Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
File:                     34352e37302e3136342e302f32322d3234203d3e20323637353738.roa (raw, json)
Hash identifier:          JHfy0nbV/5bdiIHimaQaec4kjx9pbULAg8s4+UjJFcc=
Subject key identifier:   83:86:FB:7E:AE:23:FD:3C:31:1B:1C:34:9F:CE:5B:29:7C:1B:58:2D
Certificate issuer:       /CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
Certificate serial:       54F3A21671F396F380AA778D65AFD09F3FDC8AD7
Authority key identifier: AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa
Signing time:             Fri 03 May 2024 14:18:44 +0000
ROA not before:           Fri 03 May 2024 14:13:44 +0000
ROA not after:            Fri 02 May 2025 14:18:44 +0000
asID:                     267578
IP address blocks:        45.70.164.0/22 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f3:a2:16:71:f3:96:f3:80:aa:77:8d:65:af:d0:9f:3f:dc:8a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2681D1C972CA6974EFD3586F20F15D9E6AFE07
        Validity
            Not Before: May  3 14:13:44 2024 GMT
            Not After : May  2 14:18:44 2025 GMT
        Subject: CN=8386FB7EAE23FD3C311B1C349FCE5B297C1B582D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e9:5e:bf:72:7d:74:eb:89:32:4d:45:0c:9b:
                    b3:03:3a:9d:ad:fd:81:09:b2:df:bd:b9:9b:12:12:
                    00:da:6a:d3:1f:13:63:92:93:ef:87:2f:5d:43:8a:
                    3a:6a:06:4c:d8:4d:74:d9:12:f0:52:8f:e7:4d:0b:
                    dd:b1:e8:b3:80:8e:73:55:72:e7:62:5f:2e:53:49:
                    f9:30:e0:ff:ae:ba:29:fa:d0:3d:b0:89:e7:5a:0a:
                    93:75:06:3d:c9:59:fd:98:1e:25:db:21:3b:48:32:
                    76:81:cb:14:53:ff:41:04:58:4e:e2:0b:3a:b2:61:
                    6e:f5:e4:d7:27:c2:1d:7b:4c:71:bc:17:b6:a1:c6:
                    ae:74:da:3d:51:7a:c1:26:23:4a:fe:5b:57:df:ad:
                    41:76:2f:6f:e2:82:a9:0e:a2:45:7d:8b:1f:a0:49:
                    21:fc:1d:64:4f:67:8d:aa:e4:9f:b1:51:af:6b:29:
                    82:4b:7a:f3:b7:91:25:09:55:7d:34:2d:88:ec:b3:
                    ab:bb:11:ed:33:bf:b1:17:0a:c5:c6:e3:ee:7e:db:
                    bb:65:0b:38:0b:53:dd:3f:ed:4f:e0:34:ba:ad:5d:
                    50:76:69:f9:92:41:f7:a3:82:95:76:ff:ad:dc:7d:
                    f5:b2:ed:67:22:9d:29:ad:eb:d5:49:f9:e6:86:a7:
                    7b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:86:FB:7E:AE:23:FD:3C:31:1B:1C:34:9F:CE:5B:29:7C:1B:58:2D
            X509v3 Authority Key Identifier:
                keyid:AD:26:81:D1:C9:72:CA:69:74:EF:D3:58:6F:20:F1:5D:9E:6A:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD2681D1C972CA6974EFD3586F20F15D9E6AFE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/34352e37302e3136342e302f32322d3234203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:1c:e8:50:43:28:58:6c:c1:c8:f6:96:fc:4d:be:39:53:
         09:a8:41:a5:27:ca:b7:0d:e3:6b:56:26:b7:c3:5c:07:c5:1e:
         9c:b9:09:31:99:71:96:10:55:9f:f7:4d:fd:46:11:00:c6:cd:
         54:4b:7b:45:e5:12:17:29:44:0c:0c:30:e6:a7:65:6c:81:66:
         4a:68:36:54:b2:42:cb:e5:90:01:1f:9a:5e:ca:17:b1:42:47:
         44:b4:e1:d2:fb:b0:61:5e:38:af:07:85:95:e9:74:63:3f:af:
         62:bf:e5:6b:bd:55:39:15:07:b6:bd:67:2b:3e:42:0f:e7:30:
         fe:a0:84:16:da:70:fe:5c:c7:1e:c8:c1:43:6f:6a:92:28:ee:
         6e:b7:58:01:9d:34:6c:12:aa:91:02:c9:29:ed:92:9b:99:b0:
         d5:d4:bc:5c:58:64:9f:b2:67:c2:f9:aa:0b:d1:a7:49:67:b3:
         bb:f9:53:e9:9d:16:64:d4:58:da:99:08:65:81:dd:e1:dd:ae:
         f7:b0:c8:24:36:db:3c:b6:b1:13:19:23:a5:2d:bc:6f:e4:10:
         6a:08:cd:32:67:42:7b:7c:13:56:1e:f9:41:09:b8:e8:b6:ca:
         4f:fc:0b:69:c0:39:0b:8c:bd:a0:bd:63:65:24:31:75:d9:80:
         af:65:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org