Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa
File:                     34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa (raw, json)
Hash identifier:          42H1GNuh4/uDKdmfB5xh6m/fvZdzbXb6Kf5Nu2dlf74=
Subject key identifier:   2F:5E:2C:24:07:BB:5B:28:85:AC:A2:79:B1:10:E4:78:9C:11:DF:85
Certificate issuer:       /CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
Certificate serial:       55F4F7FE8D18BD50E0AB40A325D8FC1F26F3A2B8
Authority key identifier: BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa
Signing time:             Fri 21 Jun 2024 16:37:19 +0000
ROA not before:           Fri 21 Jun 2024 16:32:19 +0000
ROA not after:            Fri 20 Jun 2025 16:37:19 +0000
asID:                     267347
IP address blocks:        45.233.182.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f4:f7:fe:8d:18:bd:50:e0:ab:40:a3:25:d8:fc:1f:26:f3:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB
        Validity
            Not Before: Jun 21 16:32:19 2024 GMT
            Not After : Jun 20 16:37:19 2025 GMT
        Subject: CN=2F5E2C2407BB5B2885ACA279B110E4789C11DF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:da:9a:82:fb:f6:ba:be:2b:26:c4:af:92:
                    ce:f1:b0:d2:f5:7d:4b:9b:43:c7:31:ec:5b:25:5b:
                    37:0f:b9:7a:bc:bd:07:a3:fc:35:bf:cd:5c:38:69:
                    5a:41:1f:f2:c3:70:9f:a5:cc:1d:fa:c9:64:96:44:
                    09:df:7f:e4:80:e6:ed:03:08:ab:01:01:df:4e:7e:
                    7e:a0:bc:d0:27:3e:35:bb:51:eb:15:a8:6c:95:4e:
                    d8:1a:4a:8e:97:ca:8f:bf:c1:f0:35:5b:f7:45:85:
                    4d:1c:8c:24:2e:fb:01:65:96:1b:89:4e:95:01:af:
                    c5:f2:3d:5c:1b:bc:81:84:06:85:21:15:9c:73:88:
                    fc:8f:e9:1c:2c:44:b1:ea:a8:3e:c4:66:5e:b4:b8:
                    6a:4e:9a:ad:5c:6e:df:3d:28:ff:5b:b5:64:9d:be:
                    a2:ba:99:5a:2b:cf:f5:15:2d:a8:b6:e5:d2:c2:94:
                    5d:92:9f:09:4b:64:85:c5:79:78:18:ad:ce:ab:b5:
                    d8:85:f3:98:b6:f7:00:19:af:9c:b0:4d:46:ff:2b:
                    98:eb:45:ef:aa:79:8b:87:16:ab:c9:6b:96:ac:b9:
                    40:a2:6f:9c:9f:11:08:1b:5e:fd:c9:9d:3d:24:2d:
                    37:69:a0:60:a9:7c:19:b6:08:16:43:d8:29:d8:af:
                    a4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5E:2C:24:07:BB:5B:28:85:AC:A2:79:B1:10:E4:78:9C:11:DF:85
            X509v3 Authority Key Identifier:
                keyid:BC:AF:A7:3B:9C:61:B9:3E:7B:0F:85:61:B2:06:E9:0B:D6:B2:F8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCAFA73B9C61B93E7B0F8561B206E90BD6B2F8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8e:c1:92:b4:62:30:4c:7c:f9:04:d8:e5:45:80:4e:7b:25:
         3d:d1:2a:63:a8:08:3b:d9:9f:ad:1a:97:b0:38:e2:ff:1d:d8:
         c5:6b:62:30:5b:6c:c5:8f:b3:5a:f9:a9:d5:61:3c:b6:3c:76:
         6e:8c:c4:43:a0:a1:ec:1a:fe:63:35:66:5c:16:77:a0:5b:d3:
         2e:9b:d3:de:56:e6:80:9a:d2:94:a1:4a:3a:06:cb:4f:e3:5f:
         2a:b9:b9:eb:42:f5:a9:e7:0c:ee:c6:b8:73:e0:7c:c9:53:7b:
         80:4a:78:ef:52:e9:82:2a:c0:70:c2:fa:75:49:aa:4e:7f:ce:
         38:f5:48:ec:77:f5:a2:c1:4b:b4:df:cb:14:82:42:f1:03:d0:
         7b:3c:ed:39:48:62:4d:d1:eb:e5:b4:18:0d:c9:1c:90:26:05:
         40:ed:14:3d:77:72:a9:8e:59:31:26:e5:62:4f:14:5d:e0:46:
         08:42:f2:f2:e4:33:3d:79:8a:ba:46:e3:3c:27:94:53:05:d9:
         6e:d6:ee:37:f8:85:5a:e4:3a:60:2f:21:3c:a1:0c:0d:d8:5d:
         a8:a7:b7:a0:c1:2a:b5:05:25:8b:d4:f3:ef:73:1f:15:16:57:
         6d:14:bd:b4:40:73:b5:2a:48:ce:29:60:73:d8:0b:38:d5:f0:
         fa:ba:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 10:44:42 2024 by rpki-client on console-fra.rpki-client.org