Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
File:                     34352e3233342e34302e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier:          JHFfSLJ109DuQEl/v8+2rvTo3ssFqKlpfvxW9Gy7QtU=
Subject key identifier:   64:13:84:F7:13:CC:F4:6D:41:B1:BD:8A:FE:C6:AA:66:66:D8:43:1E
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       421A8F25D83627CC46A07992E765E76F3EBB4731
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
Signing time:             Tue 23 Jul 2024 11:38:43 +0000
ROA not before:           Tue 23 Jul 2024 11:33:43 +0000
ROA not after:            Tue 22 Jul 2025 11:38:43 +0000
asID:                     28669
IP address blocks:        45.234.40.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1a:8f:25:d8:36:27:cc:46:a0:79:92:e7:65:e7:6f:3e:bb:47:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Jul 23 11:33:43 2024 GMT
            Not After : Jul 22 11:38:43 2025 GMT
        Subject: CN=641384F713CCF46D41B1BD8AFEC6AA6666D8431E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:81:99:b3:68:f8:1e:81:61:d7:59:a5:f1:
                    78:73:e7:09:c1:df:69:cb:e8:d7:8c:db:fd:0f:fb:
                    00:98:bb:38:37:2a:d3:66:61:5d:d4:ef:69:11:e1:
                    51:56:28:6f:32:67:a0:b8:1a:99:a8:5f:4d:e3:fd:
                    d8:b3:5d:19:28:cb:44:b0:ab:2f:4d:0e:06:32:67:
                    04:28:9d:12:66:d3:ae:99:e0:8a:e1:a0:81:0b:32:
                    db:e2:bd:b7:ac:ed:22:82:53:00:bc:2a:b5:6d:8d:
                    8a:9b:8a:be:8c:09:bb:01:71:eb:ad:a8:e8:ec:61:
                    06:7b:0b:85:55:6b:b3:c6:38:31:b7:1d:6b:7d:2d:
                    2f:08:1a:db:b2:08:84:c6:b5:bb:a0:62:8f:93:f8:
                    eb:ef:9f:bd:75:d2:a3:66:ff:39:7c:2e:f4:fd:36:
                    06:01:2e:8d:64:83:26:06:e8:9c:f2:d2:a0:28:e4:
                    6a:03:c6:92:b4:62:5f:e0:b2:4a:0d:30:0e:a3:d7:
                    38:b4:7e:db:78:65:8b:88:f2:b9:8c:d5:98:7b:c4:
                    11:1a:55:be:f2:74:08:15:06:7c:6f:ae:5a:5d:dd:
                    8c:a9:37:54:7c:ee:ed:65:99:15:28:e7:91:53:52:
                    9b:d4:de:11:8c:51:a0:cd:2d:0b:1a:b8:1f:83:66:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:13:84:F7:13:CC:F4:6D:41:B1:BD:8A:FE:C6:AA:66:66:D8:43:1E
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3233342e34302e302f32322d3234203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:6d:5c:d7:d9:0e:06:99:45:42:e0:76:23:3d:0c:8b:1d:
         0e:a1:f1:b3:ab:e3:c0:92:8f:52:02:1a:6b:b3:9f:1e:04:6e:
         95:c3:7c:df:b7:ce:2b:0b:34:6a:e7:bf:7e:20:a2:c9:a8:2c:
         f8:58:66:20:c0:a6:a4:97:af:6c:42:44:7f:08:51:87:a2:46:
         7f:e3:2f:36:67:46:59:1d:96:78:67:e2:fc:81:0e:21:2b:6d:
         72:3f:b4:f7:6a:ee:c8:7c:28:86:a4:8d:ed:f5:1a:fe:34:a8:
         ea:0b:39:a7:6d:40:4e:68:b9:5c:e4:87:29:65:3a:ba:8e:7e:
         44:4b:c9:49:72:c2:78:7f:96:27:77:75:1b:a0:1d:08:67:e6:
         27:c4:1b:cc:f3:ae:35:6a:4b:37:05:95:72:86:41:61:8e:65:
         65:fc:ce:2e:70:53:12:c6:93:68:4e:36:85:a5:6c:db:5c:2a:
         14:37:f6:72:c6:26:73:59:26:a7:87:98:b1:6f:83:ff:ef:d0:
         21:49:b8:d4:d5:5d:f7:6f:48:a7:bb:cd:24:2f:05:c3:99:69:
         7b:88:8c:c5:0a:f1:f4:b0:41:ba:f8:76:3b:d3:58:59:61:1f:
         dd:e0:a4:b1:00:5e:1d:03:97:bd:2f:d1:b7:8e:59:5d:4b:99:
         92:cc:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org