Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32332d3233203d3e20323639343939.roa
File:                     34352e3138362e3135382e302f32332d3233203d3e20323639343939.roa (raw, json)
Hash identifier:          bxoVVvbMOn6fZv5RxLTakWYkNto0wj6IrJ4dnCw8ss0=
Subject key identifier:   05:F2:D7:94:94:7E:6D:53:22:45:F6:23:16:0D:E6:2C:C9:E0:DF:A8
Certificate issuer:       /CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
Certificate serial:       14BA270E48D00A133E89DD5AADD92D2CD4E3DBE5
Authority key identifier: 21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32332d3233203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 19:37:13 +0000
ROA not before:           Thu 05 Sep 2024 19:32:13 +0000
ROA not after:            Thu 04 Sep 2025 19:37:13 +0000
asID:                     269499
IP address blocks:        45.186.158.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ba:27:0e:48:d0:0a:13:3e:89:dd:5a:ad:d9:2d:2c:d4:e3:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F66D4308816E7B47F6912EBBE7513585A59B9D
        Validity
            Not Before: Sep  5 19:32:13 2024 GMT
            Not After : Sep  4 19:37:13 2025 GMT
        Subject: CN=05F2D794947E6D532245F623160DE62CC9E0DFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:a9:aa:9b:8c:a9:6f:ef:f4:1f:14:a3:a3:
                    80:eb:1d:c1:b8:3a:1e:cf:43:68:f5:79:8a:c8:d8:
                    9a:e6:f4:b7:76:5c:d8:f2:14:f9:67:49:cb:0f:ff:
                    4e:9c:36:e5:ad:86:cd:22:aa:81:63:6b:48:b2:05:
                    a0:e8:e9:e8:2c:80:af:f4:d9:dc:16:2a:96:e2:eb:
                    81:34:e9:75:d2:51:0a:af:37:1c:10:c0:a3:77:38:
                    8f:e1:cb:a8:0e:6a:dc:99:c2:5b:b1:bc:47:02:2f:
                    0e:49:d8:c9:1b:5a:e7:2a:f6:bb:c2:37:cb:a8:89:
                    93:04:5a:87:7f:5f:69:71:c1:f7:a6:6c:2a:dd:ec:
                    3a:8b:ff:31:3f:ff:03:00:de:7c:ba:da:2c:26:fd:
                    50:92:6e:91:79:2e:55:aa:1e:a0:f7:4f:87:6f:c5:
                    07:dc:7c:9e:0b:27:3d:ac:0f:7a:89:1d:5a:43:a3:
                    46:42:88:7b:10:ce:ef:50:a4:7d:e7:53:c9:e8:0c:
                    9d:4f:9b:59:49:4a:f4:f8:df:bd:39:cf:7b:19:52:
                    fe:76:df:81:29:07:05:04:32:cd:c1:e0:c6:7a:fe:
                    f3:89:c3:d1:ed:70:85:6f:85:51:4e:03:82:40:3f:
                    a6:b4:57:fd:db:89:95:3a:7b:46:80:94:59:3f:22:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F2:D7:94:94:7E:6D:53:22:45:F6:23:16:0D:E6:2C:C9:E0:DF:A8
            X509v3 Authority Key Identifier:
                keyid:21:F6:6D:43:08:81:6E:7B:47:F6:91:2E:BB:E7:51:35:85:A5:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21F66D4308816E7B47F6912EBBE7513585A59B9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/1/34352e3138362e3135382e302f32332d3233203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:45:99:fe:e4:01:c2:4e:f6:87:62:0d:b0:8f:86:b6:3b:
         24:39:8a:21:2c:f9:ca:32:7c:64:40:24:cb:f6:c4:8d:50:6f:
         7c:fa:e4:3d:d3:46:92:7d:c0:cd:ad:60:a2:81:27:df:58:31:
         86:0d:9c:96:f3:cb:a9:a0:60:97:5a:11:2c:d5:73:e0:f2:b3:
         68:d5:77:4e:3a:2b:84:2c:76:0d:ba:df:6d:7a:b8:29:69:11:
         de:aa:66:ac:c8:5e:fd:67:b6:11:e6:06:7f:4f:0f:3f:b3:e9:
         02:3a:14:df:b0:20:22:da:22:41:e3:d0:ff:89:06:3f:7f:29:
         12:b4:73:bd:1c:89:e3:8d:53:e6:7d:a1:46:4a:48:1d:d1:42:
         31:2b:9d:b7:14:52:9f:4c:50:99:1e:fa:c7:15:a7:27:87:5c:
         2d:d6:ca:81:0f:1a:1e:75:44:f3:17:db:49:8e:f5:60:42:d8:
         b8:74:2c:77:b1:1d:6b:7c:79:95:d8:8b:7c:41:13:34:85:28:
         81:4b:21:33:07:9d:04:49:ff:aa:fb:38:c8:5e:e5:64:68:0a:
         e1:f8:91:3c:bc:ba:2b:d9:09:df:09:5b:eb:e9:ec:66:32:94:
         ec:90:14:e7:70:87:84:48:a5:cc:e2:1e:ca:85:25:4b:d3:5f:
         0b:26:b7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:41:12 2024 by rpki-client on console-fra.rpki-client.org