Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa
File:                     34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa (raw, json)
Hash identifier:          9pyPZV2KLyA4f5bwf59DRPs8rwBDy1gxqET8g0l61sI=
Subject key identifier:   D2:AE:5A:15:79:51:23:49:D2:1F:9C:60:9B:F5:E1:EC:3D:C8:36:44
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       03A42F11270594B2D8F8836EFDA0D0C764AE4301
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:40 +0000
ROA not before:           Thu 04 Apr 2024 02:56:40 +0000
ROA not after:            Thu 03 Apr 2025 03:01:40 +0000
asID:                     269002
IP address blocks:        45.176.162.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a4:2f:11:27:05:94:b2:d8:f8:83:6e:fd:a0:d0:c7:64:ae:43:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:40 2024 GMT
            Not After : Apr  3 03:01:40 2025 GMT
        Subject: CN=D2AE5A1579512349D21F9C609BF5E1EC3DC83644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:dc:26:69:56:42:e6:7b:16:da:00:dd:d8:
                    5f:74:e3:e1:7b:b2:6e:07:60:63:19:f4:23:b1:c2:
                    af:af:08:63:9f:0b:cc:71:a6:17:9c:20:e2:e8:ae:
                    f9:21:25:a3:73:57:50:7b:07:5b:d7:04:e6:71:5e:
                    a2:b0:c8:a3:22:03:81:b6:6d:dc:1d:59:d0:b2:eb:
                    0e:6d:91:f3:77:7e:6f:e8:4c:38:ce:19:cc:bd:59:
                    12:3a:66:dd:0a:60:61:44:7c:2f:14:ca:c1:79:5b:
                    28:eb:1d:aa:65:4d:f2:2a:ce:2b:7d:7a:f4:42:19:
                    7d:84:2f:47:f7:e7:5c:16:2c:ac:ff:d9:53:67:97:
                    ca:98:d6:2f:57:83:0d:a2:aa:57:4d:17:d7:78:02:
                    34:50:db:de:36:0b:ea:52:aa:90:b6:ca:97:33:04:
                    f6:a7:24:b4:3b:42:c3:67:8e:f1:32:12:a8:2b:c9:
                    5c:a1:40:1d:f0:70:e8:1c:b7:d9:bf:00:62:e5:25:
                    49:dd:b2:5d:20:72:ca:ac:a2:f2:d8:50:3f:4b:48:
                    85:ec:7c:62:e4:c9:d9:48:9e:7c:77:92:19:a0:d0:
                    db:eb:36:4d:b2:5c:6e:3f:4b:0b:c4:14:de:87:4c:
                    c5:29:1e:ff:9c:2b:ad:fa:d3:3b:d2:7a:6d:50:ed:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AE:5A:15:79:51:23:49:D2:1F:9C:60:9B:F5:E1:EC:3D:C8:36:44
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32332d3233203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:b9:6f:25:a2:bb:f4:db:c1:96:14:2d:cd:b5:cb:47:4f:
         b8:87:66:9a:88:46:ef:30:b2:33:e7:dd:8a:31:d9:f7:09:fe:
         bc:0a:07:21:50:b2:c7:10:55:1a:6a:30:fc:a7:28:c9:77:70:
         a9:13:30:86:a4:dc:51:bf:27:47:c0:77:9e:10:73:53:33:63:
         4d:d3:4f:9b:95:7c:20:64:ce:8b:ab:6e:9b:50:1f:ca:0e:1f:
         47:f9:fc:00:2d:29:42:bf:76:1e:8f:02:e0:29:74:0c:d5:11:
         94:32:de:df:ae:40:fe:57:cf:7d:4b:8a:3a:f6:97:3e:f1:83:
         c3:ad:6c:65:ca:9f:12:6c:ba:04:4c:4c:11:0d:85:16:70:72:
         a4:df:0a:cf:a1:f7:2a:e2:78:fe:da:9b:fd:11:f9:8f:1d:c7:
         ea:d4:bc:f8:d8:ab:10:72:e3:19:fc:72:79:f7:e0:8c:74:c5:
         9a:b0:8e:46:06:57:e6:39:c2:bd:6b:b6:cc:c5:22:15:6d:3c:
         11:ab:03:52:95:6b:4c:d3:0c:1e:ae:c5:55:4c:bf:99:4f:50:
         f0:c6:9b:73:50:8c:df:91:4a:7a:85:19:d9:6a:e2:2f:eb:8f:
         5a:0e:cd:d8:a9:d3:d9:f8:dd:42:4c:29:12:37:ef:c3:59:bd:
         7b:44:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org