Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32332d3233203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32332d3233203d3e20323638373239.roa (raw, json)
Hash identifier:          bLN4KbL37H34vIKAxo1sASoHJgzII9SkNVL0J1pdilA=
Subject key identifier:   B9:B8:35:D4:55:27:75:85:8D:CC:DF:12:85:D5:7C:F4:57:ED:DC:AC
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       0EA6FAE205066705CD7285DDDE261B03B1C06F8E
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32332d3233203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:18 +0000
ROA not before:           Thu 04 Apr 2024 07:51:18 +0000
ROA not after:            Thu 03 Apr 2025 07:56:18 +0000
asID:                     268729
IP address blocks:        45.171.248.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a6:fa:e2:05:06:67:05:cd:72:85:dd:de:26:1b:03:b1:c0:6f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:18 2024 GMT
            Not After : Apr  3 07:56:18 2025 GMT
        Subject: CN=B9B835D4552775858DCCDF1285D57CF457EDDCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:c4:ee:2a:8e:99:5a:cd:f4:0c:54:71:24:
                    b4:83:a4:3e:5e:b8:02:1a:e3:dc:8e:40:27:9c:1b:
                    00:1a:67:4e:b6:4f:66:06:81:e3:78:7a:db:2f:d7:
                    67:c7:74:4c:bb:86:40:e0:93:54:41:a8:42:91:7a:
                    98:72:d0:32:ee:d7:49:cb:42:ea:df:ff:18:f8:5d:
                    a0:a9:e9:02:b2:d6:17:19:22:1a:4d:64:f4:5e:b2:
                    57:53:43:34:f9:e8:11:5a:d4:e2:5e:fe:5f:c2:ef:
                    ff:df:0a:35:f6:d1:a0:05:15:8e:61:01:dc:04:89:
                    e5:2b:fe:1c:14:d8:03:01:76:69:3c:40:cc:fc:09:
                    cf:9f:f8:67:ef:41:50:5f:4d:52:d9:09:1b:2a:cd:
                    82:f3:12:ca:76:06:a1:46:48:b8:83:c0:d9:23:35:
                    5d:68:94:f3:66:d9:86:62:8b:26:f5:7f:86:32:85:
                    c2:b2:4e:b6:25:e9:a7:68:6a:53:7d:6e:92:f3:15:
                    2b:a9:cc:57:53:06:2d:7a:db:e9:35:50:2a:9b:2a:
                    dc:cf:f7:5e:55:66:a5:cf:78:5e:58:48:15:44:80:
                    15:4a:81:63:60:5e:e0:c4:d3:df:a4:9a:3b:ea:c3:
                    25:06:e1:64:52:c2:fd:33:eb:f6:ef:3a:b0:6b:79:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B8:35:D4:55:27:75:85:8D:CC:DF:12:85:D5:7C:F4:57:ED:DC:AC
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32332d3233203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:cd:be:1d:f8:98:50:5f:c2:fc:21:4e:7d:ad:23:4b:92:a9:
         02:f3:3a:be:25:39:31:25:14:59:b2:19:08:1b:da:02:f9:67:
         e5:26:eb:10:46:09:66:42:51:d5:12:ad:1d:4b:98:c5:63:05:
         34:a6:ab:d7:e0:a7:33:93:82:d9:1f:be:e4:8d:8e:b2:de:c9:
         00:7a:c3:ae:37:7a:95:42:c0:a3:3c:84:74:b7:38:17:29:3b:
         d2:bc:7c:47:14:40:75:4c:6b:2d:7a:7b:cf:55:da:b4:03:60:
         a4:f9:b0:cd:82:4a:89:44:38:b1:9f:ff:db:e7:ef:da:6f:55:
         6f:98:cf:05:bd:72:18:79:eb:4d:b5:d5:d4:55:25:c1:de:fd:
         9d:0d:49:7b:87:3d:65:c3:be:3e:5a:ef:79:d9:ae:04:cd:fe:
         21:b5:2a:62:05:ca:c9:a4:85:05:3d:b0:c4:d9:44:4a:b4:4e:
         30:ed:d9:64:f0:24:4b:61:34:75:2f:22:cb:65:34:79:4b:dd:
         8f:ff:77:a9:a3:2a:24:42:3c:42:2b:5c:9e:38:cf:e0:6e:8e:
         a7:dd:3a:46:36:ae:72:e2:4f:bd:25:06:d3:f5:85:cf:57:1d:
         33:76:a3:68:b1:91:8d:43:7a:93:bf:06:42:af:88:c6:ad:9d:
         7b:bb:8a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org