Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa
File:                     34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa (raw, json)
Hash identifier:          VW+3QdQCDCdYyz1qbpfug6+WDwjmOSB/NX4Po+xDeWk=
Subject key identifier:   C2:23:46:C2:EE:58:8B:17:DA:D5:D9:98:D0:73:DB:AC:3F:30:B2:46
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       56F1964F8CB6E99A67FF3350CDA8B6A85FC6ADB3
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:13 +0000
ROA not before:           Thu 05 Sep 2024 19:32:13 +0000
ROA not after:            Thu 04 Sep 2025 19:37:13 +0000
asID:                     269499
IP address blocks:        45.186.156.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:96:4f:8c:b6:e9:9a:67:ff:33:50:cd:a8:b6:a8:5f:c6:ad:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:13 2024 GMT
            Not After : Sep  4 19:37:13 2025 GMT
        Subject: CN=C22346C2EE588B17DAD5D998D073DBAC3F30B246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:82:a8:5a:8f:f4:02:75:eb:f4:af:50:13:
                    ed:ab:73:91:4a:b7:d3:5a:78:fb:06:e7:3c:76:92:
                    93:4d:1e:25:22:4c:44:88:ca:b7:f6:ac:83:67:2e:
                    bb:16:a5:3c:e9:0d:77:17:9c:32:11:b4:0d:47:59:
                    3c:7c:12:15:46:62:30:fe:52:a0:51:24:75:75:39:
                    5d:66:55:d8:5b:6d:40:7b:53:ae:11:ff:fd:48:06:
                    0c:e3:a2:4e:73:be:6b:2d:b8:0f:f8:c4:1d:cf:50:
                    62:8e:a3:90:a0:a0:01:64:d4:fe:65:b9:55:ef:be:
                    2e:53:bd:5c:85:fa:41:f4:5c:3e:dd:a4:b4:df:59:
                    d7:8d:01:a3:e6:e4:c1:f5:64:c2:76:18:67:30:51:
                    a0:26:3a:8b:26:ad:99:6f:aa:47:23:ca:d0:b3:3d:
                    56:17:2b:3b:51:1d:c5:1f:3d:ab:f9:9a:18:21:91:
                    59:cf:a4:a8:56:0c:50:e9:dd:9c:ff:78:4f:40:cd:
                    4c:f2:7a:b8:f1:ad:14:dd:25:a0:8c:a6:69:81:6e:
                    6b:ab:3e:76:00:cd:8f:66:55:12:58:4a:4c:d4:f1:
                    3a:ac:1d:14:3f:ab:6a:c0:b0:7f:3a:e7:6c:07:a1:
                    d4:08:0d:16:44:8b:ce:8c:c4:fc:f0:63:1b:94:c7:
                    92:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:23:46:C2:EE:58:8B:17:DA:D5:D9:98:D0:73:DB:AC:3F:30:B2:46
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:10:fe:3a:11:7a:a1:ff:9d:e4:29:63:06:03:43:f0:e9:
         8a:5e:8c:7f:6f:4d:ff:6a:1c:bb:62:f7:b6:bc:4d:00:f1:63:
         a9:bd:7d:71:ea:05:f8:98:7b:87:7d:ed:60:20:bd:5f:18:58:
         cf:dc:f3:12:57:b7:5a:4e:13:7a:b4:9e:b2:9a:0d:42:1c:40:
         50:43:79:48:a6:78:71:f6:39:78:42:23:ea:34:42:11:c3:c2:
         4d:d8:04:38:81:2d:80:ec:21:78:91:1b:ea:d7:c2:6e:72:7c:
         c4:48:93:f1:dd:6b:59:2c:16:67:ba:4c:0c:fb:74:2b:fe:36:
         cb:ec:a0:90:3c:db:15:4e:dd:d8:51:61:da:22:bf:55:a1:b9:
         f2:21:06:dc:31:b2:68:f6:90:cf:9d:dd:40:10:38:e4:62:66:
         90:a1:c2:9d:7b:7e:e4:ea:a3:3c:16:c1:c6:38:c2:1f:19:cf:
         78:bc:e4:79:6e:ac:88:fa:4c:1e:bb:fa:35:d8:5a:a1:ef:75:
         dc:ed:5a:b2:cd:71:bc:ba:d1:60:00:13:9c:c2:82:ca:8b:2a:
         cc:0e:14:06:7d:32:91:ed:7d:b9:51:d4:e0:a7:ad:12:48:b1:
         9d:c4:28:cd:91:6d:32:8f:0e:79:21:89:25:22:03:d4:69:70:
         b1:6f:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org