Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa
File:                     34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa (raw, json)
Hash identifier:          JX0TLBc28sNNkEH2dt45Dquzg8SUOq26h0YB8vHgZKw=
Subject key identifier:   C1:03:9A:E2:F7:35:BE:9E:5D:29:70:67:BA:7C:97:9B:81:5C:54:04
Certificate issuer:       /CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
Certificate serial:       62FDFA10C9649DE7FEA5B0F13A52DBED5B641CE5
Authority key identifier: C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa
Signing time:             Thu 04 Apr 2024 03:01:37 +0000
ROA not before:           Thu 04 Apr 2024 02:56:37 +0000
ROA not after:            Thu 03 Apr 2025 03:01:37 +0000
asID:                     269002
IP address blocks:        45.176.162.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fd:fa:10:c9:64:9d:e7:fe:a5:b0:f1:3a:52:db:ed:5b:64:1c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5E77EC37A336F071F85565E26744903BB3DEC0D
        Validity
            Not Before: Apr  4 02:56:37 2024 GMT
            Not After : Apr  3 03:01:37 2025 GMT
        Subject: CN=C1039AE2F735BE9E5D297067BA7C979B815C5404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:69:e4:a4:dc:77:73:2d:89:70:cf:82:f1:
                    a3:e2:82:a2:5d:36:c6:32:b7:2b:1e:2c:de:44:55:
                    f8:70:a0:3c:da:3e:cb:6f:09:9f:fd:6d:2d:1a:11:
                    d5:24:1c:ec:50:7b:42:0e:4e:d5:f5:c2:ed:ea:24:
                    a6:e8:ee:9b:5a:07:23:a9:d2:c6:00:dc:d0:0d:b0:
                    d0:c3:37:f2:8a:19:d0:89:bb:bc:aa:a2:bd:0f:95:
                    04:2f:c9:ef:0f:db:25:a5:7c:5f:e1:d5:2c:af:f2:
                    c5:1e:3f:4d:4b:d4:09:40:df:69:43:11:68:85:74:
                    40:87:a0:4b:a0:a1:95:84:dd:76:e3:7b:8e:4a:e8:
                    48:48:31:e2:15:1b:50:d2:74:7b:3f:54:da:5e:4b:
                    2b:9c:d6:84:0a:49:a4:80:2d:9e:ff:4a:78:6d:71:
                    a0:0e:cc:12:aa:7e:b4:8a:10:a5:2a:c0:b4:32:b6:
                    9b:2e:dc:dd:c6:13:68:5c:f7:d7:87:48:99:4e:6a:
                    37:d1:ae:0c:af:72:b1:9b:68:65:c1:cb:c0:11:fa:
                    10:29:45:68:51:8e:c3:f0:a9:b0:61:d1:86:ad:5b:
                    7b:db:96:50:b5:32:96:e7:be:c5:29:a6:47:7b:99:
                    b1:9a:70:9b:53:8d:4a:0d:b1:54:4c:de:ae:00:6d:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:03:9A:E2:F7:35:BE:9E:5D:29:70:67:BA:7C:97:9B:81:5C:54:04
            X509v3 Authority Key Identifier:
                keyid:C5:E7:7E:C3:7A:33:6F:07:1F:85:56:5E:26:74:49:03:BB:3D:EC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5E77EC37A336F071F85565E26744903BB3DEC0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7kALtCWdZU73UHdByCqL1CmAnQkbs6Pbqd9VDh2xuNmM/1/34352e3137362e3136322e302f32342d3234203d3e20323639303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ec:07:df:8f:08:72:e8:9f:27:db:f0:fe:04:21:87:9f:d7:
         82:4b:ca:1e:20:fe:7d:1c:e5:d3:66:57:60:77:76:75:ba:d5:
         11:9c:e8:a8:56:6e:fc:c6:f9:91:f0:82:a3:5c:bf:c6:8b:0a:
         85:4e:65:a0:dd:6c:15:dd:d3:7f:39:19:2c:d5:96:09:19:6a:
         d2:bb:12:1f:04:5d:dd:75:2b:35:28:97:84:a3:5e:5d:11:5b:
         6b:dd:eb:03:ba:cc:03:03:06:1d:69:cc:83:34:aa:80:12:3e:
         01:40:e2:5c:f5:10:d9:bc:60:56:7b:07:99:63:9c:4f:b3:00:
         6c:d5:6f:6e:8c:a7:4a:17:c1:67:39:4f:38:08:af:2a:7f:f7:
         99:5b:da:5b:8b:09:fe:25:cc:6c:7a:1b:fa:f3:90:79:2a:48:
         8c:4c:d7:db:6d:cb:b5:9b:92:cc:45:fd:f3:46:aa:35:9e:1f:
         c2:cd:13:04:e1:c4:4a:e6:2b:04:8d:cc:b3:7f:e4:27:2a:9a:
         b6:c6:b9:69:d0:51:ef:a7:71:cc:8c:5f:d1:2d:16:c0:27:1e:
         1d:da:1e:12:ef:f4:db:9d:d6:ff:78:18:b6:38:d3:20:87:cc:
         24:61:81:1b:47:ac:52:cd:17:dd:59:4a:af:33:94:77:2d:78:
         ce:d3:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 18:15:48 2024 by rpki-client on console-fra.rpki-client.org