2b:66:2e:bd:f7:8c:61:96:
         fe:59:9d:81:56:a4:f0:05:a8:3a:f8:97:94:03:7d:f3:e0:74:
         ba:d0:32:26:7b:6d:fc:8d:79:62:51:4c:1f:a2:f1:5c:d1:45:
         0a:96:f7:49:2f:16:9d:b8:7c:e0:03:36:ea:e8:33:5a:6d:2a:
         59:3c:d9:6f:1c:b2:fd:f9:00:e4:3e:7a:3f:d6:31:10:b9:ac:
         7d:a6:65:71:42:37:1c:5e:0d:f0:b8:f7:3b:76:da:09:9f:e8:
         fc:48:02:7b:eb:c1:c1:48:33:00:c2:a4:de:f7:7d:7f:28:15:
         98:d9:2d:d7:0c:23:d0:92:ae:85:04:04:05:4b:41:29:07:e6:
         7e:e2:2a:be:4e:67:d7:59:70:12:16:5b:36:3c:10:9d:07:16:
         10:05:78:17:cf:8e:3f:2d:7f:a9:c6:1e:58:1a:6c:ad:64:06:
         e9:4b:0e:43:ce:d8:bb:ee:a6:d0:3a:81:53:4e:d5:54:74:34:
         7c:bd:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 10:54:19 2024 by rpki-client on console-ams.rpki-client.org