Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          MBzdljlTckExyIUkgGbRvX4gLagY8C334IG30PZMI1Q=
Subject key identifier:   E6:BD:B2:72:AF:58:8D:5C:05:B2:13:0A:A5:22:DB:69:FB:5B:81:FB
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       2D4A41874FE33E491F9329B7EB1465D98E958163
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:43 +0000
ROA not before:           Thu 04 Apr 2024 02:56:43 +0000
ROA not after:            Thu 03 Apr 2025 03:01:43 +0000
asID:                     269002
IP address blocks:        45.176.160.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4a:41:87:4f:e3:3e:49:1f:93:29:b7:eb:14:65:d9:8e:95:81:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:43 2024 GMT
            Not After : Apr  3 03:01:43 2025 GMT
        Subject: CN=E6BDB272AF588D5C05B2130AA522DB69FB5B81FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:4f:1e:d7:75:80:2c:5f:6a:5f:f7:67:da:
                    7c:c0:84:be:20:ac:73:a2:3f:1f:93:3b:6a:de:16:
                    d7:00:5c:fe:2a:b3:b4:bd:f1:98:11:ce:a7:a5:fa:
                    fb:d0:9f:79:4f:f1:b9:b1:89:b0:38:0b:7b:8e:c0:
                    01:81:8b:53:dc:7a:d3:53:c1:e5:e1:6d:9e:a6:0c:
                    f1:83:a5:01:32:fa:87:bc:70:b1:e6:6e:95:b2:8a:
                    ea:8f:df:a2:53:97:1e:0d:43:8c:4c:78:fc:2b:63:
                    30:c8:3e:0c:48:8e:55:1e:25:4c:41:b8:03:27:66:
                    54:ce:ff:81:28:9f:0a:19:66:d1:e8:1c:45:b6:ab:
                    d0:1a:ea:c9:6f:45:44:97:50:52:a5:83:e0:3e:b5:
                    d3:e9:86:05:25:07:fb:2b:a6:e2:84:8a:48:ab:64:
                    ef:cd:dd:1d:65:5e:a8:32:d6:5f:33:10:08:21:7a:
                    4d:f8:e7:a4:fb:a0:68:6f:ad:b2:16:0d:19:1a:54:
                    9e:c2:d6:09:db:4d:18:16:61:06:28:a2:c9:a5:91:
                    7c:3c:cb:ba:a9:a5:0c:68:a4:99:92:3a:9a:e5:f4:
                    b5:1e:68:39:8d:02:72:b8:33:4b:d7:e2:ce:aa:18:
                    f7:c5:f6:8c:46:46:b8:ac:55:35:41:01:46:5b:d9:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BD:B2:72:AF:58:8D:5C:05:B2:13:0A:A5:22:DB:69:FB:5B:81:FB
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136302e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:28:b5:bd:96:64:3a:3e:99:8b:70:18:a5:76:8b:c4:2b:f8:
         1a:9e:22:71:9d:48:26:de:37:03:46:bf:ef:0b:31:6c:85:43:
         cf:f3:d2:1c:bc:a3:25:50:24:ea:42:ce:c6:c3:0a:8c:d5:a0:
         16:55:dc:11:18:94:11:5c:52:95:5e:56:80:71:d8:22:7c:10:
         9f:83:1c:bb:f5:77:9b:7e:a4:fc:5c:07:14:93:2e:4c:89:b3:
         77:69:e5:1b:e5:c5:b2:13:f8:50:d3:51:1d:84:41:29:b0:b1:
         46:61:eb:ea:3e:5d:ca:b8:3e:73:43:f9:37:b3:91:74:7d:b8:
         4c:0a:c0:7b:e2:ff:8d:85:2a:c8:07:02:5f:54:d5:93:68:47:
         1a:28:4c:4a:5d:d1:cf:1b:83:85:d5:69:0a:25:42:0c:48:42:
         99:98:ed:4f:b4:e9:1e:f1:c1:57:0c:8a:42:38:8e:46:e3:45:
         09:52:2e:53:be:62:c6:0c:4e:3c:0e:a8:fa:27:71:a6:71:bc:
         8d:ca:4d:ac:9e:0b:df:c0:6a:b7:3c:e9:16:e6:e7:90:3f:ad:
         bb:ca:85:a4:f5:88:0e:57:92:98:a6:07:76:f8:da:2e:ec:b7:
         8a:d0:14:00:5e:00:a1:8f:13:99:c8:ba:cd:9b:32:cf:48:c3:
         0a:ba:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org