Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32342d3234203d3e20323639323337.roa
File:                     34352e3138322e3230342e302f32342d3234203d3e20323639323337.roa (raw, json)
Hash identifier:          kUBi3hfKIuzO9PrK+31ye0lZjxc7TUrNmG/4ldcfNnE=
Subject key identifier:   D3:7C:1A:D1:D6:46:00:02:81:C9:C4:69:80:DD:9F:70:91:11:A6:35
Certificate issuer:       /CN=67070564D53ACB6604FA560F1E051D47A5C3F657
Certificate serial:       2894FB4CB43A15388685ECE9A2017AE1D3674A5B
Authority key identifier: 67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32342d3234203d3e20323639323337.roa
Signing time:             Thu 04 Apr 2024 03:11:59 +0000
ROA not before:           Thu 04 Apr 2024 03:06:59 +0000
ROA not after:            Thu 03 Apr 2025 03:11:59 +0000
asID:                     269237
IP address blocks:        45.182.204.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:94:fb:4c:b4:3a:15:38:86:85:ec:e9:a2:01:7a:e1:d3:67:4a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67070564D53ACB6604FA560F1E051D47A5C3F657
        Validity
            Not Before: Apr  4 03:06:59 2024 GMT
            Not After : Apr  3 03:11:59 2025 GMT
        Subject: CN=D37C1AD1D646000281C9C46980DD9F709111A635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:92:69:7b:73:e8:c7:1a:16:3e:a1:9c:c8:72:
                    61:c0:ca:3c:1e:e2:64:63:fd:41:15:75:98:ac:74:
                    a9:33:dd:1b:77:7d:57:d6:94:2b:61:76:7c:a4:e0:
                    7f:94:db:9d:88:b1:ba:4a:97:e9:02:f3:33:8a:e2:
                    84:f3:bd:46:b7:d5:ed:83:af:10:90:db:83:f1:de:
                    c6:97:78:0c:5a:3f:00:b5:b3:84:5e:44:af:a0:fa:
                    3d:c0:c4:89:fd:3b:18:7a:b9:ec:b8:46:2a:b9:8c:
                    4e:ca:f4:0b:c7:3c:d1:aa:3b:e4:d4:e4:d0:5a:97:
                    e2:08:aa:30:8e:ea:eb:66:76:dd:80:27:e8:d2:7d:
                    27:26:a6:02:73:95:fa:80:03:2f:22:bf:1c:4a:67:
                    8f:40:68:38:1f:f5:60:1d:76:11:ad:99:66:3b:8a:
                    54:52:95:ba:67:98:65:63:3a:6a:c2:5a:da:49:54:
                    9b:0f:a8:23:23:e2:99:83:66:c7:a6:90:62:a0:cb:
                    73:e3:c4:14:77:9a:18:e4:36:92:74:78:2f:ba:ed:
                    0b:87:5b:9a:8f:c6:9d:56:94:b4:5e:86:0d:2d:24:
                    e4:d5:dd:79:b0:b4:6f:02:c0:1d:d0:12:0a:77:83:
                    99:fc:8a:80:08:cb:3b:42:7e:12:84:02:d9:c0:09:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7C:1A:D1:D6:46:00:02:81:C9:C4:69:80:DD:9F:70:91:11:A6:35
            X509v3 Authority Key Identifier:
                keyid:67:07:05:64:D5:3A:CB:66:04:FA:56:0F:1E:05:1D:47:A5:C3:F6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/67070564D53ACB6604FA560F1E051D47A5C3F657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67070564D53ACB6604FA560F1E051D47A5C3F657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/1/34352e3138322e3230342e302f32342d3234203d3e20323639323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:d5:7c:d0:69:7d:a6:36:96:7f:cb:67:33:85:12:53:3d:
         68:e2:56:84:a6:86:0c:b3:b9:62:c7:52:6b:1f:ce:8c:b5:c9:
         a2:06:20:19:42:98:10:b5:a9:2a:d1:09:5f:f8:77:ec:43:11:
         cc:6a:8e:69:d3:4a:9c:cf:6b:ed:f1:6f:c6:11:4f:4d:bf:b0:
         76:d3:8f:cd:6e:d2:dd:6c:dc:cb:7c:2e:81:d2:25:52:fc:de:
         7d:94:0a:e5:3d:55:0d:e0:ac:81:4c:10:9a:82:42:4f:c5:50:
         cd:6e:3e:19:9f:4f:06:5c:2a:ab:2f:6d:b2:a6:c4:14:a1:46:
         2f:2b:57:31:e4:79:1e:0f:b5:3c:32:04:e5:59:7f:35:35:cf:
         18:ab:74:f1:4c:5b:1f:b9:78:d5:6c:5f:36:fc:13:48:da:e4:
         9a:3c:52:7f:ec:dc:5b:8d:0d:a4:5d:36:7b:e5:b8:15:a9:79:
         a8:39:29:cc:9c:53:a4:59:3e:1a:25:81:c8:93:ec:aa:54:6a:
         ed:02:b6:07:74:4a:71:54:b0:a7:9b:79:3d:04:de:e3:0d:1d:
         4b:2a:37:69:d1:00:72:51:0d:f7:fd:30:85:1c:27:0b:a1:c3:
         33:aa:0f:61:cf:ef:9e:8e:8b:d5:cd:5d:f1:1a:b6:4d:0b:63:
         1d:83:c6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:55:19 2024 by rpki-client on console-fra.rpki-client.org