Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
File:                     34352e3136332e39362e302f32322d3234203d3e20323638353535.roa (raw, json)
Hash identifier:          eVlITEvMUztw72rtFJLv2DYw/pUUXT09GIoh0rnYr8g=
Subject key identifier:   67:9F:50:BC:62:C5:79:36:6F:3E:CB:9B:22:FF:6D:A8:A9:E3:9F:F6
Certificate issuer:       /CN=793862D171C875C3F184432DDADCC8219F51CADF
Certificate serial:       10F142CCD4CCF029D64B1AE4B97930A36FA62483
Authority key identifier: 79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa
Signing time:             Thu 04 Apr 2024 19:59:34 +0000
ROA not before:           Thu 04 Apr 2024 19:54:34 +0000
ROA not after:            Thu 03 Apr 2025 19:59:34 +0000
asID:                     268555
IP address blocks:        45.163.96.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f1:42:cc:d4:cc:f0:29:d6:4b:1a:e4:b9:79:30:a3:6f:a6:24:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793862D171C875C3F184432DDADCC8219F51CADF
        Validity
            Not Before: Apr  4 19:54:34 2024 GMT
            Not After : Apr  3 19:59:34 2025 GMT
        Subject: CN=679F50BC62C579366F3ECB9B22FF6DA8A9E39FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:b7:08:82:39:0e:ff:32:eb:8e:94:f0:8d:
                    f6:e7:54:81:1d:11:5b:23:3a:64:6f:99:6e:6a:42:
                    af:3d:0c:81:b4:e0:a9:7b:37:99:be:3c:d4:c2:65:
                    08:a2:54:a5:48:72:9b:eb:a1:98:a3:81:8f:22:57:
                    be:72:10:51:fe:93:3d:35:91:4d:bb:fd:b1:29:59:
                    6e:6b:21:78:ea:94:c5:a5:54:87:fb:31:80:db:6d:
                    aa:1b:b0:15:a5:e6:7e:f3:3f:6c:c7:ad:44:61:22:
                    bf:b7:64:24:8f:c7:7c:34:19:da:bd:ec:ce:29:5b:
                    8c:dc:f9:f4:92:a6:2f:5b:27:ee:9e:cf:bb:52:07:
                    9d:c3:9b:19:ba:79:82:15:e3:bb:10:01:5a:8d:ad:
                    75:b0:2a:5e:5c:a7:6b:7b:d6:e4:ba:82:e4:5b:ef:
                    79:87:1c:3d:ea:26:f8:0f:b9:f1:03:e0:c8:c2:b4:
                    bb:8b:ad:b6:e5:db:00:43:68:ce:3d:95:8d:58:07:
                    d6:28:75:b9:15:0d:82:2e:fd:b4:07:88:71:8e:42:
                    d6:5a:76:e3:c8:37:d4:a1:87:94:bc:db:e7:a3:0c:
                    d4:93:22:30:78:64:d9:c5:8e:f9:27:05:2e:c0:3c:
                    88:52:d6:86:29:66:da:43:78:b2:30:b7:8a:77:61:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9F:50:BC:62:C5:79:36:6F:3E:CB:9B:22:FF:6D:A8:A9:E3:9F:F6
            X509v3 Authority Key Identifier:
                keyid:79:38:62:D1:71:C8:75:C3:F1:84:43:2D:DA:DC:C8:21:9F:51:CA:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/793862D171C875C3F184432DDADCC8219F51CADF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793862D171C875C3F184432DDADCC8219F51CADF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/1/34352e3136332e39362e302f32322d3234203d3e20323638353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:a5:a4:4e:83:c1:d7:c1:f0:5c:3d:63:d0:ff:4b:d0:23:d1:
         59:aa:50:b5:43:a2:57:73:10:4d:32:13:64:85:3b:b7:bc:fe:
         17:55:05:b9:ff:f9:ad:6c:df:84:21:97:e9:50:f7:c8:03:4c:
         0a:e0:06:29:9d:fe:a5:81:34:56:80:e9:30:0f:5f:18:6c:2d:
         2f:33:f8:d4:a7:5e:21:d4:fd:82:a8:fe:a4:a0:07:ce:0d:a1:
         23:cf:d8:af:c3:68:50:f5:d4:f4:a3:96:ce:51:ea:1e:ce:4a:
         e8:30:ce:90:62:48:ce:a1:12:97:00:61:77:2d:a3:92:e8:cd:
         e4:fd:de:76:ec:a1:9f:6b:4c:1a:0c:d3:b3:5d:3a:03:a9:43:
         48:a5:86:e2:cc:67:d7:f8:5f:1b:23:a0:bb:5b:ad:6a:a7:70:
         f9:88:07:82:0f:11:49:fe:67:25:88:89:16:f1:c0:a2:14:98:
         3f:bd:c9:2b:5d:f6:5d:76:39:d6:1d:71:d6:c8:0c:a0:e8:f0:
         40:7e:27:67:93:5c:62:fb:47:cb:ed:a3:9b:58:52:aa:b7:a5:
         e6:82:f7:1b:21:2f:2e:5c:b7:b2:fb:56:fa:72:ce:82:77:7a:
         ab:90:9e:ac:6a:62:14:b9:0d:86:67:1c:ce:b0:29:1d:21:6b:
         d6:81:e9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 10:04:58 2024 by rpki-client on console-fra.rpki-client.org