Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
File:                     34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier:          X8L7lfM6kpkVdH22C6/aXE09/ad4pZPb824xbddOj/4=
Subject key identifier:   F3:89:BA:47:68:C8:70:34:9C:34:21:DC:40:25:10:D7:F5:BB:54:4B
Certificate issuer:       /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial:       2E9CB38FF62E990A04033942A81A95C9DCBCEAA9
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa
Signing time:             Tue 25 Jun 2024 12:18:55 +0000
ROA not before:           Tue 25 Jun 2024 12:13:55 +0000
ROA not after:            Tue 24 Jun 2025 12:18:55 +0000
asID:                     262503
IP address blocks:        45.181.230.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9c:b3:8f:f6:2e:99:0a:04:03:39:42:a8:1a:95:c9:dc:bc:ea:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
        Validity
            Not Before: Jun 25 12:13:55 2024 GMT
            Not After : Jun 24 12:18:55 2025 GMT
        Subject: CN=F389BA4768C870349C3421DC402510D7F5BB544B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:cd:c4:a2:69:5c:14:ff:9f:62:08:4d:c6:
                    c7:cb:93:e8:ec:2d:04:b0:e6:a7:80:f1:7e:1e:f3:
                    95:8b:5a:ff:64:9b:98:fc:16:c9:5a:b5:66:58:67:
                    de:8d:e2:d2:00:a1:99:3f:5d:25:40:e5:93:ca:e5:
                    fc:74:67:79:bc:23:7c:bd:de:a0:85:cd:3b:56:e8:
                    a2:5f:06:9d:32:f7:98:84:be:37:27:1a:fb:18:0f:
                    5d:c5:2b:f3:cc:32:96:5a:f0:86:49:19:e2:ee:ce:
                    2f:62:57:2e:cb:44:7e:c4:8f:5d:60:61:cc:50:17:
                    7c:dd:fa:ca:5b:10:17:ed:8e:00:28:10:69:59:2b:
                    d0:51:f5:b0:36:2b:15:e0:f6:b3:c4:db:02:0f:ed:
                    d6:80:ff:e2:db:17:0a:44:91:9b:1a:a2:be:74:41:
                    4c:07:ce:1a:d7:07:d3:16:f5:3f:89:16:d3:f0:ad:
                    dd:5c:12:80:63:00:17:7c:3f:69:a9:9d:1e:03:d7:
                    9e:b0:87:95:a1:8d:0e:21:44:b1:7d:73:5a:e3:07:
                    f0:fc:67:fb:3d:b3:2c:1c:b2:8d:18:f9:05:36:f1:
                    d8:1b:df:0c:39:89:9a:c3:47:2f:5d:ae:30:a7:5d:
                    c9:de:cc:62:ca:f6:7b:05:01:9c:6e:6b:23:e4:9e:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:BA:47:68:C8:70:34:9C:34:21:DC:40:25:10:D7:F5:BB:54:4B
            X509v3 Authority Key Identifier:
                keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3233302e302f32342d3234203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a5:c3:ef:35:dc:6a:a0:fb:4d:0e:08:52:c9:09:9c:45:c1:
         74:b1:bb:85:d8:fa:e1:90:f1:07:43:41:75:e4:30:ed:8f:72:
         ef:f1:c8:bb:f7:0c:68:59:94:96:4b:b4:7b:70:c5:66:f5:01:
         d9:08:a0:0d:51:9d:0e:5d:e8:c6:44:83:90:ae:f9:9c:1f:f1:
         c8:ba:4e:61:ff:fe:10:90:83:f1:5d:8d:a7:3c:f1:47:84:34:
         26:0c:17:1c:58:88:f0:f0:79:3f:00:e9:33:0e:e6:89:de:3d:
         c6:f7:19:59:50:e1:47:fa:87:37:5a:71:15:4f:ef:77:7c:bd:
         9f:39:c2:77:d4:99:c9:c8:fb:da:7c:3b:19:9e:38:8c:4d:df:
         9f:ab:fb:3d:3a:1a:0c:be:7e:50:d8:ae:8e:bb:50:a9:bb:af:
         5f:ea:6e:7b:6d:d1:b9:58:28:8a:5d:07:7d:30:98:ea:3b:4a:
         18:19:a5:34:2a:68:2a:bf:49:bf:05:60:3d:2a:c0:41:3e:b7:
         82:82:3d:e5:5d:72:22:b2:49:40:84:6d:b8:9c:79:17:00:8b:
         74:d7:20:b0:83:e4:bf:c9:f8:2c:ec:4e:f1:b9:51:bb:2c:06:
         1f:98:0a:50:75:f4:f2:ba:c5:00:86:ab:ce:e9:b2:05:41:fb:
         33:d7:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org