Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa
File:                     34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa (raw, json)
Hash identifier:          KyOp0JN/DkWvdxetpubvTidbAkTCEtPhgkkkaMV/UFg=
Subject key identifier:   AC:0F:77:A2:0F:1C:1A:1B:05:1B:F9:59:4B:1F:65:F1:45:B2:34:45
Certificate issuer:       /CN=4F65CBA63267128AD0A276268D43673E12C2C422
Certificate serial:       1C6D40D8353CB841971736F9751ED1A1C203A0A3
Authority key identifier: 4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa
Signing time:             Thu 04 Apr 2024 18:24:34 +0000
ROA not before:           Thu 04 Apr 2024 18:19:34 +0000
ROA not after:            Thu 03 Apr 2025 18:24:34 +0000
asID:                     267988
IP address blocks:        45.166.199.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6d:40:d8:35:3c:b8:41:97:17:36:f9:75:1e:d1:a1:c2:03:a0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F65CBA63267128AD0A276268D43673E12C2C422
        Validity
            Not Before: Apr  4 18:19:34 2024 GMT
            Not After : Apr  3 18:24:34 2025 GMT
        Subject: CN=AC0F77A20F1C1A1B051BF9594B1F65F145B23445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4a:e1:e5:92:58:b5:1f:6e:d6:46:db:6d:e9:
                    0f:65:1f:c5:10:c7:83:a6:d6:b0:63:fe:82:75:11:
                    01:12:e5:2e:90:18:5b:ff:d5:b7:1a:28:19:66:11:
                    b7:e6:f4:5e:da:a4:f3:05:16:fe:2c:35:24:c2:e0:
                    55:95:2e:42:0d:ce:69:0d:f1:e2:d2:99:5d:74:d9:
                    37:0b:8d:83:da:07:e6:78:6e:67:55:1d:90:7f:3f:
                    b5:4e:ca:0b:ca:d5:48:07:d1:64:23:7a:2d:d8:b8:
                    a0:9b:37:a4:6b:ea:73:f6:5a:cc:ea:57:0e:24:05:
                    d4:1b:0c:62:65:4a:90:bb:ed:e4:4a:31:22:e2:d0:
                    a1:1a:89:89:bc:f1:4f:4a:ff:c9:64:4a:70:06:16:
                    cd:55:16:37:65:88:e5:38:fd:58:1b:47:ae:05:40:
                    af:49:3a:82:9e:5f:4d:96:19:21:e8:24:0f:15:6f:
                    7a:ac:17:a2:b0:67:05:38:91:6d:2f:40:09:75:60:
                    ed:70:16:e4:e9:47:34:32:96:c4:cb:f7:a8:11:8a:
                    1f:61:4f:66:42:44:67:c9:25:84:56:59:3d:0d:fa:
                    5c:7a:c0:a8:ea:a8:2a:2c:a2:c8:c8:a5:cd:1f:06:
                    4b:b0:94:10:f5:e3:28:38:48:3e:cc:bc:b3:ed:5b:
                    76:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:77:A2:0F:1C:1A:1B:05:1B:F9:59:4B:1F:65:F1:45:B2:34:45
            X509v3 Authority Key Identifier:
                keyid:4F:65:CB:A6:32:67:12:8A:D0:A2:76:26:8D:43:67:3E:12:C2:C4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/4F65CBA63267128AD0A276268D43673E12C2C422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F65CBA63267128AD0A276268D43673E12C2C422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/1/34352e3136362e3139392e302f32342d3234203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:d4:09:55:f6:f3:09:88:24:4b:98:63:05:7f:85:f1:0e:52:
         7a:6e:e6:41:58:c8:20:8b:89:dc:e1:9f:03:1b:30:22:fc:e9:
         7e:b6:be:ea:17:3b:f4:e8:5a:49:65:02:e3:f5:39:f1:2a:89:
         08:0c:0b:f3:9c:bd:60:7c:29:96:57:c1:47:5d:9b:8f:41:c5:
         72:62:a2:73:9c:1b:bd:e7:7c:c9:49:b5:1c:23:ee:31:7b:4c:
         60:31:d8:c7:0c:50:39:48:07:66:31:9d:83:cd:0b:b8:1d:f2:
         22:f6:4b:f6:87:c9:de:6f:1b:d4:44:f7:28:3c:c1:a0:65:44:
         3b:0a:f1:ef:de:64:5f:a8:c1:cf:f9:86:c6:0b:d5:c1:94:cb:
         8f:59:bb:6c:0d:a5:f8:8b:a1:fd:6b:e2:ce:8a:87:17:09:b4:
         59:5e:69:62:d3:53:91:13:a9:17:dc:0b:6e:75:ac:de:58:e1:
         06:06:da:42:a4:60:fe:55:2c:1f:98:2a:b1:17:12:ac:aa:05:
         0d:c4:98:c6:72:ce:2f:d6:e6:0b:5b:d4:e8:cc:93:00:7a:fb:
         d8:c8:39:b8:38:35:c0:86:f4:23:80:43:ed:27:b3:1a:e3:b5:
         80:96:49:05:16:92:06:8f:ab:40:46:c2:bf:37:be:f2:dd:4c:
         c3:c3:7d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 05:42:35 2024 by rpki-client on console-ams.rpki-client.org