Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139372e302f32342d3234203d3e20323637393838.roa
File:                     34352e3136362e3139372e302f32342d3234203d3e20323637393838.roa (raw, json)
Hash identifier:          +jlogOPC1nkqZvTX92ab0H0jQujosg+qoyh8FXdPfWo=
Subject key identifier:   B8:77:D8:5C:D9:AC:3D:5A:E1:81:E2:79:A4:DB:D9:3C:1A:45:E7:D4
Certificate issuer:       /CN=4F65CBA63267128AD0A276268D43673E12C2C422
Certificate serial:       592F0B9A2E4AEEDDEAF92C1C651212A89BDCDF12
Authority key identifier: 4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139372e302f32342d3234203d3e20323637393838.roa
Signing time:             Thu 04 Apr 2024 18:24:34 +0000
ROA not before:           Thu 04 Apr 2024 18:19:34 +0000
ROA not after:            Thu 03 Apr 2025 18:24:34 +0000
asID:                     267988
IP address blocks:        45.166.197.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2f:0b:9a:2e:4a:ee:dd:ea:f9:2c:1c:65:12:12:a8:9b:dc:df:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65CBA63267128AD0A276268D43673E12C2C422
        Validity
            Not Before: Apr  4 18:19:34 2024 GMT
            Not After : Apr  3 18:24:34 2025 GMT
        Subject: CN=B877D85CD9AC3D5AE181E279A4DBD93C1A45E7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:de:f0:81:d0:c1:15:b9:bd:bc:a1:8d:3f:
                    23:b4:e0:6e:9e:08:75:0e:13:cf:84:f0:9e:a1:da:
                    1a:46:89:3a:02:b5:12:9a:e4:26:c7:61:e6:a4:75:
                    e9:3a:dd:0b:c9:55:d8:08:db:49:61:f7:67:18:50:
                    6e:b1:42:46:40:05:37:64:b9:36:ea:de:14:40:cf:
                    4e:69:6e:99:a0:b8:d5:79:27:f4:5d:93:8a:85:df:
                    4b:9c:8b:fe:24:cd:e7:dc:5a:45:7e:c2:7c:f6:bf:
                    5f:43:11:63:30:eb:a3:44:84:df:37:b6:6c:a2:86:
                    07:25:cc:ea:c3:33:b7:2b:4e:27:39:c9:e5:7a:31:
                    be:2b:f4:f3:e3:3c:df:63:dc:d4:1e:71:81:ca:aa:
                    0d:96:1d:84:85:df:4b:ed:13:87:0d:44:cd:1f:66:
                    95:91:20:1a:4a:d5:df:8e:82:0a:93:a9:eb:94:6b:
                    35:04:ea:2d:1b:96:39:04:32:eb:a8:b0:7d:8c:05:
                    a3:d3:9e:2f:59:c0:ba:db:ed:88:59:a0:eb:23:1c:
                    31:e8:b5:34:ed:55:0b:ef:04:79:31:51:20:4b:32:
                    1a:1c:9d:6b:d4:95:af:02:41:d9:dd:e0:4f:77:47:
                    f5:c0:55:ae:24:70:19:b1:36:19:7f:d9:51:49:36:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:77:D8:5C:D9:AC:3D:5A:E1:81:E2:79:A4:DB:D9:3C:1A:45:E7:D4
            X509v3 Authority Key Identifier:
                keyid:4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/4F65CBA63267128AD0A276268D43673E12C2C422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139372e302f32342d3234203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f2:dd:e6:d6:aa:60:0a:97:23:48:25:28:44:73:68:83:0d:
         43:92:cc:63:fe:8a:26:06:f4:cc:a7:33:b9:23:c4:f3:a1:e3:
         70:28:88:fb:5b:d4:96:48:31:d3:43:40:9b:fa:fe:6e:cc:e6:
         42:fd:1f:0e:b9:ec:d9:bd:2c:e3:08:75:8b:3d:e7:ae:84:8a:
         e4:6e:71:b3:ed:3f:06:0d:fd:95:04:3d:41:0e:72:b1:da:ff:
         da:02:79:cb:d6:ce:09:d9:ed:1b:15:83:7d:69:68:80:16:7a:
         d9:6a:a3:40:b0:af:a6:6a:83:77:6b:c0:5e:4a:50:1e:b6:a7:
         6c:2d:80:bb:e6:76:f8:b1:96:64:cd:24:f1:ba:7a:2f:be:fd:
         3e:15:6c:d2:03:84:46:b6:32:fe:d5:90:51:3c:16:5e:54:8c:
         33:9f:3f:08:6f:68:22:2a:db:47:7e:6e:f8:0f:70:d0:e5:db:
         54:13:e9:74:48:f4:f1:21:1d:36:42:1d:c5:5a:99:4b:1b:27:
         aa:56:ce:aa:06:0c:f8:79:37:84:c1:1c:cb:1c:77:36:aa:43:
         1a:af:dd:84:1c:d7:19:ef:09:89:d7:25:81:9a:8c:56:81:f1:
         dc:97:8a:84:b7:ee:d3:ba:82:dc:cf:88:04:6e:8b:71:23:f2:
         cc:b1:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 05:42:35 2024 by rpki-client on console-ams.rpki-client.org