Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa
File:                     34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa (raw, json)
Hash identifier:          tn2NypTNFPPblkHVP0n556GS/nUf/MNCmDXnVmyU2lk=
Subject key identifier:   3E:E2:42:61:DB:09:92:E5:77:09:E1:E2:E1:38:08:C6:D1:9E:52:69
Certificate issuer:       /CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
Certificate serial:       4F9A383A6FAD1057A5356B51C9EA0D5CFE7B7819
Authority key identifier: BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa
Signing time:             Wed 10 Apr 2024 13:16:48 +0000
ROA not before:           Wed 10 Apr 2024 13:11:48 +0000
ROA not after:            Wed 09 Apr 2025 13:16:48 +0000
asID:                     267395
IP address blocks:        45.233.196.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9a:38:3a:6f:ad:10:57:a5:35:6b:51:c9:ea:0d:5c:fe:7b:78:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDA2C36D7477B1F475B472C3C370EAC274EA0272
        Validity
            Not Before: Apr 10 13:11:48 2024 GMT
            Not After : Apr  9 13:16:48 2025 GMT
        Subject: CN=3EE24261DB0992E57709E1E2E13808C6D19E5269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:0d:fe:10:57:6e:ac:f2:18:c7:d3:43:4a:
                    e7:91:d2:7c:d9:37:28:f1:13:3d:c6:c1:cc:2e:29:
                    8b:7c:b6:de:30:70:cd:80:dd:c2:23:0e:b2:cf:3e:
                    09:33:d7:7f:d2:a2:f3:08:d6:50:ae:61:32:f6:c9:
                    d5:15:c5:75:f3:b4:d3:6e:7e:13:7b:6c:f0:4e:7a:
                    e2:0a:42:3f:43:2d:61:34:b2:04:45:83:15:8e:5a:
                    b7:45:d6:9b:e6:e0:b6:0f:41:df:fa:5f:c9:23:44:
                    6d:11:b1:f5:93:04:b4:ad:c0:f6:15:8d:06:e7:ac:
                    e3:a1:51:4a:b9:65:c1:71:c0:45:fc:49:54:ea:43:
                    29:22:ad:2e:aa:a2:17:43:fa:30:bb:b2:69:19:25:
                    6f:19:c4:36:89:a2:f3:90:f6:65:74:7b:d3:25:48:
                    46:7f:f1:3e:8b:6d:75:a1:b5:31:25:45:2a:6d:11:
                    dc:b6:e7:a1:dc:f1:93:e6:3d:5a:17:21:0c:78:02:
                    fc:c0:44:90:9d:70:ed:6e:ac:6f:9e:ae:75:36:d8:
                    be:fb:d7:25:52:5d:60:68:5e:8d:01:48:37:86:67:
                    54:fd:8c:89:ef:b8:af:53:e6:77:a3:e8:31:d2:ef:
                    63:b9:70:ab:91:cb:04:1e:be:c8:a5:fc:a3:a4:3e:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E2:42:61:DB:09:92:E5:77:09:E1:E2:E1:38:08:C6:D1:9E:52:69
            X509v3 Authority Key Identifier:
                keyid:BD:A2:C3:6D:74:77:B1:F4:75:B4:72:C3:C3:70:EA:C2:74:EA:02:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDA2C36D7477B1F475B472C3C370EAC274EA0272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/1/34352e3233332e3139362e302f32322d3234203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:1b:61:04:03:01:92:8b:02:1b:31:19:39:0e:b4:2d:35:
         6f:28:31:06:0c:52:0b:48:02:3a:31:c5:cf:66:05:d3:be:c3:
         35:73:be:70:36:9b:a4:ef:c5:15:b9:02:2e:8d:41:03:1c:36:
         8f:7c:59:2d:e4:c0:00:3b:59:36:b7:04:cb:df:cf:ab:fe:9d:
         af:3a:63:d8:e2:a1:68:03:0f:c8:7e:5f:3a:2f:d6:35:c7:2b:
         e1:09:f8:3e:c9:f7:5c:96:0c:55:12:ab:29:85:a8:38:b3:52:
         d9:00:ee:b2:9f:4a:8f:de:69:07:4b:e3:d6:e7:48:20:dd:fa:
         40:84:d5:33:e6:d5:d4:72:83:a0:b7:77:5f:91:24:94:b0:cf:
         ad:94:ea:f2:25:4e:58:9a:09:66:37:7f:ec:a6:ce:5a:b7:dc:
         f9:30:b8:26:40:c4:c4:1b:a0:f1:e5:28:97:9c:7e:b4:49:7d:
         8a:1a:f3:3b:d6:69:77:29:bd:b0:56:fd:dc:f2:5d:f3:5b:7d:
         2c:ae:be:78:8f:aa:5c:ee:a6:a7:ae:e1:de:f4:b3:bc:fd:b7:
         2f:ff:57:bc:63:b7:59:ab:f7:42:4f:87:51:48:29:3a:a7:3b:
         43:3a:59:34:94:5f:11:af:e4:c5:0f:44:f7:16:92:a3:e7:81:
         aa:24:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:15 2024 by rpki-client on console-ams.rpki-client.org