Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa
File:                     34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa (raw, json)
Hash identifier:          8TPsQOVZnuQLjYb8a3sMHthTJPsvC4B7wfOcQLfpCzY=
Subject key identifier:   A7:57:D2:38:8C:8B:BD:04:2D:6B:0B:0F:F4:30:38:9F:F0:CB:CB:04
Certificate issuer:       /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial:       5A5846F32168DA0994517F55BAD45B62A14AA5A5
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa
Signing time:             Fri 20 Sep 2024 18:57:36 +0000
ROA not before:           Fri 20 Sep 2024 18:52:36 +0000
ROA not after:            Fri 19 Sep 2025 18:57:36 +0000
asID:                     268692
IP address blocks:        45.165.208.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:58:46:f3:21:68:da:09:94:51:7f:55:ba:d4:5b:62:a1:4a:a5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
        Validity
            Not Before: Sep 20 18:52:36 2024 GMT
            Not After : Sep 19 18:57:36 2025 GMT
        Subject: CN=A757D2388C8BBD042D6B0B0FF430389FF0CBCB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:99:ee:a5:60:ad:d4:df:91:a3:4a:fa:43:
                    9d:b2:40:76:83:ce:26:5c:bb:ba:a8:9c:dd:78:21:
                    59:15:49:21:52:21:82:02:bb:94:f3:b4:71:43:06:
                    66:47:66:95:68:3c:20:ca:eb:9e:aa:49:75:f6:2f:
                    ab:13:3c:bd:a4:c3:e4:64:b2:42:9b:0a:d3:1f:d3:
                    15:d0:9e:25:09:b6:e5:42:4e:b7:11:fc:85:44:0c:
                    b1:e3:4b:dd:2d:e4:8a:9b:4f:fd:c7:47:cc:48:48:
                    6c:a8:fa:13:2b:82:97:11:c5:35:ec:86:75:77:d4:
                    2e:92:43:6e:b2:1c:91:f9:eb:45:24:9c:a7:4c:0f:
                    08:21:c9:00:cb:a3:3c:b6:96:32:ac:66:17:63:c6:
                    52:fb:7a:98:55:23:04:4d:92:ff:43:26:b2:1b:f9:
                    be:c2:b0:67:26:24:67:22:ea:c4:b5:d6:9b:9e:ca:
                    37:fb:4a:43:17:c4:8f:77:91:c1:68:ac:42:38:02:
                    d0:dd:63:cc:e3:d4:95:f1:45:cc:d9:8d:4b:48:33:
                    1a:60:6a:49:fc:7b:17:08:0a:d2:83:46:40:4d:31:
                    7f:66:33:8b:ad:27:6e:85:84:fe:fb:d2:94:97:d6:
                    7f:d4:86:61:a5:82:ca:28:41:e0:07:29:9b:74:9c:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:57:D2:38:8C:8B:BD:04:2D:6B:0B:0F:F4:30:38:9F:F0:CB:CB:04
            X509v3 Authority Key Identifier:
                keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3230382e302f32342d3234203d3e20323638363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:d6:e4:0e:3c:96:ba:00:88:dd:ae:15:76:66:89:80:3a:
         16:18:db:02:fc:95:69:50:c6:45:a0:d4:c6:a8:1a:be:1b:1b:
         87:90:4b:ab:84:ad:b3:c6:d3:a4:2f:d5:2d:36:8a:c9:bc:da:
         3a:b2:5e:7e:4e:e0:d5:e1:6a:87:b8:37:c0:eb:41:e1:f8:d7:
         4b:a3:f9:16:56:b4:f0:0d:1e:c3:dc:26:c7:66:8c:63:dc:bd:
         72:1e:ab:cc:c0:23:e2:c6:6e:1f:46:50:ea:00:6d:c6:ef:04:
         47:ce:6e:22:cc:b4:e1:11:e1:f5:95:4f:fa:b3:94:ce:1f:10:
         1d:0c:c5:ea:1d:4a:08:b3:1a:07:a2:49:9e:da:a5:8c:7e:29:
         56:a4:ad:0a:70:b1:21:f1:e8:3f:22:41:6a:2e:95:08:17:c7:
         1a:c9:b6:de:67:3f:85:63:28:fd:28:5d:3b:51:98:63:03:1b:
         2d:94:d8:ed:f5:ec:a8:72:4b:97:94:2c:6c:c5:3e:87:d5:18:
         e5:ee:30:d8:3a:4e:99:93:fa:3d:bd:b8:2d:a2:5d:08:d2:60:
         f2:79:a2:a3:9f:c7:08:09:ab:85:e4:fe:0a:71:ab:79:85:5c:
         f1:70:84:95:04:e4:e8:77:b5:fd:d7:b6:92:3f:5e:4d:09:26:
         ac:b8:b8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org