Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
File:                     34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier:          H0K8vofakj4HbyswqN4TsMz6CsVVnDTxVD+R8LFE44w=
Subject key identifier:   EA:21:68:4B:00:A7:A8:0D:49:4B:59:BF:04:EB:8D:89:2A:CA:2B:58
Certificate issuer:       /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial:       642E43A17836CE6E01FA8215CC5B5C19D0909721
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa
Signing time:             Thu 04 Apr 2024 07:56:16 +0000
ROA not before:           Thu 04 Apr 2024 07:51:16 +0000
ROA not after:            Thu 03 Apr 2025 07:56:16 +0000
asID:                     268729
IP address blocks:        45.171.248.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2e:43:a1:78:36:ce:6e:01:fa:82:15:cc:5b:5c:19:d0:90:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
        Validity
            Not Before: Apr  4 07:51:16 2024 GMT
            Not After : Apr  3 07:56:16 2025 GMT
        Subject: CN=EA21684B00A7A80D494B59BF04EB8D892ACA2B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:be:bc:53:71:af:ef:93:97:47:e5:b9:04:
                    26:29:68:97:f2:64:0e:8d:ca:5d:2b:58:00:98:55:
                    c2:15:ae:31:16:ce:03:7e:d9:73:2f:3e:96:da:a2:
                    a6:c4:d6:c7:b6:fe:d2:67:f0:c6:e8:d6:41:9c:d6:
                    4d:f5:52:f4:30:9d:b3:ad:b7:db:c0:fb:2d:ee:aa:
                    d6:cd:06:3c:22:d6:5b:6f:fa:7e:59:74:a8:70:7f:
                    ba:b8:73:b1:80:13:da:c7:c2:9b:a7:10:b9:67:d5:
                    16:bb:2e:02:08:4e:07:3e:40:55:43:2f:cd:ad:69:
                    95:e5:b5:ea:af:af:e4:cc:2f:71:61:73:ce:b6:cf:
                    ee:4d:21:86:6d:ea:7f:d1:19:6d:bb:7f:3a:eb:4c:
                    65:2a:0f:8b:39:74:79:5c:23:b0:7a:ed:d8:38:5a:
                    56:77:1c:2d:97:b0:e5:05:49:cd:e4:d1:57:5c:65:
                    d0:08:36:e5:d9:81:d9:b2:58:e1:a3:1c:f6:65:da:
                    9c:66:21:b8:99:67:99:26:4d:db:46:73:4e:49:2f:
                    96:fe:eb:e3:b6:a4:40:57:4b:21:24:7d:6c:a0:c0:
                    35:d9:7f:85:fc:07:03:32:bd:44:0c:b9:5a:ce:d4:
                    87:e2:6b:6c:28:b1:c1:ca:e6:cb:1e:43:fa:04:6a:
                    15:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:21:68:4B:00:A7:A8:0D:49:4B:59:BF:04:EB:8D:89:2A:CA:2B:58
            X509v3 Authority Key Identifier:
                keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3234382e302f32342d3234203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:82:15:78:ed:e2:c1:3c:db:24:74:6e:28:85:91:e1:43:
         c5:3e:82:e3:5c:c7:49:0f:a2:3f:07:27:56:f4:62:b3:09:05:
         c0:ca:7b:97:d8:55:38:97:77:26:46:b3:fa:a0:12:5b:1f:35:
         46:a4:45:4e:4f:ec:44:ee:9c:65:55:dd:6d:be:ee:cb:6b:93:
         24:31:54:f9:fa:f7:30:55:33:a6:23:85:44:63:28:90:03:a1:
         ff:9c:d8:74:e7:4c:b5:76:d2:92:d2:a0:81:3f:52:3e:0a:83:
         aa:56:0e:fa:41:63:95:5d:e5:f8:ce:6f:d8:7f:e7:ea:d6:93:
         30:e8:38:22:1f:af:97:03:1a:85:93:a5:f4:a7:0d:a9:d9:e4:
         da:75:b2:8f:b7:6c:be:29:06:9c:95:a1:02:ac:29:cc:08:ef:
         3b:8f:7f:1a:00:8b:40:05:08:ce:fb:d1:d1:b3:78:e3:94:e3:
         c7:94:1e:1c:62:55:02:af:a9:c5:4d:45:a0:e7:46:d0:d0:92:
         f5:ba:18:01:5e:5e:86:71:40:9c:e8:a9:7c:5e:ae:9c:e1:5a:
         b7:e3:09:8a:2d:84:12:17:87:1e:54:59:b4:a2:26:b8:3a:d3:
         19:5b:58:a0:6f:b0:de:be:02:3c:43:da:dd:53:93:03:71:c8:
         6c:60:99:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 15:20:14 2024 by rpki-client on console-ams.rpki-client.org