Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa (raw, json)
Hash identifier:          N7rtACPjFY76xeVyUuoNJOD+Qoo9rT1/s2kynEV0WTs=
Subject key identifier:   D1:44:6D:21:0D:09:B4:D8:27:62:D3:B0:EF:3E:B8:28:10:E0:61:B4
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       32F87D294A9EFD5EA4E474BF47D334DF99891179
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        45.181.228.0/22 maxlen: 22

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f8:7d:29:4a:9e:fd:5e:a4:e4:74:bf:47:d3:34:df:99:89:11:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=D1446D210D09B4D82762D3B0EF3EB82810E061B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:8b:30:df:fc:9d:d8:c8:df:1e:b3:fe:5a:
                    95:63:95:08:2f:4c:05:8d:31:4c:72:a9:ad:1c:8f:
                    ba:d0:60:d1:62:d3:04:bb:7b:56:68:83:a1:57:16:
                    92:3f:66:d5:47:a0:d3:d1:4b:e9:71:de:0a:04:71:
                    f5:9d:f9:68:58:a9:83:8b:d6:4a:a6:bf:0d:e3:87:
                    c7:3a:08:71:8f:75:63:d3:50:e5:0e:52:e0:ca:5b:
                    4c:31:fd:d8:5e:0c:7f:d5:6d:07:7c:11:23:29:f0:
                    c3:a1:29:e0:c2:1c:06:49:d2:4c:37:49:6f:2d:67:
                    e2:f4:e2:f8:e5:ff:a0:a1:c5:f0:0e:39:b6:1e:78:
                    01:eb:56:3d:e9:53:6e:92:51:58:6b:95:6c:d1:95:
                    05:cf:4a:31:d0:77:d8:41:00:a0:5c:1e:11:96:8d:
                    a2:fd:3f:1b:06:23:e0:28:cf:7e:dc:af:37:08:e1:
                    09:16:ad:9b:69:3b:95:d1:c3:00:c0:f6:e5:22:85:
                    00:7d:d9:5c:9d:b4:ea:ff:08:b7:62:4e:14:3b:07:
                    e6:ba:ec:40:97:f3:34:38:a0:f7:7d:5e:ab:83:d5:
                    3c:57:c6:0d:9d:15:ab:c4:83:e3:ae:d6:f6:b3:85:
                    ee:5e:e3:a1:5f:9a:b7:4a:11:40:fa:f2:95:07:19:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:44:6D:21:0D:09:B4:D8:27:62:D3:B0:EF:3E:B8:28:10:E0:61:B4
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32322d3232203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:fd:13:64:5e:f7:40:06:82:48:08:d7:55:e2:89:01:cd:
         ed:44:74:b5:bc:6b:0e:77:f6:96:39:e6:53:b0:2f:41:09:92:
         ea:ae:6a:89:54:d4:9f:19:e8:95:cb:13:be:f1:0b:7f:29:08:
         56:07:47:98:4b:62:d4:48:ee:cb:b0:03:1b:30:3f:ae:23:46:
         77:30:13:e2:fb:ef:b5:5b:62:ff:7c:0d:57:12:b3:24:f5:f2:
         f2:de:58:7f:5b:cb:67:8f:67:ee:bf:93:24:c7:94:2f:c3:27:
         01:30:64:1a:21:c1:f7:ea:1d:17:7d:58:2d:66:33:d4:3f:6d:
         39:04:05:22:e3:f0:97:82:2e:8b:a2:ba:1d:48:cb:5e:67:a0:
         81:d0:80:1e:18:be:31:ce:53:84:06:4a:2e:74:ba:f4:09:d9:
         d9:a5:b8:d3:ca:25:a1:e4:28:15:de:ac:43:3e:19:ec:94:bd:
         15:02:d1:15:34:7d:b0:72:e0:fc:4f:a1:ae:2c:32:8a:3e:31:
         29:cf:27:a7:f4:46:50:63:32:44:0b:4c:e4:cc:48:09:dd:db:
         f8:01:9a:0f:b1:8d:cf:8d:52:3f:f6:a0:48:c5:a6:0a:0b:89:
         ad:ca:5a:49:c2:cc:4a:db:4c:13:39:26:07:6c:9e:e2:f8:21:
         42:4f:5d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:44 2024 by rpki-client on console-fra.rpki-client.org