Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          WhG4rSQr8dJbALdge6g5lTJkagSnOcMCZzQ3CW45PPQ=
Subject key identifier:   A7:19:26:62:B7:58:E4:08:76:03:F9:48:55:D0:23:49:EA:BA:B0:4F
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       793310D8C5DA3A2AA08BDBBA32AAF58BCEC157BD
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:56 +0000
ROA not before:           Tue 25 Jun 2024 12:13:56 +0000
ROA not after:            Tue 24 Jun 2025 12:18:56 +0000
asID:                     262503
IP address blocks:        45.181.228.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:10:d8:c5:da:3a:2a:a0:8b:db:ba:32:aa:f5:8b:ce:c1:57:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:56 2024 GMT
            Not After : Jun 24 12:18:56 2025 GMT
        Subject: CN=A7192662B758E4087603F94855D02349EABAB04F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:d7:4b:29:57:c3:65:e0:7c:a7:8c:47:ff:
                    da:ed:57:a4:da:8f:ce:c4:a4:07:14:98:d4:61:38:
                    08:0f:08:10:5f:97:0e:b2:df:4a:9d:82:52:de:f5:
                    e6:bb:aa:0a:9d:68:ab:b9:3b:43:58:60:ec:1b:cf:
                    4c:a8:44:14:46:16:ec:98:3c:ca:64:8d:f6:c0:96:
                    ac:ae:5b:a8:a8:3b:36:a7:5a:e1:90:36:c2:71:7a:
                    26:18:a6:8e:17:99:a3:b8:f4:04:50:44:01:de:c5:
                    53:85:b0:b8:fd:cb:e4:7a:46:35:7f:bf:8d:78:85:
                    3b:7d:c6:e4:bb:d9:de:f6:85:e7:e1:86:16:40:8b:
                    75:e2:2c:16:d0:b2:95:71:a9:09:12:e9:53:89:5c:
                    21:84:ff:db:5d:90:50:d1:39:16:e8:a3:17:89:7e:
                    4d:b3:89:9a:3d:56:53:46:11:f4:fc:8a:93:de:94:
                    71:ae:69:76:63:b7:a0:7b:dc:f1:8a:9d:19:31:cd:
                    07:8b:9b:66:b0:4f:98:a5:3a:db:88:e8:30:eb:35:
                    9b:5f:5f:b0:f9:d1:c1:d0:35:f0:35:99:ff:a4:a2:
                    39:7d:15:96:bd:fe:e8:9a:e4:e7:a7:87:c9:69:7b:
                    1e:4c:d5:cb:56:99:45:5f:1f:59:b0:81:4a:cf:5d:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:19:26:62:B7:58:E4:08:76:03:F9:48:55:D0:23:49:EA:BA:B0:4F
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:41:3e:5d:4e:ab:22:00:10:86:e5:42:37:a6:69:c2:14:1b:
         9c:80:16:58:0c:26:66:82:96:d9:6b:96:47:8f:03:28:29:7f:
         85:58:8d:01:46:51:a7:ef:28:4a:48:e6:fb:a4:61:a3:ae:32:
         f1:8f:ed:bd:87:64:5d:38:f0:c7:19:0e:30:72:18:d5:c0:1e:
         72:30:4c:80:bd:34:7f:5e:fe:26:c7:ac:af:97:6c:f8:5f:a4:
         c8:b2:db:e6:f3:15:e8:e9:5d:10:02:36:12:3a:8b:41:80:72:
         ec:ad:2c:9f:35:6a:92:1d:ee:fc:0e:73:1f:6c:04:bb:2e:37:
         00:7b:c2:e6:c8:67:fe:46:fc:53:5d:dc:69:b7:41:b7:9d:fb:
         fc:30:50:13:4d:b0:37:e3:6d:b7:ea:4a:0c:1b:c3:b6:9a:4c:
         9d:f6:a4:42:db:1a:18:13:2d:09:3f:36:3b:b9:7a:59:c0:e2:
         a7:ca:96:f8:14:9f:a9:64:67:f2:ea:bb:14:b8:91:23:a0:6c:
         05:bf:8c:7c:f9:f4:9a:88:82:f2:6a:d0:f8:5d:94:8a:93:e6:
         b7:02:06:85:3d:84:69:01:40:c0:39:aa:be:fb:ca:b2:1a:fa:
         58:f2:4f:c6:d8:00:bc:b7:25:2c:15:62:bd:6c:45:9d:32:85:
         1f:7e:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org