Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          FEDT18J2bZKxUTEsEf/q8yacxxKUX8qYSAiUHca4RgI=
Subject key identifier:   43:4D:4B:F5:12:56:96:73:AC:FA:50:8E:A9:1B:41:F1:67:9B:C5:77
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       406AA4CE5DF8F4597607E3EB2030CDF8F24442DA
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:41 +0000
ROA not before:           Thu 04 Apr 2024 02:56:41 +0000
ROA not after:            Thu 03 Apr 2025 03:01:41 +0000
asID:                     269002
IP address blocks:        45.176.161.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6a:a4:ce:5d:f8:f4:59:76:07:e3:eb:20:30:cd:f8:f2:44:42:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:41 2024 GMT
            Not After : Apr  3 03:01:41 2025 GMT
        Subject: CN=434D4BF512569673ACFA508EA91B41F1679BC577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:df:7c:5e:3e:72:bb:9a:8d:8f:87:a2:0d:
                    f2:4e:2b:52:42:eb:40:75:42:06:e1:f1:59:71:26:
                    c4:0d:f2:c3:c8:0b:5d:e3:cc:f7:da:70:33:c3:b5:
                    32:46:db:ac:9c:73:3d:dc:82:37:66:2f:49:5f:a4:
                    90:c7:b8:be:44:b0:5b:28:19:72:cf:88:21:92:50:
                    6c:4f:7e:33:97:85:d3:cb:c4:c8:d3:7c:e0:31:d1:
                    4f:98:a6:a2:19:cf:eb:a4:98:73:79:68:95:88:05:
                    da:dd:ab:b4:bc:e8:02:5c:1d:a4:23:1b:19:4c:9f:
                    13:d7:84:75:57:4d:33:d9:24:f5:69:6f:ee:f5:b9:
                    15:c8:23:b4:6b:00:75:71:79:d1:74:74:2e:55:64:
                    f2:82:95:63:a3:66:0f:3f:85:c4:ef:3c:49:35:b8:
                    ad:df:f8:e2:c2:ec:ef:52:eb:2e:15:2b:c7:89:09:
                    e0:c9:18:16:b5:b9:ef:64:e6:cc:b6:49:aa:f0:a2:
                    78:40:bf:a5:32:eb:8e:66:ed:9e:e7:04:4f:ef:df:
                    26:8e:db:aa:28:ac:7f:32:08:20:68:76:75:be:8b:
                    b0:a3:c1:1e:2d:f1:81:cd:ae:57:a9:fa:fe:48:91:
                    11:d4:05:26:ad:2e:7e:3a:94:09:4b:da:b7:4b:06:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:4B:F5:12:56:96:73:AC:FA:50:8E:A9:1B:41:F1:67:9B:C5:77
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136312e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:54:18:ef:4e:10:8c:d4:77:f6:17:ef:4a:99:07:cf:a4:
         62:53:15:06:19:b8:f9:2e:11:34:06:89:0d:cc:10:e6:c7:19:
         fc:31:bd:fa:a4:a5:8e:6d:2c:80:25:cf:b1:7d:15:95:b2:d2:
         7e:84:15:d0:c5:8d:8d:07:2f:93:17:95:97:ba:32:ab:81:c0:
         02:fb:03:f7:f9:9c:71:02:d0:da:4a:83:5b:f5:5c:22:0b:16:
         a7:4c:54:03:63:d8:b1:65:02:d4:d6:69:b0:0b:b6:2f:9e:5a:
         23:1c:f7:a6:44:fd:bd:5e:b2:a0:f5:9d:45:08:48:c2:93:d4:
         13:7a:05:96:8a:31:6d:45:6f:e8:82:ee:00:05:c1:fe:2d:8b:
         12:e9:7c:02:fb:99:5b:5c:02:ae:c6:13:9c:1f:cd:d2:43:0a:
         e8:cd:33:a5:4b:8d:ec:be:8f:c5:d9:0a:55:06:5c:07:50:07:
         c2:9f:7c:2c:5c:77:9e:6d:d5:78:be:f1:5a:36:0e:f6:4d:20:
         64:93:b5:90:94:84:0c:fd:47:44:ab:0c:75:2e:de:dc:40:b7:
         fd:5c:36:44:5a:d0:b1:f2:13:15:58:cf:30:c6:f3:30:33:8d:
         f5:17:9a:d4:44:11:60:37:4e:a4:69:48:bf:7c:09:c7:9f:b2:
         9c:b8:58:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org