Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa
File:                     34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa (raw, json)
Hash identifier:          wdx7P1vhf1FcPXOfkY7EvMgwdqclQX4aySwiLDxJO30=
Subject key identifier:   72:6D:80:52:8E:38:B0:B8:48:5D:63:84:EA:15:8D:16:CE:DE:7D:F3
Certificate issuer:       /CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
Certificate serial:       2A275C1A48E28F88FD888B946F302038668FC094
Authority key identifier: 27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa
Signing time:             Mon 20 May 2024 20:13:42 +0000
ROA not before:           Mon 20 May 2024 20:08:42 +0000
ROA not after:            Mon 19 May 2025 20:13:42 +0000
asID:                     271657
IP address blocks:        45.225.112.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:27:5c:1a:48:e2:8f:88:fd:88:8b:94:6f:30:20:38:66:8f:c0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27F3762BD620EAE6FD757763F0CCC22C5A38EF36
        Validity
            Not Before: May 20 20:08:42 2024 GMT
            Not After : May 19 20:13:42 2025 GMT
        Subject: CN=726D80528E38B0B8485D6384EA158D16CEDE7DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:53:92:75:15:4d:82:42:57:a1:07:3b:ec:
                    da:fe:e3:ea:6f:a2:89:b9:e5:31:eb:ab:a1:29:73:
                    23:c7:48:c3:95:95:d0:ad:6c:8c:cd:38:53:0d:85:
                    0f:4d:3c:9e:a5:bc:4d:88:b1:2c:b7:e1:ea:a0:4a:
                    e7:b1:f5:4c:ba:ca:d0:f0:b3:36:00:59:7e:19:2d:
                    71:7e:df:27:70:71:e0:ff:03:d7:b4:c9:da:53:eb:
                    f3:0e:99:f1:5e:9b:d0:16:5f:3b:1f:b2:d4:59:8d:
                    84:29:64:e0:b0:af:1e:a4:f1:50:c8:68:d4:a3:a6:
                    31:32:4d:70:b2:bc:79:5e:41:d7:8c:04:17:f4:51:
                    e8:00:35:7f:4e:b6:8f:ac:67:cd:e3:a0:78:51:6d:
                    bc:07:01:01:f7:87:8e:f0:35:b1:fc:21:c1:2d:f8:
                    6a:3d:46:26:b5:e6:de:62:9e:43:bf:2d:d4:98:b5:
                    55:cc:26:04:c2:a7:12:64:3e:ff:39:df:f2:88:f5:
                    83:f2:b1:50:7a:9d:65:f3:f2:19:fd:c8:6e:37:f9:
                    21:47:47:c3:82:e6:17:48:88:80:8e:3d:bd:be:b4:
                    de:5d:e8:eb:31:8d:85:b7:66:16:ab:15:c2:92:72:
                    3f:7a:84:cf:6f:58:95:36:de:bd:cc:cd:e5:e2:68:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:80:52:8E:38:B0:B8:48:5D:63:84:EA:15:8D:16:CE:DE:7D:F3
            X509v3 Authority Key Identifier:
                keyid:27:F3:76:2B:D6:20:EA:E6:FD:75:77:63:F0:CC:C2:2C:5A:38:EF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27F3762BD620EAE6FD757763F0CCC22C5A38EF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bvmdm8CZfmxDpcffJgqd37U56ZmfXmxeNS7WTCcWx5QJ/0/34352e3232352e3131322e302f32322d3234203d3e20323731363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:0d:97:ec:2c:4f:d7:e5:41:e9:34:07:61:30:46:cc:56:38:
         78:12:42:ee:e0:75:af:05:26:33:c4:23:70:d1:05:fa:f2:39:
         82:bf:99:1a:23:fa:a8:f4:3b:b2:d9:2c:be:41:41:46:c8:dc:
         a4:e8:83:e0:8a:d3:ce:20:00:03:53:05:9a:db:d9:0d:1f:f4:
         16:da:7d:65:59:45:8f:42:7b:db:89:32:f7:02:58:2e:ca:b6:
         d8:59:6f:c2:98:22:37:ab:f9:e6:67:7b:b1:fa:03:99:c7:01:
         a1:27:b3:b4:05:3a:8b:ac:8a:58:0b:4f:24:f9:e1:a8:8b:0b:
         f3:8b:c2:d9:76:d6:fd:77:a2:a2:cf:40:57:b5:df:8f:66:1c:
         72:0e:50:9f:ea:dc:20:50:46:35:23:5d:65:00:9e:3d:3d:c5:
         ae:b9:96:79:29:3d:a3:b7:25:4d:df:f0:9a:87:a2:f4:60:cb:
         86:7c:5e:f2:18:e2:df:1d:19:fd:6e:c5:6b:37:4a:cf:bf:c9:
         7f:5b:ed:e8:c1:48:0b:0d:37:5d:3a:6b:52:fa:b2:10:c4:83:
         7f:d5:9a:21:3d:51:02:3b:6e:62:15:e6:5f:42:c7:e3:f9:15:
         02:17:db:9f:6e:5e:fe:71:da:08:7f:9d:fb:11:cd:6e:53:d6:
         49:e3:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:04 2024 by rpki-client on console-ams.rpki-client.org